[ovirt-users] Re: Using third-party certificate: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Please, any help with this? El 29/9/21 a las 13:21, nico...@devels.es escribió: Hi, I'm making a bare metal oVirt installation, version 4.4.8. 'ovirt-engine' command ends well, however, we're using a third-party certificate (from LetsEncrypt) both for the apache server and the ovirt-websocket-proxy. So we changed configuration files regarding httpd and ovirt-websocket-proxy. Once changed the configurations, if I try to log in to the oVirt engine, I get a "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" error. In prior versions we used to add the chain to the /etc/pki/ovirt-engine/.truststore file, however, simply listing the current certificates seems not to be working on 4.4.8. # LANG=C keytool -list -keystore /etc/pki/ovirt-engine/.truststore -alias intermedia_le -storepass mypass keytool error: java.io.IOException: Invalid keystore format Is there something I'm missing here? Thank ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VWVBQGIWJSPWVTV5UK2I2VXBNDV6GSS/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VKYBE6TJZFMAXX2G6GPMXIQYW7F5LABY/
[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.
Hi, As I see this is an issue hard to get help on, I'll ask it otherwise: Alternatively to backup and restore, is there a way to migrate an oVirt-manager installation to other machine? We're trying to move the manager machine since the current physical machine is getting short of resources, and we already have a prepared physical host to migrate it to. If there's an alternative way to migrate it, I'd be very grateful if someone could shed some light on it. Thanks. El 2/8/21 a las 13:02, Nicolás escribió: Hi Didi, El 7/4/21 a las 9:27, Yedidyah Bar David escribió: On Wed, Mar 24, 2021 at 12:07 PM Nicolás wrote: Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Can you please check also this thread: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFIADZPL6JOPDETJ23CZ/ What version was used for backup, and what version for restore? For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used. For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used. Did you have a 3rd-party CA cert installed? I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too. Please verify that it was backed up and restored correctly, or manually reinstalled after restore. As per the logs, both processes ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings. I'm attaching an engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in. Thanks for any help regarding this, as I can't figure out what else could be happening. Nicolás Good luck and best regards, -- Didi ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3VPJ5GDTHYOQTBAWLIJR/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/54CDGSH5DOHZJLCKLB625LC2FCFEH47H/
[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.
Hi Didi, El 7/4/21 a las 9:27, Yedidyah Bar David escribió: On Wed, Mar 24, 2021 at 12:07 PM Nicolás wrote: Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Can you please check also this thread: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFIADZPL6JOPDETJ23CZ/ What version was used for backup, and what version for restore? For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used. For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used. Did you have a 3rd-party CA cert installed? I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too. Please verify that it was backed up and restored correctly, or manually reinstalled after restore. As per the logs, both processes ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings. I'm attaching an engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in. Thanks for any help regarding this, as I can't figure out what else could be happening. Nicolás Good luck and best regards, -- Didi engine2.log.tar.gz Description: application/gzip ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3VPJ5GDTHYOQTBAWLIJR/
[ovirt-users] The provided authorization grant for the auth code has expired.
Hi, A time ago I posted a similar question and I couldn't get it solved. I couldn't spend more time on this up until now, so I'm trying again and having the same error, which I'm unable to fix. I would really appreciate some help since I cannot find any documentation for this. I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? I'm also attaching a screenshot. Thanks. Nicolás ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/37DLCDTPAOZHUQS76KNP4HW7V42KMNMW/
[ovirt-users] Re: VM-Pool is already attached to a User
Hi, It's possible that you bumped into: Original bug: https://bugzilla.redhat.com/show_bug.cgi?id=1462236 Downstream clone: https://bugzilla.redhat.com/show_bug.cgi?id=1635337. It has been solved in 4.3.5. Regards, Nicolás El 2/7/21 a las 13:55, Dominique D escribió: I created a VM pool (20 Windows) and the first 6 users took a virtual machine in the VM portal. the following other users have this message "Cannot attach VM to VM-Pool. VM-Pool is already attached to a User" I have 15 users and 20 VMs available, do you know why I have this message ? I have no user registered in the permissions tab of the vm available. ovirt 4.4.1 Thank you. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/BBUPBG4X4TZ5NJC5ZAZO4OJ56MYGS436/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQS46LT4CTV5XCXC3L7OGFBJY3OLY2H2/
[ovirt-users] Re: Faild ovirt-websocket-proxy.
This is your error, which is pretty straightforward: Apr 28 02:03:54ovirt.hostedengine.com ovirt-websocket-proxy.py [1694]: ovirt-websocket-proxy [1694] ERROR run: 554 Error: SSL_ONLY is set but SSL_CERTIFICATE or SSL_KEY file not found. You have to edit your /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf file and set both SSL_CERTIFICATE and SSL_KEY values. This is my config: PROXY_PORT=6100 SSL_CERTIFICATE=/etc/ssl/certs/mycert.cert SSL_KEY=/etc/ssl/private/mycert.key FORCE_DATA_VERIFICATION=False CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True Hope this helps. El 28/4/21 a las 11:00, jesad...@gmail.com escribió: Hello again. After getting the hosted-engine vm back, now I have the following problem. I can't use the graphic console. The websocket-proy fails me. Surely when I update the certificates I have missed some intermediate step, but I do not know how to follow. Anyone know of a link to follow the certificate change procedure in the websocket-proxy service. Thank you. PS: Here I leave the output of the service: ● ovirt-websocket-proxy.service - oVirt Engine websockets proxy Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Wed 2021-04-28 02:03:54 UTC; 7h ago Process: 1694 ExecStart = / usr / share / ovirt-engine / services / ovirt-websocket-proxy / ovirt-websocket-proxy.py --systemd = notify $ EXTRA_ARGS start (code = exited, status = 1 / FAILURE) Main PID: 1694 (code = exited, status = 1 / FAILURE) Apr 28 02:03:53 ovirt.myhostedengine.com systemd [1]: Starting oVirt Engine websockets proxy ... Apr 28 02:03:54 ovirt.myhostedengine.com ovirt-websocket [1694]: 2021-04-28 02: 03: 54,614 + ovirt-websocket-proxy: ERROR run: 554 Error: SSL_ONLY is set but SSL_CERTIFICATE or SSL_KEY file not found. Apr 28 02:03:54ovirt.hostedengine.com ovirt-websocket-proxy.py [1694]: ovirt-websocket-proxy [1694] ERROR run: 554 Error: SSL_ONLY is set but SSL_CERTIFICATE or SSL_KEY file not found. Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: ovirt-websocket-proxy.service: main process exited, code = exited, status = 1 / FAILURE Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: Failed to start oVirt Engine websockets proxy. Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: Unit ovirt-websocket-proxy.service entered failed state. Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: ovirt-websocket-proxy.service failed. Sorry if I say any inconsistencies, but I'm new to this whole ovirt topic. Thanks again. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/27OKNERV7RAKGTI6UWFEVQ4J6JUCUQA2/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/2SIEHDTISAHB6EFEZNJZFWF6DCKMMCVL/
[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.
Hi Shani, El 6/4/21 a las 15:15, Shani Leviim escribió: Hi, Did you try to refresh the page and try again? Yes, several times. Also different browsers with no difference. Can you share a screenshot? Sure. Adding the screenshot in this e-mail. This happens after authenticating like admin (internal) on either the administration panel or the VM portal. Thanks. *Regards, * *Shani Leviim * On Tue, Apr 6, 2021 at 4:20 PM Nicolás <mailto:nico...@devels.es>> wrote: bump... El 26/3/21 a las 8:21, Nicolás escribió: > Please, any help with this? > > El 24/3/21 a las 10:05, Nicolás escribió: >> Hi, >> >> I'm restoring a full ovirt engine backup, having used the --scope=all >> option, for oVirt 4.3. >> >> I restored the backup on a fresh CentOS7 machine. The process went >> well, but when trying to log into the restored authentication system >> I get the following message which won't allow me to log in: >> >> The provided authorization grant for the auth code has expired. >> >> What does that mean and how can it be fixed? >> >> Thanks. >> >> Nicolás >> ___ >> Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> >> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> >> Privacy Statement: https://www.ovirt.org/privacy-policy.html >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/ > ___ > Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> > To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/ ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/N6Q4EEC3KKK7PDXHNUO4EP5QZSG5FBGI/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5372JXMK24HNNOESWBQNJVG3B72MPSL7/
[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.
bump... El 26/3/21 a las 8:21, Nicolás escribió: Please, any help with this? El 24/3/21 a las 10:05, Nicolás escribió: Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Thanks. Nicolás ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/N6Q4EEC3KKK7PDXHNUO4EP5QZSG5FBGI/
[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.
Please, any help with this? El 24/3/21 a las 10:05, Nicolás escribió: Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Thanks. Nicolás ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/
[ovirt-users] Restored engine backup: The provided authorization grant for the auth code has expired.
Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Thanks. Nicolás ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/
[ovirt-users] VM Portal. User can't access the details box
Hi, We're running oVirt 4.1.8. We make an intense use of the VM Portal, as our students use it to access and handle their machines. We're currently having an issue with just one of our users. He claims that he created a VM, and when tried to edit its details (clicking on the pencil), a screen stating that the "VM Portal is experiencing some issues" is shown (screenshot added). I granted a UserRole permission on a user I handle, and I don't experience that problem, I can edit the VM with no issues. The user also states that this happens on any VM he creates. I see nothing relevant in the log regarding this issue. Please, any hint how to debug this? Thanks. Nicolás ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/BVKO35XCMMUIYZHWTFBSJ6Q6ET7UGCZO/
[ovirt-users] Re: Really slow manager node
Hi Toni, (re-adding the users@ovirt.org list) El 16/11/20 a las 23:37, tfe...@swissonline.ch escribió: Hi, Chances are, that this performance issue may be unrelated to oVirt. The first thing that comes to my mind is that the system may have a bottleneck on the I/O. Please have a look at: iostat -x 5 The system may have problems with disk performance, if %util > 95 and avgqu-sz > 3 over longer periods of time. Actually %util never goes beyond the 85%, being the average on 70%; for the avgqu-sz, the average value is about 25 (with peaks of 160 as far as I could see). If that's not the case, you may next want to have a look at limits (/etc/security/limits.conf). There may also be default limits which may be too low. (nofile, nproc come to my mind) This file seems not to have been touched (all the content is commented out). Are there any errors or warnings in the messages or audit logs? Nothing special, I've checked for the last couple days and everything seems ok. And also htop, iotop, vmstat may help to get a quick overview. Yep, I've used most of these commands to check, but I've been unable to see something clarifying. In my opinion the slowness could be caused for not using SSD disks and because of a low polling interval by the DWHd, but that's just my assumption and I've been unable to get some data that would confirm this. Thanks for the help! Nico Hope this helps, Toni On 16.11.20 14:08, Nicolás wrote: Hi, We're running oVirt 4.3.8 and even if this is a problem we've had since a lot of time (I would say since 4.0.x), I decided to look for help in case anything can be done. Our environment is heavily used by users in our University (about 3000 users), and currently our oVirt infrastructure has 1928 virtual machines, being 882 of them currently running. We have a separate physical machine for the manager node, and the problem is that this machine is very, very, very slow, despite it has (from my point of view) enough physical resources to run efficiently. By slow I mean even the SSH access to it takes about 10 seconds, not just the admin/user portals. Any operation takes enough time to make the experience not comfortable to our users (enter the VM portal, start a VM, open a console...). Node machine's parameters are: 18GB of RAM memory 1 processor with 12CPUs 300GB SCSI Disk, local storage. No Storage Domain is stored in this node machine. Currently, most consuming processes are: 28802 ovirt 20 0 3302876 1,5g 25988 S 1,0 8,7 22:46.36 ovirt-engine -server -XX:+TieredCompilation -Xms1024M -Xmx1024M -Xss1M -Djava.aw+ 28701 ovirt 20 0 5465432 807704 13140 S 5,9 4,4 3:15.53 ovirt-engine-dwhd -Dorg.ovirt.engine.dwh.settings=/tmp/tmp8wtnTA/settings.proper+ # free -m total used free shared buff/cache available Mem: 17886 6669 2734 255 8482 10625 Swap: 6143 1002 5141 There are also a lot of postgresql processes: postgres 2186 0.0 0.0 261812 4136 ? Ss jun05 37:39 /opt/rh/rh-postgresql10/root/usr/bin/postmaster -D /var/opt/rh/rh-postgresql10/lib/pgsql/data postgres 3176 0.0 0.0 216084 656 ? Ss jun05 0:00 postgres: logger process postgres 3290 0.0 0.2 262204 37476 ? Ss jun05 77:31 postgres: checkpointer process postgres 3291 0.3 0.2 262052 36960 ? Ss jun05 754:02 postgres: writer process postgres 3292 0.0 0.0 261812 1988 ? Ss jun05 100:51 postgres: wal writer process postgres 3293 0.0 0.2 262380 36748 ? Ss jun05 21:58 postgres: autovacuum launcher process postgres 3294 0.1 0.0 219216 1412 ? Ds jun05 335:41 postgres: stats collector process postgres 3295 0.0 0.0 262220 1460 ? Ss jun05 0:11 postgres: bgworker: logical replication launcher postgres 3393 0.0 0.2 265792 40452 ? Ss jun05 15:36 postgres: engine engine ::1(51664) idle postgres 6105 0.3 0.0 271532 15976 ? Ds 13:01 0:00 postgres: autovacuum worker process ovirt_engine_history postgres 6216 0.2 0.0 263864 11440 ? Ss 13:02 0:00 postgres: autovacuum worker process engine postgres 6245 0.0 0.0 262888 6212 ? Ss 13:02 0:00 postgres: engine engine 127.0.0.1(42400) idle postgres 6246 0.0 0.0 262844 3256 ? Ss 13:02 0:00 postgres: autovacuum worker process template1 postgres 18815 0.0 0.0 262912 5852 ? Ss nov01 0:00 postgres: django django 127.0.0.1(59564) idle postgres 23148 0.0 0.2 266052 43024 ? Ss oct28 9:01 postgres: engine engine 127.0.0.1(59714) idle postgres 23149 0.0 0.0 262980 6820 ? Ss oct28 0:00 postgres: engine engine 127.0.0.1(59716) idle postgres 28784 0.0 0.0 262816 3492 ? Ss 12:02 0:00 postgres: ovirt_engine_history ovirt_engine_history 127
[ovirt-users] Really slow manager node
Hi, We're running oVirt 4.3.8 and even if this is a problem we've had since a lot of time (I would say since 4.0.x), I decided to look for help in case anything can be done. Our environment is heavily used by users in our University (about 3000 users), and currently our oVirt infrastructure has 1928 virtual machines, being 882 of them currently running. We have a separate physical machine for the manager node, and the problem is that this machine is very, very, very slow, despite it has (from my point of view) enough physical resources to run efficiently. By slow I mean even the SSH access to it takes about 10 seconds, not just the admin/user portals. Any operation takes enough time to make the experience not comfortable to our users (enter the VM portal, start a VM, open a console...). Node machine's parameters are: 18GB of RAM memory 1 processor with 12CPUs 300GB SCSI Disk, local storage. No Storage Domain is stored in this node machine. Currently, most consuming processes are: 28802 ovirt 20 0 3302876 1,5g 25988 S 1,0 8,7 22:46.36 ovirt-engine -server -XX:+TieredCompilation -Xms1024M -Xmx1024M -Xss1M -Djava.aw+ 28701 ovirt 20 0 5465432 807704 13140 S 5,9 4,4 3:15.53 ovirt-engine-dwhd -Dorg.ovirt.engine.dwh.settings=/tmp/tmp8wtnTA/settings.proper+ # free -m total used free shared buff/cache available Mem: 17886 6669 2734 255 8482 10625 Swap: 6143 1002 5141 There are also a lot of postgresql processes: postgres 2186 0.0 0.0 261812 4136 ? Ss jun05 37:39 /opt/rh/rh-postgresql10/root/usr/bin/postmaster -D /var/opt/rh/rh-postgresql10/lib/pgsql/data postgres 3176 0.0 0.0 216084 656 ? Ss jun05 0:00 postgres: logger process postgres 3290 0.0 0.2 262204 37476 ? Ss jun05 77:31 postgres: checkpointer process postgres 3291 0.3 0.2 262052 36960 ? Ss jun05 754:02 postgres: writer process postgres 3292 0.0 0.0 261812 1988 ? Ss jun05 100:51 postgres: wal writer process postgres 3293 0.0 0.2 262380 36748 ? Ss jun05 21:58 postgres: autovacuum launcher process postgres 3294 0.1 0.0 219216 1412 ? Ds jun05 335:41 postgres: stats collector process postgres 3295 0.0 0.0 262220 1460 ? Ss jun05 0:11 postgres: bgworker: logical replication launcher postgres 3393 0.0 0.2 265792 40452 ? Ss jun05 15:36 postgres: engine engine ::1(51664) idle postgres 6105 0.3 0.0 271532 15976 ? Ds 13:01 0:00 postgres: autovacuum worker process ovirt_engine_history postgres 6216 0.2 0.0 263864 11440 ? Ss 13:02 0:00 postgres: autovacuum worker process engine postgres 6245 0.0 0.0 262888 6212 ? Ss 13:02 0:00 postgres: engine engine 127.0.0.1(42400) idle postgres 6246 0.0 0.0 262844 3256 ? Ss 13:02 0:00 postgres: autovacuum worker process template1 postgres 18815 0.0 0.0 262912 5852 ? Ss nov01 0:00 postgres: django django 127.0.0.1(59564) idle postgres 23148 0.0 0.2 266052 43024 ? Ss oct28 9:01 postgres: engine engine 127.0.0.1(59714) idle postgres 23149 0.0 0.0 262980 6820 ? Ss oct28 0:00 postgres: engine engine 127.0.0.1(59716) idle postgres 28784 0.0 0.0 262816 3492 ? Ss 12:02 0:00 postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39470) idle postgres 28785 0.0 0.0 262816 3496 ? Ss 12:02 0:00 postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39472) idle postgres 28921 0.8 0.7 375152 146452 ? Ss 12:03 0:30 postgres: engine engine 127.0.0.1(39484) idle postgres 29007 3.3 0.7 369348 142184 ? Ds 12:03 1:58 postgres: engine engine 127.0.0.1(39498) SELECT postgres 29009 5.0 0.3 294736 72776 ? Ss 12:03 2:58 postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39500) idle postgres 29048 0.0 0.0 263664 12176 ? Ss 12:03 0:00 postgres: engine engine 127.0.0.1(39530) idle postgres 29064 0.6 0.8 384936 157852 ? Ss 12:03 0:24 postgres: engine engine 127.0.0.1(39532) idle postgres 29065 1.2 0.7 358944 137028 ? Ss 12:03 0:43 postgres: engine engine 127.0.0.1(39534) idle postgres 29066 1.9 0.7 355800 132800 ? Ss 12:03 1:08 postgres: engine engine 127.0.0.1(39536) idle postgres 29067 1.0 0.7 370688 140504 ? Ss 12:03 0:37 postgres: engine engine 127.0.0.1(39538) idle postgres 29068 1.7 0.7 360984 139584 ? Ss 12:03 1:02 postgres: engine engine 127.0.0.1(39540) idle postgres 29069 1.3 0.7 358140 136268 ? Ss 12:03 0:48 postgres: engine engine 127.0.0.1(39542) idle postgres 29070 3.7 0.7 372064 141724 ? Ss 12:03 2:13 postgres: engine engine 127.0.0.1(39544) idle postgres 29071 0.8 0.6 337224 114132 ? Ss 12:03 0:31 postgres: engine engine 127.0.0.1(39546) idle postgres
[ovirt-users] Re: Ballooning disabled when creating a VmPool
Hi, I opened [1]. If this is not the right place/component/product please change it accordingly. Thanks. Regards, Nico [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1897532 El 12/11/20 a las 12:21, Nicolás escribió: Hi Michal, No, in the GUI it behaves as it should (ballooning is enabled after creating the pool). Could you please point out where should I fill-in the bug? (bugzilla or github...) Thanks! El 12/11/20 a las 10:56, Michal Skrivanek escribió: Hi Nicolas, it does sound like a bug, ballooning shouldn’t be disabled in this case. does it behave the same in GUI? Thanks, michal On 12 Nov 2020, at 11:49, Nicolás <mailto:nico...@devels.es>> wrote: Sorry, I forgot to add the screenshot! El 11/11/20 a las 12:32, Nicolás escribió: Hi, We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to handle our pools. Pools are based on a template which has ballooning enabled. However, when deploying a VmPool based on that template, has the "Ballooning enabled" field disabled, uneditable and an icon which states: "The field is not attached to any instance type" (screenshot attached). We're handling a big number of VMs based on pools (> 1500), and we think this should be enabled. However, I don't see a field in the types.VmPool definition that allows that. Is that even doable? Our Python code is similar to this: newpool = types.VmPool(name='test', cluster=cl, template=t, max_user_vms=1, size=1, type=types.VmPoolType.MANUAL) vmpool_serv.add(newpool) * cl is a types.Cluster instance with ballooning_enabled=True * t is a types.Template instance with Ballooning enabled. Thanks. Nico ___ Users mailing list --users@ovirt.org To unsubscribe send an email tousers-le...@ovirt.org Privacy Statement:https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/ 12-17-02.png>___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TQXOVXAJHSKKPC7DWRGKVZEUB4HBSV5D/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/GS34TT7IMWCRMZQBS445AAMN6IPQOUJZ/
[ovirt-users] Re: Ballooning disabled when creating a VmPool
Hi Michal, No, in the GUI it behaves as it should (ballooning is enabled after creating the pool). Could you please point out where should I fill-in the bug? (bugzilla or github...) Thanks! El 12/11/20 a las 10:56, Michal Skrivanek escribió: Hi Nicolas, it does sound like a bug, ballooning shouldn’t be disabled in this case. does it behave the same in GUI? Thanks, michal On 12 Nov 2020, at 11:49, Nicolás <mailto:nico...@devels.es>> wrote: Sorry, I forgot to add the screenshot! El 11/11/20 a las 12:32, Nicolás escribió: Hi, We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to handle our pools. Pools are based on a template which has ballooning enabled. However, when deploying a VmPool based on that template, has the "Ballooning enabled" field disabled, uneditable and an icon which states: "The field is not attached to any instance type" (screenshot attached). We're handling a big number of VMs based on pools (> 1500), and we think this should be enabled. However, I don't see a field in the types.VmPool definition that allows that. Is that even doable? Our Python code is similar to this: newpool = types.VmPool(name='test', cluster=cl, template=t, max_user_vms=1, size=1, type=types.VmPoolType.MANUAL) vmpool_serv.add(newpool) * cl is a types.Cluster instance with ballooning_enabled=True * t is a types.Template instance with Ballooning enabled. Thanks. Nico ___ Users mailing list --users@ovirt.org To unsubscribe send an email tousers-le...@ovirt.org Privacy Statement:https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/ 12-17-02.png>___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/TQXOVXAJHSKKPC7DWRGKVZEUB4HBSV5D/
[ovirt-users] Re: Ballooning disabled when creating a VmPool
Sorry, I forgot to add the screenshot! El 11/11/20 a las 12:32, Nicolás escribió: Hi, We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to handle our pools. Pools are based on a template which has ballooning enabled. However, when deploying a VmPool based on that template, has the "Ballooning enabled" field disabled, uneditable and an icon which states: "The field is not attached to any instance type" (screenshot attached). We're handling a big number of VMs based on pools (> 1500), and we think this should be enabled. However, I don't see a field in the types.VmPool definition that allows that. Is that even doable? Our Python code is similar to this: newpool = types.VmPool(name='test', cluster=cl, template=t, max_user_vms=1, size=1, type=types.VmPoolType.MANUAL) vmpool_serv.add(newpool) * cl is a types.Cluster instance with ballooning_enabled=True * t is a types.Template instance with Ballooning enabled. Thanks. Nico ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/
[ovirt-users] Ballooning disabled when creating a VmPool
Hi, We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to handle our pools. Pools are based on a template which has ballooning enabled. However, when deploying a VmPool based on that template, has the "Ballooning enabled" field disabled, uneditable and an icon which states: "The field is not attached to any instance type" (screenshot attached). We're handling a big number of VMs based on pools (> 1500), and we think this should be enabled. However, I don't see a field in the types.VmPool definition that allows that. Is that even doable? Our Python code is similar to this: newpool = types.VmPool(name='test', cluster=cl, template=t, max_user_vms=1, size=1, type=types.VmPoolType.MANUAL) vmpool_serv.add(newpool) * cl is a types.Cluster instance with ballooning_enabled=True * t is a types.Template instance with Ballooning enabled. Thanks. Nico ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/
[ovirt-users] Re: Clone a VM in the User Portal
Hi Arik, El 10/11/20 a las 15:22, Arik Hadas escribió: On Tue, Nov 10, 2020 at 4:37 PM Nicolás <mailto:nico...@devels.es>> wrote: Hi Arik, El 10/11/20 a las 13:21, Arik Hadas escribió: On Tue, Nov 10, 2020 at 3:08 PM Nicolás mailto:nico...@devels.es>> wrote: Hi Sharon, Thanks for the reply! I've opened [1], so hopefully someone will be able to implement it. Regards, Nico [1]: https://github.com/oVirt/ovirt-site/issues/2389 El 10/11/20 a las 11:38, Sharon Gratch escribió: Hi, This feature of cloning a VM was indeed part of the old User Portal and you are right that it's not supported by the newer VM Portal (since oVirt 4.3). It seemed that this wasn't required by VM Portal users (no user complained up till now) and that's why we omitted it and it's not part of our current roadmap to implement it as well. Nevertheless, there is no real reason not to include that ability as part of VM Portal, so you are most welcome to open an issue on https://github.com/oVirt/ovirt-web-ui/issues <https://github.com/oVirt/ovirt-site/issues> and you can push a fix yourself if you have time (or someone else from the community) :-) Thanks! Sharon On Fri, Nov 6, 2020 at 11:06 AM Nicolás mailto:nico...@devels.es>> wrote: Hi, We're using oVirt 4.3.8, having an organization that intensively uses the User Portal. After upgrading from 4.2, we've noticed that cloning a VM from within the User Portal is not possible anymore. In our case, this feature was heavily used by hundreds of students deploying their VMs. Out of curiosity, why cloning a VM and not provisioning the VMs from template(s)? Most of our students are IT-related, and their professors want to teach them the procedure to deploy a VM from scratch. Some other courses surely deploy their VMs from a template as they are not that IT oriented and they just want to have a working VM instead of building it from scratch. We have a lot of casuistry, but in our case about 400~500 students would very welcome having back the clone option. Thanks Nicolás. I'd say that even for the IT-related students it may make more sense to provision VMs from templates instead of cloning VMs - so you want them to deploy VMs from scratch, which means starting with a VM that is based on the blank template, add disk(s) and other devices, install and configure the guest and such; and then the students would use clone-VM to duplicate the VM they just prepared, right? Yep, that's mostly it. Why would you want them to clone the VM rather than creating a template out of this VM and provision further VMs from that template with thin-provisioned disks? Because that would involve creating templates, and would require a permission they don't have. We've chosen a few permissions which make them able to deploy their own machines, but we don't want them to create templates or even access the admin panel. Additionally, courses are composed of groups of students which deploy different infrastructures. So one could deploy an HAproxy architecture, some other could deploy a pacemaker+corosync architecture with different parameters (some of them need more disk, some of them need more memory...), so each group would need to create templates just to deploy a couple machines. I think it's more practical (in this case) to deploy the couple of machines using a clone option. In some other courses, where all the VM parameters are equal, it's better to deploy the VM from a template and some subjects use this option too. Thanks. Nico Regards, Nico Is this feature in the roadmap yet? If not, do you consider it useful to open a RFE? Thank you. Regards, Nico ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/ ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <ma
[ovirt-users] Re: Clone a VM in the User Portal
Hi Arik, El 10/11/20 a las 13:21, Arik Hadas escribió: On Tue, Nov 10, 2020 at 3:08 PM Nicolás <mailto:nico...@devels.es>> wrote: Hi Sharon, Thanks for the reply! I've opened [1], so hopefully someone will be able to implement it. Regards, Nico [1]: https://github.com/oVirt/ovirt-site/issues/2389 El 10/11/20 a las 11:38, Sharon Gratch escribió: Hi, This feature of cloning a VM was indeed part of the old User Portal and you are right that it's not supported by the newer VM Portal (since oVirt 4.3). It seemed that this wasn't required by VM Portal users (no user complained up till now) and that's why we omitted it and it's not part of our current roadmap to implement it as well. Nevertheless, there is no real reason not to include that ability as part of VM Portal, so you are most welcome to open an issue on https://github.com/oVirt/ovirt-web-ui/issues <https://github.com/oVirt/ovirt-site/issues> and you can push a fix yourself if you have time (or someone else from the community) :-) Thanks! Sharon On Fri, Nov 6, 2020 at 11:06 AM Nicolás mailto:nico...@devels.es>> wrote: Hi, We're using oVirt 4.3.8, having an organization that intensively uses the User Portal. After upgrading from 4.2, we've noticed that cloning a VM from within the User Portal is not possible anymore. In our case, this feature was heavily used by hundreds of students deploying their VMs. Out of curiosity, why cloning a VM and not provisioning the VMs from template(s)? Most of our students are IT-related, and their professors want to teach them the procedure to deploy a VM from scratch. Some other courses surely deploy their VMs from a template as they are not that IT oriented and they just want to have a working VM instead of building it from scratch. We have a lot of casuistry, but in our case about 400~500 students would very welcome having back the clone option. Regards, Nico Is this feature in the roadmap yet? If not, do you consider it useful to open a RFE? Thank you. Regards, Nico ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/ ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUEW52WZUD27INREQXQ2OPLBLQW2RMK4/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/JIG42K45ABTUQZ6JWG3CO6KAWCG7AWQ4/
[ovirt-users] Re: Clone a VM in the User Portal
Hi Sharon, Thanks for the reply! I've opened [1], so hopefully someone will be able to implement it. Regards, Nico [1]: https://github.com/oVirt/ovirt-site/issues/2389 El 10/11/20 a las 11:38, Sharon Gratch escribió: Hi, This feature of cloning a VM was indeed part of the old User Portal and you are right that it's not supported by the newer VM Portal (since oVirt 4.3). It seemed that this wasn't required by VM Portal users (no user complained up till now) and that's why we omitted it and it's not part of our current roadmap to implement it as well. Nevertheless, there is no real reason not to include that ability as part of VM Portal, so you are most welcome to open an issue on https://github.com/oVirt/ovirt-web-ui/issues <https://github.com/oVirt/ovirt-site/issues> and you can push a fix yourself if you have time (or someone else from the community) :-) Thanks! Sharon On Fri, Nov 6, 2020 at 11:06 AM Nicolás <mailto:nico...@devels.es>> wrote: Hi, We're using oVirt 4.3.8, having an organization that intensively uses the User Portal. After upgrading from 4.2, we've noticed that cloning a VM from within the User Portal is not possible anymore. In our case, this feature was heavily used by hundreds of students deploying their VMs. Is this feature in the roadmap yet? If not, do you consider it useful to open a RFE? Thank you. Regards, Nico ___ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-le...@ovirt.org <mailto:users-le...@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUEW52WZUD27INREQXQ2OPLBLQW2RMK4/
[ovirt-users] Clone a VM in the User Portal
Hi, We're using oVirt 4.3.8, having an organization that intensively uses the User Portal. After upgrading from 4.2, we've noticed that cloning a VM from within the User Portal is not possible anymore. In our case, this feature was heavily used by hundreds of students deploying their VMs. Is this feature in the roadmap yet? If not, do you consider it useful to open a RFE? Thank you. Regards, Nico ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/
[ovirt-users] Stalled disk migration
Hi, We've done a major datastore migration recently between 2 iSCSI-based datastores. We've successfully migrated 35 machines, however, 5 of them seem to have stalled. All we can see in the events tab tab is: Moving Disk bla_Disk1 from iscsi01 to iscsi02 Disks are small enough (25-27Gb) to assume this won't progress since it's been more than 30 hs. since the migration began, other VMs took approximately 1-1.5 hours to fully migrate a disk, so this seems to be stalled. The bad thing is that I can't find a way to "unstall" it. Disks are in a perpetual "migrating" status and there's no way to stop the migration (at least from the webadmin). I don't actually care if stopping the migration breaks those 5 machines since they are disposable, I just need to stop that event. I already tried restarting the ovirt-engine and it didn't work. Log doesn't seem to provide nothing relevant. Is there a way to do that? I wouldn't mind if I need to modify some record directly into the DB. Thanks! Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- IMPORTANT! This message has been scanned for viruses and phishing links. However, it is your responsibility to evaluate the links and attachments you choose to click. If you are uncertain, we always try to help. Greetings helpd...@actnet.se -- IMPORTANT! This message has been scanned for viruses and phishing links. However, it is your responsibility to evaluate the links and attachments you choose to click. If you are uncertain, we always try to help. Greetings helpd...@actnet.se ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/2JFNPXPXDU7RTLNVMBIBXTW26W7QQNGN/
[ovirt-users] Re: Stalled disk migration
Just to update: I used: PGPASSWORD=dbpass /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -v -u engine -d engine -t disk This indeed got the disks back to the OK state, however, the task remained in the 'Events' tab so even with the unlocked disks I couldn't do anything, as oVirt complained about the disks being "moved", so I couldn't do anything of copying the disks, starting the VMs, moving the disks, etc. "Miraculously" I checked the day after and both tasks disappeared from the Events tab, so I tried moving one disk again, with the same result: it stalled. I managed to copy the other disk to the destination datastore and attach it to the machine. This worked, but now I have one of the VMs still stalled even after running the "unlock_entity" script, as this time the task wasn't removed from the Events tab. Regards. El 06/10/16 a las 19:45, Nicolás escribió: Hi, We've done a major datastore migration recently between 2 iSCSI-based datastores. We've successfully migrated 35 machines, however, 5 of them seem to have stalled. All we can see in the events tab tab is: Moving Disk bla_Disk1 from iscsi01 to iscsi02 Disks are small enough (25-27Gb) to assume this won't progress since it's been more than 30 hs. since the migration began, other VMs took approximately 1-1.5 hours to fully migrate a disk, so this seems to be stalled. The bad thing is that I can't find a way to "unstall" it. Disks are in a perpetual "migrating" status and there's no way to stop the migration (at least from the webadmin). I don't actually care if stopping the migration breaks those 5 machines since they are disposable, I just need to stop that event. I already tried restarting the ovirt-engine and it didn't work. Log doesn't seem to provide nothing relevant. Is there a way to do that? I wouldn't mind if I need to modify some record directly into the DB. Thanks! Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- IMPORTANT! This message has been scanned for viruses and phishing links. However, it is your responsibility to evaluate the links and attachments you choose to click. If you are uncertain, we always try to help. Greetings helpd...@actnet.se -- IMPORTANT! This message has been scanned for viruses and phishing links. However, it is your responsibility to evaluate the links and attachments you choose to click. If you are uncertain, we always try to help. Greetings helpd...@actnet.se ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RTWIBRFCXCIAAHTF4DHIOYPJFZUBT7CE/
Re: [ovirt-users] VM Portal looking for translators
Hi, Why do I see a red lock on the translation page claiming "This project-version is readonly. It cannot be edited"? Do I have to be granted access specifically on the language site to translate? (Not sure if related: Requested access to some language groups like described in [3], but it's still pending). Thanks. Nicolás El 14/08/17 a las 19:37, Jakub Niedermertl escribió: Hi all, new VM Portal project [1] - a replacement of oVirt userportal - is looking for community translators. If you know any of * Chinese (Simplified) * French * German * Italian * Japanese * Korean * Portuguese * Russian * Spanish and want to join translation effort, please * sign up to Zanata translation environment [2] * request an access to language group of your choice [3] * and join us at [4] Thank you Regards Jakub [1]: https://github.com/oVirt/ovirt-web-ui [2]: https://translate.zanata.org [3]: https://translate.zanata.org/language/list [4]: https://translate.zanata.org/iteration/view/ovirt-web-ui/1.2.0/languages ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ETL service sampling has encountered an error. Please consult the service log for more details.
Any ideas on this? Thanks. El 20/04/17 a las 12:12, nico...@devels.es escribió: Hi, We're using oVirt 4.1.1.8 (upgraded yesterday) and since it has been showing some strange errors I'd like to know about: ETL service sampling has encountered an error. Please consult the service log for more details. I'm attaching the engine log FWIW. This message showed up at 11:07:04 but in the log I see the exceptions started 1 minute ago. Also, at 11:07:58 this event showed up: Engine server is not responding. And at 11:12:58 it seems to recover: Engine server is up and running. At 12:00:00 this message showed up: ETL service aggregation to hourly tables has encountered an error. Please consult the service log for more details. But relative to this one I see nothing in logs. Could someone clarify what these error messages mean? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VM "hot" RAM memory decrease
Hi, I don't really know if this question is suitable on this list, as I doubt it's an oVirt bug, neither I know if it shall be considered a bug. We recently run a VM on a host that was memory over-used (around 80% of usage). The VM booted correctly, then we run "top" and saw how physical RAM started decreasing every two seconds. At first it was 4GB, then less and less until it stabilized at around 600MB. Based on this (correct me if I'm wrong), we believe this is an effect of having this VM with ballooning enabled, as it does exactly this: It adds/removes RAM depending on host decision. Thing is that this VM had a minimal guaranteed RAM of 1GB, so even if this happened due to ballooning, I'm not sure if it should have honored the minimum guaranteed RAM. When this happened, we run a 'ps' to see with what options the qemu process was invoked, and parameters seemed correct (that's why I don't know if it should be posted here or even if it's a bug). Is this the expected behavior? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?
Hi Ravi, Thanks for the info. As I see there is a patch already I'll patch our instance tomorrow and run the script to see how it behaves. I'll comment the BZ with the result. Regards. En 22/3/2017 4:06 p. m., Ravi Nori escribió:Hi Nicolás,There has been some changes to how a session is refreshed after 4.0. So this is a BZ and is being tracked by BZ 1434605.Will post a patch to fix this. Thanks for reporting the issue.RaviOn Wed, Mar 22, 2017 at 9:10 AM, <nico...@devels.es> wrote:Hi Juan, I confirm this was working with 4.0.6 (but the same SDK package). The script is relatively new but I'm 100% sure it has been in execution for several weeks, in contrast to current version where after 5-6 iterations the exception starts showing up. I've voted for the bug and added myself as CC. Thank you. Regards, Nicolás El 2017-03-22 12:58, Juan Hernández escribió: On 03/22/2017 01:50 PM, Juan Hernández wrote: On 03/22/2017 01:10 PM, nico...@devels.es wrote: Hi, We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the behavior of a script we wrote in Python-SDK has changed slightly. We have a script that needs to be executed forever (daemon mode). This daemon creates an ovirtsdk4.Connection object and uses the same Connection object all the time. conn = sdk.Connection( url=""> username=USERNAME, password=PASSWORD, ca_file=CAFILE ) Between iterations we have ~5 minutes delays which we accomplish with a time.sleep(...) call. After some of these iterations (5 or 6), when trying to perform an operation on the Connection object (in this case, listing all SDs): try: sys_serv = conn.system_service() sd_serv = sys_serv.storage_domains_service() storages = sd_serv.list(search=sd_search_query) except Error, e: log('ERR: Error getting storage domains: %s' % (e)) We start getting exceptions (i.e., the sd_serv.list() call throwing an Error exception) with this message: ERR: Error getting storage domains: HTTP response code is 401. I believe this has something to do with the Connection object expiring (even if it's not idle more than 5 minutes at any time). Is there a way to "refresh" the Connection object so it doesn't auto-logout (assuming this is the actual problem)? As I said, this started happening as of oVirt 4.1.0. ovirt-engine-sdk-python version is 4.1.1. Any ideas? This sound like this bug, opened yesterday: SSO token used for the API expires when running only queries https://bugzilla.redhat.com/1434605 But I thought the same happened in 4.0. Can you confirm that you don't see this problem in 4.0? Open possible workaround is to force a refresh of the backend session sending an external event, like in this example: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131 I also think that we need to modify the SDKs so that they detect expired SSO tokens and renew them automatically. I will open another bug for that. Here is the bug for adding automatic SSO token renew to the SDK, in case you want to follow/vote it: Implement automatic SSO token renew https://bugzilla.redhat.com/1434830 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] ovirt-engine-notifier tuning?
Hi, Is there a way to configure the frequency on which the ovirt-engine-notifier notifies about the same issue? We've recently had a Domain Storage with low space and an email was sent cca. every 15 minutes. Is there a way to increase this notification time? This is oVirt 4.0.4-4. Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Specifying the datastore on a VmPool creation via Python-SDK?
Done [1]. Thank you. [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1412768 El 12/01/17 a las 16:16, Juan Hernández escribió: On 01/11/2017 03:53 PM, nico...@devels.es wrote: Any ideas to this? My understanding is that there is no way to this with the API currently. If you need it, please open a RFE. Meanwhile, I'd suggest to copy the templates to the storage domain that you want to use, and then use the copied templates. I don't see any other alternative. El 2017-01-10 08:43, nico...@devels.es escribió: Hi, We've several templates that have their disks replicated (copied) on all our Storage Domains. Problem is that we create our VmPools using PythonSDK, and it usually creates the pool on one of our Storage Domains that has a small amount of free disk space. Some of the Data Stores have plenty of space and when creating the VmPool, we'd like to be able to specify on which of these Storage Domains to create the VmPool. So far I see no parameter on the params.VmPool class to do that. I've tried using an Action, but the request is not correct: action = params.Action(storage_domain=api.storagedomains.get(name='...')) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=action) pool = params.VmPool(name='testlarge', cluster=api.clusters.get(name='...'), template=api.templates.get(name='Blank'), max_user_vms=1, size=1, type_='manual', actions=[action]) api.vmpools.add(pool) Both tries fail. This is Python-SDK 3.x. Is there a way to specify the destination Storage Domain onto where to create the VmPool? Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] desktop version of client?
Hi Michal, El 02/11/16 a las 16:31, Michal Skrivanek escribió: [...] I wonder…coincidentally we started to explore simplified and modern interface for use cases like yours. It’s by no means ready yet, but I wonder what you guys think about [1]. It’s just a proof of concept but the goals are the same, it’s browser-based but much more lightweight than the current GWT Basic User Portal Thanks, michal [1] https://trello.com/c/blwDpjcJ Looks good! This would even suffice our needs quite well. Actually, in our case we tried to avoid using a web browser because these thin clients are very specific for virtualization, so users should use them *only* to manage their VMs and if they need to browse something, it would be done from a VM they have access to (for example, a disposable machine from a VmPool). Anyhow, this can also be done with a bit of tweaking on the browser side, so if the project is finally released we'll consider it. Regards, Nicolás As a side note, you didn't mention if your thin clients are linux or windows based but I believe this is for linux only. HTH, James [1] https://ovirt-desktop-client.click <https://ovirt-desktop-client.click/> 2016-10-28 20:47 GMT+01:00 Amy Morrisson <mailto:amymorr9...@gmail.com>>: Hey there, I'm looking for some kind of desktop client for ovirt. I believe as per what I've seen that there's nothing official so I'm looking for any other options (even if it's an own development). As a last resource we can use the web admin but the purpose is to have a few thin clients which would start the client at boot time so it's more confortable for users, plus most times the web admin becomes slow after a while. I'm not sure if something like this exists. In any case thanks for any tip. By the way, we're using ovirt 3.6.7, fwiw. Amy Morrisson ___ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/listinfo/users> ___ Users mailing list Users@ovirt.org <mailto:Users@ovirt.org> http://lists.ovirt.org/mailman/listinfo/users Hey all, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] desktop version of client?
Hi Gianluca, El 01/11/16 a las 13:17, Gianluca Cecchi escribió: [...] Hello, thanks for reporting about this project I didn't know about. By the way on a Fedora 24 client I was able to successfully test it without the need to create a python virtual environment The truth is that I didn't do any tests on Fedora, just on Debian, Ubuntu, CentOS & RHEL and seeing the variety of different scenarios I decided to include a way to install both components that should work platform independently. However, it's true that this should be labelled as the "hard way" and if the user is able to install them without the need of a virtualenv, this should also be documented (this is a matter of preference, actually), so I'll update the README soon. This is with python 2 present in F24 (not tested with the alternative python 3 Python 3.5.1): $ python -V Python 2.7.12 and the currently provided packages: sip-4.18-2.fc24.x86_64 python-qt5-5.6-4.fc24.x86_6 I was able to then run python ovirtclient.py I was not able to using anyway virtualenv (both 2 and 3 versions) that seems anyway sort of broken Without --always-copy switch the sip compilation tried to remove the provided sip.so and clearly it failed With --always-copy I got errors able to temporarily fix changing fix_lib64 function but then error again about importing _io I faced the last error a few days ago and it was because a version mismatch of different python components. I simply upgraded all the python related packages to the latest version, re-created the virtualenv and it worked. Not sure if that is the only one reason, but it worked in my case. Thanks for the feedback. Nicolás Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Stalled disk migration
Just to update: I used: PGPASSWORD=dbpass /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -v -u engine -d engine -t disk This indeed got the disks back to the OK state, however, the task remained in the 'Events' tab so even with the unlocked disks I couldn't do anything, as oVirt complained about the disks being "moved", so I couldn't do anything of copying the disks, starting the VMs, moving the disks, etc. "Miraculously" I checked the day after and both tasks disappeared from the Events tab, so I tried moving one disk again, with the same result: it stalled. I managed to copy the other disk to the destination datastore and attach it to the machine. This worked, but now I have one of the VMs still stalled even after running the "unlock_entity" script, as this time the task wasn't removed from the Events tab. Regards. El 06/10/16 a las 19:45, Nicolás escribió: Hi, We've done a major datastore migration recently between 2 iSCSI-based datastores. We've successfully migrated 35 machines, however, 5 of them seem to have stalled. All we can see in the events tab tab is: Moving Disk bla_Disk1 from iscsi01 to iscsi02 Disks are small enough (25-27Gb) to assume this won't progress since it's been more than 30 hs. since the migration began, other VMs took approximately 1-1.5 hours to fully migrate a disk, so this seems to be stalled. The bad thing is that I can't find a way to "unstall" it. Disks are in a perpetual "migrating" status and there's no way to stop the migration (at least from the webadmin). I don't actually care if stopping the migration breaks those 5 machines since they are disposable, I just need to stop that event. I already tried restarting the ovirt-engine and it didn't work. Log doesn't seem to provide nothing relevant. Is there a way to do that? I wouldn't mind if I need to modify some record directly into the DB. Thanks! Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Stalled disk migration
Hi, We've done a major datastore migration recently between 2 iSCSI-based datastores. We've successfully migrated 35 machines, however, 5 of them seem to have stalled. All we can see in the events tab tab is: Moving Disk bla_Disk1 from iscsi01 to iscsi02 Disks are small enough (25-27Gb) to assume this won't progress since it's been more than 30 hs. since the migration began, other VMs took approximately 1-1.5 hours to fully migrate a disk, so this seems to be stalled. The bad thing is that I can't find a way to "unstall" it. Disks are in a perpetual "migrating" status and there's no way to stop the migration (at least from the webadmin). I don't actually care if stopping the migration breaks those 5 machines since they are disposable, I just need to stop that event. I already tried restarting the ovirt-engine and it didn't work. Log doesn't seem to provide nothing relevant. Is there a way to do that? I wouldn't mind if I need to modify some record directly into the DB. Thanks! Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
El 15/08/16 a las 17:18, aleksey.maksi...@it-kb.ru escribió: I tried a version of Nicolás. No success :(( 1) I create full bundle cert file: # cat /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/apache-ca.pem > /etc/pki/ovirt-engine/certs/apache-with-ca.cer # openssl verify /etc/pki/ovirt-engine/certs/apache-with-ca.cer /etc/pki/ovirt-engine/certs/apache-with-ca.cer: OK In our case, the private certificate is stored in /etc/ssl/private and have 640 permissions for root:ssl-cert. If this is where your private key is stored or you have it in a permission-restricted directory, you should take this in consideration: The cert will be read by the 'ovirt' user, so you need to make sure the ovirt user has the secondary ssl-cert group assigned. You can check that running: groups ovirt If ssl-cert is not listed there, you might run: usermod -aG ssl-cert ovirt That will append the ssl-cert group to ovirt user. If you had to run it, you'll need to restart both ovirt-websocket-proxy and ovirt-engine daemons. Regards. 2) I changed config file: # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache-with-ca.cer SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass SSL_ONLY=True FORCE_DATA_VERIFICATION=False 3) I restarted the service # service ovirt-websocket-proxy restart Problem still exists :( Any ideas how to trablshut problem? 14.08.2016, 08:59, "aleksey.maksi...@it-kb.ru" : Hi Jiri. But your variant does not work, too # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True Some error: WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] any ideas how to trablshut problem? 14.08.2016, 01:53, "Jiri Belka" : I have different files for those variables, maybe this is the case? Review again. j. - Original Message - From: "aleksey maksimov" To: "Jiri Belka" Cc: "users" Sent: Saturday, August 13, 2016 4:57:45 PM Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/ I changed my file /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: PROXY_PORT=6100 #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem SSL_ONLY=True ...and restart HostedEngine VM. Problem still exists. 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" : It does not work for me. any ideas? 02.08.2016, 17:22, "Jiri Belka" : This works for me: # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True - Original Message - From: "aleksey maksimov" To: "users" Sent: Monday, August 1, 2016 12:13:38 PM Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/ Hello oVirt guru`s ! I have successfully replaced the oVirt 4 site SSL-certificate according to the instructions from "Replacing oVirt SSL Certificate" section in "oVirt Administration Guide" http://www.ovirt.org/documentation/admin-guide/administration-guide/ 3 files have been replaced: /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/keys/apache.key.nopass /etc/pki/ovirt-engine/apache-ca.pem Now the oVirt site using my certificate and everything works fine, but when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a gray screen and message under the button "Toggle messages output": WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] Before replacing certificates SPICE HTML5 browser client works. Native SPICE client works fine. Tell me what to do with SPICE HTML5 browser client? ___ Users mailing list Users@ovirt.org http://list
Re: [ovirt-users] LDAP-based domain not working after upgrade?
El 15/08/16 a las 13:28, Ondra Machacek escribió: On 08/13/2016 12:44 AM, nico...@devels.es wrote: El 2016-08-12 20:38, Ondra Machacek escribió: On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2016 09:37 AM, Nicolás wrote: >> Hi, >> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant a permission to >> a >> user on a VM. Thing is when we open the 'Permissions' subtab on that >> VM, >> we click on Add, the LDAP backend shows up but any value entered into >> the search box returns nothing, even when I know the values exist. >> >> This has been working on oVirt 3.x, we actually migrated to 4.x last >> week and didn't notice this issue. >> >> Additionally, there's no combobox to choose the permission to grant? > > There should be combo box to choose a role. I've attached a screenshot, seems there's not. Its highly likely the dropdown is there, but its scrolled below the bottom of the dialog and thus you can't see it. I thought I made sure all the dialogs were working, seems like I missed one. Let me check it out and see what is going on. Okay I double checked, I went to the VMs main tab, selected a VM, then went to the permissions sub tab. Clicked add. The dialog that popped up looks like the one attached, which is what I was expecting. The one you attached appears to be missing some styling, which is likely what caused the Role to Assign part to be scrolled below the bottom of the page. Can you complete clear your cache (not shift reload, but settings->clear cache). If that doesn't work can you tell us the version of the patternfly rpm installed on your engine? Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch Ok, this indeed seems like a graphics problem since I am seeing this connecting to a machine through a VNC server and the Role combobox is moved down out of the dialog. However, the LDAP issue persists. When I choose the 'internal' domain, I can search the 'admin' user successfully, however, if I set it to be the LDAP domain, any search returns nothing. Any hints or ideas how to debug this? Can you please enable debug log[1] and send it here? [1] https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L442 Thanks. I was now able to see why it is failing: TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13) [] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin limit exceeded), numEntries=0, numReferences=0, errorMessage='admin limit exceeded') This is server error, that number of entries to be returned is higher, than the limit set on server. You should either increase that limit server side, or don't use '*', but use some filter. ( ie. user* ) That's the problem, the patterns we enter in the search box are specific usernames that usually return only one or 2 results at most from the LDAP directory, that's why I think this filter is needlessly too broad in our case. I've been making the query more specific on the command line (i.e., using ldapsearch) and removing some of the OR (|) clauses seems to return a lower number of entries below the limit, that's why I asked if it's possible to manually specify the filter. Do you think it would be useful to open a RFE on BZ asking for a feature to allow the user specify the filter? I'll see what's the best way to workaround this problem as is, either defining a user and allowing them a higher number of returned results or increasing the limit on the server side. Thanks. Indeed, if I run that query using the ldapsearch command I can clearly see it is returning an "admin limit exceeded" error. The applied filter is: (&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username))) Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not changed our LDAP configuration. Has the filter been changed in 4.x by default? It didn't. If so, is there a way to override the filter to make it simpler? (In our case we'll always seek by username, so no need to search by givenName, sn or displayName). Filtering is constructed on client side, in this case ovirt-engine backend, so unfortuna
Re: [ovirt-users] How to open vm console by API ?
Hi, This has been asked a short time ago, you can find the thread in [1]. In [2] you can find an unofficial oVirt project written in Python + QT5 that already does that, it connects to the API, gets a list of available VMs for the supplied credentials and then you can open a VM console to any of these machines (using virt-viewer). Regards. [1]: http://lists.ovirt.org/pipermail/users/2016-June/040222.html [2]: https://github.com/nkovacne/ovirt-desktop-client El 12/08/16 a las 07:59, Wang Evan escribió: Hi : I want to integrate oVirt-engine into our system platform. In reference to ovirt rest API , I have finished added host and create virtual machine. But I can't find the way to open vm console by API or CLI ,so what should I do ? Thanks ! Evan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
We have a pretty likely configuration, with just one additional option: FORCE_DATA_VERIFICATION=False If it doesn't work, make sure the SSL_CERTIFICATE has the full bundle of your certificate, including intermediate certs, not just the public certificate. Then make sure to restart the ovirt-websocket-proxy daemon (not ovirt-engine). El 14/08/16 a las 06:59, aleksey.maksi...@it-kb.ru escribió: Hi Jiri. But your variant does not work, too # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True Some error: WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] any ideas how to trablshut problem? 14.08.2016, 01:53, "Jiri Belka" : I have different files for those variables, maybe this is the case? Review again. j. - Original Message - From: "aleksey maksimov" To: "Jiri Belka" Cc: "users" Sent: Saturday, August 13, 2016 4:57:45 PM Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/ I changed my file /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: PROXY_PORT=6100 #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem SSL_ONLY=True ...and restart HostedEngine VM. Problem still exists. 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" : It does not work for me. any ideas? 02.08.2016, 17:22, "Jiri Belka" : This works for me: # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True - Original Message - From: "aleksey maksimov" To: "users" Sent: Monday, August 1, 2016 12:13:38 PM Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/ Hello oVirt guru`s ! I have successfully replaced the oVirt 4 site SSL-certificate according to the instructions from "Replacing oVirt SSL Certificate" section in "oVirt Administration Guide" http://www.ovirt.org/documentation/admin-guide/administration-guide/ 3 files have been replaced: /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/keys/apache.key.nopass /etc/pki/ovirt-engine/apache-ca.pem Now the oVirt site using my certificate and everything works fine, but when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a gray screen and message under the button "Toggle messages output": WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] Before replacing certificates SPICE HTML5 browser client works. Native SPICE client works fine. Tell me what to do with SPICE HTML5 browser client? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] LDAP-based domain not working after upgrade?
En 10/8/2016 2:29 p. m., Alexander Wels <awels@redhat.com> escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: > On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas@devels.es wrote: > > El 2016-08-10 08:58, Ondra Machacek escribió: > > > On 08/10/2016 09:37 AM, Nicolás wrote: > > >> Hi, > > >> > > >> We're running oVirt 4.0.1.1, and we're trying to grant a permission to > > >> a > > >> user on a VM. Thing is when we open the 'Permissions' subtab on that > > >> VM, > > >> we click on Add, the LDAP backend shows up but any value entered into > > >> the search box returns nothing, even when I know the values exist. > > >> > > >> This has been working on oVirt 3.x, we actually migrated to 4.x last > > >> week and didn't notice this issue. > > >> > > >> Additionally, there's no combobox to choose the permission to grant? > > > > > > There should be combo box to choose a role. > > > > I've attached a screenshot, seems there's not. > > Its highly likely the dropdown is there, but its scrolled below the bottom > of the dialog and thus you can't see it. I thought I made sure all the > dialogs were working, seems like I missed one. Let me check it out and see > what is going on. > Okay I double checked, I went to the VMs main tab, selected a VM, then went to the permissions sub tab. Clicked add. The dialog that popped up looks like the one attached, which is what I was expecting. The one you attached appears to be missing some styling, which is likely what caused the Role to Assign part to be scrolled below the bottom of the page. Can you complete clear your cache (not shift reload, but settings->clear cache). If that doesn't work can you tell us the version of the patternfly rpm installed on your engine? Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch Anyhow, I see there are lots of packages to update so I'll do so within a few days and report results. > > >> All this is done with the admin@internal user, so I guess this is not > > >> a > > >> self-permission issue. > > >> > > >> Interesting thing is that I can successfully log-in to the user portal > > >> with a LDAP based user and manage all the VMs assigned to them. > > >> > > >> Just to see if there's been any configuration change, we also run the > > >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it > > >> returns > > >> is pretty similar to ours, and even the test commands (Login, Search) > > >> work successfully (I can see search returning user's data like name, > > >> surname, ...). We even applied this configuration to engine to see if > > >> it > > >> makes a difference but the result is the same, the search dialog > > >> returns > > >> nothing and neither I can see the permission to grant. > > >> > > >> Any hint about this? > > > > > > Maybe you hit similar issue to this one[1]. > > > > > > Can you please share engine.log, while you hit search button? > > > > I'm also attaching the log at the time I hit the search button, but I'm > > afraid there's no entry about that. > > > > Thanks. > > > > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675 > > > > > >> Thanks > > >> ___ > > >> Users mailing list > > >> Users@ovirt.org > > >> http://lists.ovirt.org/mailman/listinfo/users > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] LDAP-based domain not working after upgrade?
Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This has been working on oVirt 3.x, we actually migrated to 4.x last week and didn't notice this issue. Additionally, there's no combobox to choose the permission to grant? All this is done with the admin@internal user, so I guess this is not a self-permission issue. Interesting thing is that I can successfully log-in to the user portal with a LDAP based user and manage all the VMs assigned to them. Just to see if there's been any configuration change, we also run the ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns is pretty similar to ours, and even the test commands (Login, Search) work successfully (I can see search returning user's data like name, surname, ...). We even applied this configuration to engine to see if it makes a difference but the result is the same, the search dialog returns nothing and neither I can see the permission to grant. Any hint about this? Thanks ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Migrate machines in unknown state?
Hi, It worked (thanks Ekin, I'd probably had not turned it off and it would indeed been restarted), restarting libvirtd and vdsmd made all machines set their status to up. Seems the cuprit is libvirtd in this case, as I could see some errors in the log. I'm attaching the log FWIW. Thanks. El 07/08/16 a las 19:37, Ekin Meroğlu escribió: Hi, Just a reminder, if you have power management configured, first turn that off for the host - when you restart vdsmd with the power management configured, engine finds it not responding and tries to fence (e.g. reboot) the host. Other than that, restarting vdsmd has been safe in my experience... Regards, On Thu, Aug 4, 2016 at 6:10 PM, Nicolás <mailto:nico...@devels.es>> wrote: El 04/08/16 a las 15:25, Arik Hadas escribió: - Original Message - El 2016-08-04 08:24, Arik Hadas escribió: - Original Message - El 04/08/16 a las 07:18, Arik Hadas escribió: - Original Message - Hi, We're running oVirt 4.0.1 and today I found out that one of our hosts has all its VMs in an unknown state. I actually don't know how (and when) did this happen, but I'd like to restore service possibly without turning off these machines. The host is up, the VMs are up, 'qemu' process exists, no errors, it's just the VMs running on it that have a '?' where status is defined. Is it safe in this case to simply modify database and set those VM's status to 'up'? I remember having to do this a time ago when we faced storage issues, it didn't break anything back then. If not, is there a "safe" way to migrate those VMs to a different host and restart the host that marked them as unknown? Hi Nicolás, I assume that the host these VMs are running on is empty in the webadmin, right? if that is the case then you've probably hit [1]. Changing their status to up is not the way to go since these VMs will not be monitored. Hi Arik, By "empty" you mean the webadmin reports the host being running 0 VMs? If so, that's not the case, actually the VM count seems to be correct in relation to "qemu-*" processes (about 32 VMs), I can even see the machines in the "Virtual machines" tab of the host, it's just they are all marked with the '?' mark. No, I meant the 'Host' column in the Virtual Machines tab but if you see the VMs in the "Virtual machines" sub-tab of the host then run_on_vds points to the right host.. The host is up in the webadmin as well? Can you share the engine log? Yes, the host is up in the webadmin, there are no issues with it, just the VMs running on it have the '?' mark. I've made 3 tests: 1) Restart engine: did not help 2) Check firewall, seems to be ok. 2) PostgreSQL: UPDATE vm_dynamic SET status = 1 WHERE status = 8; : After a while, I see lots of entries like this: 2016-08-04 09:23:10,910 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler4) [6ad135b8] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM xxx is not responding. I'm attaching the engine log, but I don't know when did this happen for the first time, though. If there's a manual way/command to migrate VMs to a different host I'd appreciate a hint about it. Is it safe to restart vdsmd on this host? The engine log looks fine - the VMs are reported as no
Re: [ovirt-users] Migrate machines in unknown state?
El 04/08/16 a las 15:25, Arik Hadas escribió: - Original Message - El 2016-08-04 08:24, Arik Hadas escribió: - Original Message - El 04/08/16 a las 07:18, Arik Hadas escribió: - Original Message - Hi, We're running oVirt 4.0.1 and today I found out that one of our hosts has all its VMs in an unknown state. I actually don't know how (and when) did this happen, but I'd like to restore service possibly without turning off these machines. The host is up, the VMs are up, 'qemu' process exists, no errors, it's just the VMs running on it that have a '?' where status is defined. Is it safe in this case to simply modify database and set those VM's status to 'up'? I remember having to do this a time ago when we faced storage issues, it didn't break anything back then. If not, is there a "safe" way to migrate those VMs to a different host and restart the host that marked them as unknown? Hi Nicolás, I assume that the host these VMs are running on is empty in the webadmin, right? if that is the case then you've probably hit [1]. Changing their status to up is not the way to go since these VMs will not be monitored. Hi Arik, By "empty" you mean the webadmin reports the host being running 0 VMs? If so, that's not the case, actually the VM count seems to be correct in relation to "qemu-*" processes (about 32 VMs), I can even see the machines in the "Virtual machines" tab of the host, it's just they are all marked with the '?' mark. No, I meant the 'Host' column in the Virtual Machines tab but if you see the VMs in the "Virtual machines" sub-tab of the host then run_on_vds points to the right host.. The host is up in the webadmin as well? Can you share the engine log? Yes, the host is up in the webadmin, there are no issues with it, just the VMs running on it have the '?' mark. I've made 3 tests: 1) Restart engine: did not help 2) Check firewall, seems to be ok. 2) PostgreSQL: UPDATE vm_dynamic SET status = 1 WHERE status = 8; : After a while, I see lots of entries like this: 2016-08-04 09:23:10,910 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler4) [6ad135b8] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VM xxx is not responding. I'm attaching the engine log, but I don't know when did this happen for the first time, though. If there's a manual way/command to migrate VMs to a different host I'd appreciate a hint about it. Is it safe to restart vdsmd on this host? The engine log looks fine - the VMs are reported as not-responding for some reason. I would restart libvirtd and vdsmd then Is restarting those two daemons safe? I mean, will that stop all qemu-* processes, so the VMs marked as unknown will stop? Thanks. Thanks. Yes, there is no other way to resolve it other than changing the DB but the change should be to update run_on_vds field of these VMs to the host you know they are running on. Their status will then be updates in 15 sec. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1354494 Arik. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Migrate machines in unknown state?
El 04/08/16 a las 07:18, Arik Hadas escribió: - Original Message - Hi, We're running oVirt 4.0.1 and today I found out that one of our hosts has all its VMs in an unknown state. I actually don't know how (and when) did this happen, but I'd like to restore service possibly without turning off these machines. The host is up, the VMs are up, 'qemu' process exists, no errors, it's just the VMs running on it that have a '?' where status is defined. Is it safe in this case to simply modify database and set those VM's status to 'up'? I remember having to do this a time ago when we faced storage issues, it didn't break anything back then. If not, is there a "safe" way to migrate those VMs to a different host and restart the host that marked them as unknown? Hi Nicolás, I assume that the host these VMs are running on is empty in the webadmin, right? if that is the case then you've probably hit [1]. Changing their status to up is not the way to go since these VMs will not be monitored. Hi Arik, By "empty" you mean the webadmin reports the host being running 0 VMs? If so, that's not the case, actually the VM count seems to be correct in relation to "qemu-*" processes (about 32 VMs), I can even see the machines in the "Virtual machines" tab of the host, it's just they are all marked with the '?' mark. Thanks. Yes, there is no other way to resolve it other than changing the DB but the change should be to update run_on_vds field of these VMs to the host you know they are running on. Their status will then be updates in 15 sec. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1354494 Arik. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Migrate machines in unknown state?
Hi, We're running oVirt 4.0.1 and today I found out that one of our hosts has all its VMs in an unknown state. I actually don't know how (and when) did this happen, but I'd like to restore service possibly without turning off these machines. The host is up, the VMs are up, 'qemu' process exists, no errors, it's just the VMs running on it that have a '?' where status is defined. Is it safe in this case to simply modify database and set those VM's status to 'up'? I remember having to do this a time ago when we faced storage issues, it didn't break anything back then. If not, is there a "safe" way to migrate those VMs to a different host and restart the host that marked them as unknown? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages
El 20/07/16 a las 16:45, Martin Perina escribió: On Wed, Jul 20, 2016 at 4:44 PM, Nicolás <mailto:nico...@devels.es>> wrote: Hi Martin, Actually, up until now we had that cert configured in httpd and in websocket proxy. Seems that now in 4.0.x it's not enough, as opening the https://fqdn complains about the cert not being imported in the key chain. Yes, there's an updated procedure on using external CA in 4.0, for details please take a look at Doc Text in https://bugzilla.redhat.com/show_bug.cgi?id=1336838 So I imported it via keytool, but I don't want to use it in the engine <-> VDSM communication. Hmm, so that would imply that we have some issue with existing internal enigne CA during upgrade ... The strange thing is that we test upgrades a lot but so far we haven't seen any issues which will broke SSL setup between engine and VDSM. You said that you had to downgrade back to 3.6.7 (so unfortunately for us we cannot investigate your nonworking setup more), but how did you do that? Removing all engine packages and configuration, installing back 3.6.7 packaging and restoring configuration form backup? I'm asking to know what changed in your setup between not working 4.0 and working 3.6.7 ... Indeed, those are the steps I followed to the point. To add more strangeness, previously to upgrading this oVirt infrastructure, we upgraded another one that we have (also using own cert, a different one but from the same CA) and everything went smoothly. And what's more, previously to upgrading the engine that failed, I created a copy of that engine machine in a sandbox environment to see if upgrade process would or not success, and it worked perfectly. The only difference between the sandbox and the real machine's process was that when upgrading the real one, the first time I run "engine-setup" it failed because 'systemd' reported PostgreSQL as it was not running (actually it was, thougg), so everything rolled back. I had to kill the PostgreSQL process, start it again with systemctl and then run "engine-setup", where the process completed successfully but the SSL issue appeared. Not sure if this rollback could have shattered the whole thing... Anyhow, tomorrow I'm going to create another copy of the engine machine to a sandbox environment and try again. If it works I'll cross my fingers and give another try on the real machine... Thanks! Thanks Martin Thanks! En 20/7/2016 2:48 p. m., Martin Perina mailto:mper...@redhat.com>> escribió: Hi, sorry for late response, I overlook your reply :-( I looked at your logs and it seems to me that there's SSL error when engine tries to contact VDSM. You have mentioned that your are using your own custom CA. Are you using it only for HTTPS certificate or do you want to use it also for Engine <-> VDSM communication? Martin Perina On Wed, Jul 20, 2016 at 9:18 AM, mailto:nico...@devels.es>> wrote: Any hints about this? El 2016-07-13 11:13, nico...@devels.es <mailto:nico...@devels.es> escribió: Hi, Unfortunately, upgrading to 4.0.1RC didn't solve the problem. Actually, the error changed to 'General SSLEngine problem', but the result was the same, like this: 2016-07-13 09:52:22,010 INFO [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connecting to /10.X.X.X 2016-07-13 09:52:22,018 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages: General SSLEngine problem It's worth mentioning that we're using our own SSL certificates (not self-signed), and I imported the combined certificate into the /etc/pki/ovirt-engine/.truststore key file. Not sure if related, but just in case. I had to downgrade to 3.6.7. I'm attaching requested logs, if you need anything else don't hesitate to ask. Regards. El 2016-07-13 09:45, Martin Perina escribió: Hi, could you please share also vdsm.log from your hosts and also server.log and setup logs from /var/log/ovirt-engine/setup directory? Thanks Martin Perina On Wed, Jul 13, 2016 at 10:36 AM, mailto:nico...@devels.e
Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages
Hi Martin, Actually, up until now we had that cert configured in httpd and in websocket proxy. Seems that now in 4.0.x it's not enough, as opening the https://fqdn complains about the cert not being imported in the key chain. So I imported it via keytool, but I don't want to use it in the engine <-> VDSM communication. Thanks!En 20/7/2016 2:48 p. m., Martin Perina escribió:Hi,sorry for late response, I overlook your reply :-(I looked at your logs and it seems to me that there's SSL error when engine tries to contact VDSM.You have mentioned that your are using your own custom CA. Are you using it only for HTTPS certificate or do you want to use it also for Engine <-> VDSM communication?Martin Perina On Wed, Jul 20, 2016 at 9:18 AM,wrote:Any hints about this? El 2016-07-13 11:13, nico...@devels.es escribió: Hi, Unfortunately, upgrading to 4.0.1RC didn't solve the problem. Actually, the error changed to 'General SSLEngine problem', but the result was the same, like this: 2016-07-13 09:52:22,010 INFO [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp Reactor) [] Connecting to /10.X.X.X 2016-07-13 09:52:22,018 ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages: General SSLEngine problem It's worth mentioning that we're using our own SSL certificates (not self-signed), and I imported the combined certificate into the /etc/pki/ovirt-engine/.truststore key file. Not sure if related, but just in case. I had to downgrade to 3.6.7. I'm attaching requested logs, if you need anything else don't hesitate to ask. Regards. El 2016-07-13 09:45, Martin Perina escribió: Hi, could you please share also vdsm.log from your hosts and also server.log and setup logs from /var/log/ovirt-engine/setup directory? Thanks Martin Perina On Wed, Jul 13, 2016 at 10:36 AM, wrote: Hi, We upgraded from 3.6.6 to 4.0.0 and we have a big issue since the engine cannot connect to hosts. In the logs all we see is this error: ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages I'm attaching full logs. Could someone help please? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users [1] Links: -- [1] http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt and Ceph
Hi Nir, El 25/06/16 a las 22:57, Nir Soffer escribió: On Sat, Jun 25, 2016 at 11:47 PM, Nicolás wrote: Hi, We're using Ceph along with an iSCSI gateway, so our storage domain is actually an iSCSI backend. So far, we have had zero issues with cca. 50 high IO rated VMs. Perhaps [1] might shed some light on how to set it up. Can you share more details on this setup and how you integrate with ovirt? For example, are you using ceph luns in regular iscsi storage domain, or attaching luns directly to vms? Fernando Frediani (responding to this thread) hit the nail on the head. Actually we have a 3-node Ceph infrastructure, so we created a few volumes on the Ceph nodes side (RBD) and then exported them to iSCSI, so it's oVirt who creates the LVs on the top, this way we don't need to attach luns directly. Once the volumes are exported on the iSCSI side, adding an iSCSI domain on oVirt is enough to make the whole thing work. As for experience, we have done a few tests and so far we've had zero issues: * The main bottleneck is the iSCSI gateway interface bandwith. In our case we have a balance-alb bond over two 1G network interfaces. Later we realized this kind of bonding is useless because MAC addresses won't change, so in practice only 1G will be used at most. Making some heavy tests (i.e., powering on 50 VMs at a time) we've reached this threshold at specific points but it didn't affect performance significantly. * Doing some additional heavy tests (powering on and off all VMs at a time), we've reached the maximum value of cca. 1200 IOPS at a time. In normal conditions we don't surpass 200 IOPS, even when these 50 VMs do lots of disk operations. * We've also done some tolerance tests, like removing one or more disks from a Ceph node, reinserting them, suddenly shut down one node, restoring it... The only problem we've experienced is a slower access to the iSCSI backend, which results in a message in the oVirt manager warning about this: something like "Storage is taking to long to respond...", which was maybe 15-20 seconds. We got no VM pauses at any time, though, nor any significant issue. Did you try our dedicated cinder/ceph support and compared it with ceph iscsi gateway? Not actually, in order to avoid deploying Cinder we directly implemented the gateway as it looked easier to us. Nir Hope this helps. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt and Ceph
Hi, We're using Ceph along with an iSCSI gateway, so our storage domain is actually an iSCSI backend. So far, we have had zero issues with cca. 50 high IO rated VMs. Perhaps [1] might shed some light on how to set it up. Regards. [1]: https://www.suse.com/documentation/ses-2/book_storage_admin/data/cha_ceph_iscsi.htmlEn 24/6/2016 9:28 p. m., Charles Gomes escribió: Hello  Iâve been reading lots of material about implementing oVirt with Ceph, however all talk about using Cinder. Is there a way to get oVirt with Ceph without having to implement entire Openstack ? Iâm already currently using Foreman to deploy Ceph and KVM nodes, trying to minimize the amount of moving parts. I heard something about oVirt providing a managed Cinder appliance, have any seen this ?  ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Snapshot deletion failure
Done, you can find it in [1]. Feel free to add/modify anything you consider inaccurate. Thank you. [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1349950 El 24/06/16 a las 12:39, Nir Soffer escribió: On Fri, Jun 24, 2016 at 11:39 AM, Vinzenz Feenstra wrote: On Jun 24, 2016, at 9:10 AM, nico...@devels.es wrote: Hi, We're trying to delete an auto-generated live snapshot that has been created after migrating an online VM's storage to a different domain. oVirt version is 3.6.6 and VDSM version is 4.17.28. Most relevant log lines are: 2016-06-24 07:50:36,252 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) [799a22e3] Failed in 'MergeVDS' method 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (pool-7-thread-10) [799a22e3] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VDSM host2.domain.com command failed: Merge failed 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) [799a22e3] Command 'MergeVDSCommand(HostName = host2.domain.com, MergeVDSCommandParameters:{runAsync='true', hostId='c31dca1a-e5bc-43f6-940f-6397e3ddbee4', vmId='7083832a-a1a2-42b7-961f-2e9c0dcd7e18', storagePoolId='fa155d43-4e68-486f-9f9d-ae3e3916cc4f', storageDomainId='9339780c-3667-4fef-aa13-9bec08957c5f', imageGroupId='65a0b0d4-5c96-4dd9-a31b-4d08e40a46a5', imageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', baseImageId='568b2f77-0ddf-4349-a45c-36fcb0edecb6', topImageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', bandwidth='0'})' execution failed: VDSGenericException: VDSErrorException: Failed to MergeVDS, error = Merge failed, code = 52 2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.bll.MergeCommand] (pool-7-thread-10) [799a22e3] Engine exception thrown while sending merge command: org.ovirt.engine.core.common.errors.EngineException: EngineException: org.ovirt.engine.core.vdsbroker.vdsbroker.VDSErrorException: VDSGenericException: VDSErrorException: Failed to MergeVDS, error = Merge failed, code = 52 (Failed with error mergeErr and code 52) I'm attaching relevant logs (both for ovirt-engine and SPM's vdsm). What could be the reason for this error? @Nir, that looks like some issue in VDSM please have a look jsonrpc.Executor/3::ERROR::2016-06-24 07:50:36,216::vm::4955::virt.vm::(merge) vmId=`7083832a-a1a2-42b7-961f-2e9c0dcd7e18`::Live merge failed (job: 3ea68e36-6d99-4af9-a54e-4c5b06df6a0f) Traceback (most recent call last): File "/usr/share/vdsm/virt/vm.py", line 4951, in merge flags) File "/usr/share/vdsm/virt/virdomain.py", line 68, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 124, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1313, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 668, in blockCommit if ret == -1: raise libvirtError ('virDomainBlockCommit() failed', dom=self) libvirtError: block copy still active: disk 'vda' already in active block job This means there was a previous attempt to merge, and the block job did not complete yet. Engine should detect that there is an active block job and wait until it completes. This is probably engine bug, please file a bug and attach complete vdsm and engine logs. Ala, can you look at this? Nir ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 100% memory usage on desktop environments
El 18/05/16 a las 18:11, Karli Sjöberg escribió: Den 18 maj 2016 7:03 em skrev Nicolás : > > Hi Karli, > > El 18/05/16 a las 16:59, Karli Sjöberg escribió: >> >> >> Den 18 maj 2016 5:49 em skrev Nicolás : >> > >> > Hi, >> > >> > Probably not an oVirt issue, but maybe someone can help. I've deployed a >> > pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage). >> >> Just spitballing here: 14.04 only? Tried 16.04, or any other OS for that matter? For now, it sounds more guest related rather than oVirt. >> >> /K > > > I tried a vanilla centos-7.1 as well and the same happens. I'm of the same opinion that this is more a guest related issue, it's just I'd like to find out why this only happens with QXL and not with CIRRUS. > > Thanks. Very interesting. Are your hosts all of the same architecture(family)? /K Actually we have a nice mixture of manufacturers. We run 7 hosts, paired 4-2-1 in relation to architecture. All of them have the same resources, though (CPUs + RAM). In this case, I can't test the VM on different hosts because we've separated one of them (one of the "4") on a standalone oVirt datacenter as we're making tests on it, but I remember this has already happened to me in the past (I didn't have the time to debug it at that time, though). > >> > Each time I install an additional desktop environment (Gnome, KDE, >> > whatever...), CPU usage rises to 100% all time to the extreme that >> > interacting with the machine becomes impossible (maybe a mouse movement >> > is propagated 3 minutes later or so...). >> > >> > To debug this, I installed LXDE, which is a lightweight desktop >> > environment based on Xorg. I could see there is an Xorg process >> > consuming one of the CPUs and the machine stops responding as far as the >> > desktop environment goes. I have not changed anything in the >> > configuration file. >> > >> > I could also see this only happens when QXL is chosen as the display >> > driver. When CIRRUS is chosen, everything works smoothly and CPU is >> > ~100% idle. The downside is that we want to use SPICE and CIRRUS won't >> > allow it. >> > >> > Why does this happen? Is this an OS-side driver issue? Any hint how can >> > it be fixed? >> > >> > Thanks. >> > >> > Nicolás >> > ___ >> > Users mailing list >> > Users@ovirt.org >> > http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] 100% memory usage on desktop environments
Hi Karli, El 18/05/16 a las 16:59, Karli Sjöberg escribió: Den 18 maj 2016 5:49 em skrev Nicolás : > > Hi, > > Probably not an oVirt issue, but maybe someone can help. I've deployed a > pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage). Just spitballing here: 14.04 only? Tried 16.04, or any other OS for that matter? For now, it sounds more guest related rather than oVirt. /K I tried a vanilla centos-7.1 as well and the same happens. I'm of the same opinion that this is more a guest related issue, it's just I'd like to find out why this only happens with QXL and not with CIRRUS. Thanks. > Each time I install an additional desktop environment (Gnome, KDE, > whatever...), CPU usage rises to 100% all time to the extreme that > interacting with the machine becomes impossible (maybe a mouse movement > is propagated 3 minutes later or so...). > > To debug this, I installed LXDE, which is a lightweight desktop > environment based on Xorg. I could see there is an Xorg process > consuming one of the CPUs and the machine stops responding as far as the > desktop environment goes. I have not changed anything in the > configuration file. > > I could also see this only happens when QXL is chosen as the display > driver. When CIRRUS is chosen, everything works smoothly and CPU is > ~100% idle. The downside is that we want to use SPICE and CIRRUS won't > allow it. > > Why does this happen? Is this an OS-side driver issue? Any hint how can > it be fixed? > > Thanks. > > Nicolás > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] 100% memory usage on desktop environments
Hi, Probably not an oVirt issue, but maybe someone can help. I've deployed a pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage). Each time I install an additional desktop environment (Gnome, KDE, whatever...), CPU usage rises to 100% all time to the extreme that interacting with the machine becomes impossible (maybe a mouse movement is propagated 3 minutes later or so...). To debug this, I installed LXDE, which is a lightweight desktop environment based on Xorg. I could see there is an Xorg process consuming one of the CPUs and the machine stops responding as far as the desktop environment goes. I have not changed anything in the configuration file. I could also see this only happens when QXL is chosen as the display driver. When CIRRUS is chosen, everything works smoothly and CPU is ~100% idle. The downside is that we want to use SPICE and CIRRUS won't allow it. Why does this happen? Is this an OS-side driver issue? Any hint how can it be fixed? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Storage migration: Preallocation forced on destination
If instead of copying on step 1 the disk has been moved, any chance to adapt this workaround so the disk is thin provisioned on the target? We moved some machines before knowing this and unfortunately once moved to iSCSI the disk is preallocated, so moving it back won't do the trick. Otherwise the workaround works perfectly. Thanks. Mensaje original De: Nir Soffer Fecha:04/03/2016 23:23 (GMT+00:00) Para: Pavel Gashev Cc: Nicolás ,amureini ,users@ovirt.org Asunto: Re: [ovirt-users] Storage migration: Preallocation forced on destination On Sat, Mar 5, 2016 at 12:19 AM, Pavel Gashev wrote: > I think it's hard to calculate the additional space for cow format without > analysing raw image. It's better to allocate enough space, and then decrease > it after qemu-img convert. We use 10% as a rough estimate for additional space when converting from raw to qcow format. Sure it will waste some space, but it is good enough. How to you plan to check the used size on the destination lv? > Please note that while disk moving keeps disk format, disk copying changes > format. So when you copy a thin provisioned disk to iSCSI storage it's being > converted to cow. The issue is that size of converted lv still looks like > preallocated. You can decrease it manually via lvchange, or you can move it > to a file based storage and back. Moving disks keeps disk format, but fixes > its size. Yes, this seems to be the way to work around this issue currently: 1. Copy to the disk to block storage - will convert it to qcow format on preallocated lv 2. Move disk from block storage to file storage 3. Move disk back to block storage > Also please consider qcow compat=1.1 as default disk format both for file and > block storages. This will make your disk incompatible with old ovirt versions on el6. In storage domain format v3 we are using comapt=0.10. We plan to move to compat=1.1 in 4.0. > > > > On 04/03/16 23:23, "users-boun...@ovirt.org on behalf of Nir Soffer" > wrote: > >>On Fri, Mar 4, 2016 at 7:07 PM, Nicolás wrote: >>> Hi, >>> >>> We're migrating an existing storage (glusterfs) to a new one (iSCSI). All >>> disks on glusterfs are thin provisioned, but when migrating to iSCSI the >>> following warning is shown: >>> >>> The following disks will become preallocated, and may consume >>> considerably more space on the target: local-disk >>> >>> Why is that? Is there a way to migrate disks so they are thin provisioned on >>> iSCSI as well? >> >>The issue is that we use raw sparse format for thin provisioned disks >>on file based >>storage. The file system provides the thin provisioning, maintaining holes in >>the files. >> >>When we create the destination lv, we use the disk virtual size, so you get >>practically a preallocated volume. >> >>I think we can do better - before copying the disk, we can check the actual >>used >>space (e.g. what qemu-img info or stat report), and create the >>destination lv using >>the used size (plus additional space for qcow format). >> >>I tested this by extending the destination lv manually and then >>copying data manually >>using qemu-img convert, and it works. >> >>Can you file a bug for this, and explain the use case? >> >>Nir >>___ >>Users mailing list >>Users@ovirt.org >>http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Storage migration: Preallocation forced on destination
El 04/03/16 a las 20:23, Nir Soffer escribió: On Fri, Mar 4, 2016 at 7:07 PM, Nicolás wrote: Hi, We're migrating an existing storage (glusterfs) to a new one (iSCSI). All disks on glusterfs are thin provisioned, but when migrating to iSCSI the following warning is shown: The following disks will become preallocated, and may consume considerably more space on the target: local-disk Why is that? Is there a way to migrate disks so they are thin provisioned on iSCSI as well? The issue is that we use raw sparse format for thin provisioned disks on file based storage. The file system provides the thin provisioning, maintaining holes in the files. When we create the destination lv, we use the disk virtual size, so you get practically a preallocated volume. I think we can do better - before copying the disk, we can check the actual used space (e.g. what qemu-img info or stat report), and create the destination lv using the used size (plus additional space for qcow format). I tested this by extending the destination lv manually and then copying data manually using qemu-img convert, and it works. Can you file a bug for this, and explain the use case? Nir Done, for the ones interested on it: https://bugzilla.redhat.com/show_bug.cgi?id=1314959 Thanks. Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Storage migration: Preallocation forced on destination
Hi, We're migrating an existing storage (glusterfs) to a new one (iSCSI). All disks on glusterfs are thin provisioned, but when migrating to iSCSI the following warning is shown: The following disks will become preallocated, and may consume considerably more space on the target: local-disk Why is that? Is there a way to migrate disks so they are thin provisioned on iSCSI as well? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to create a DataCenterQuota via Python SDK?
El 19/02/16 a las 13:56, nico...@devels.es escribió: Hi, I'm trying to create a Data Center Quota with limits for memory, vcpu and storage. As per the class definition, DataCenterQuota expects: a datacenter, a quota and a context. Quota class in turn expects limits but only as percentages, for hard and soft limits. However if I dump an already created DataCenterQuota object I see: {'_Base__context': 36443152, 'parentclass': , 'permissions': 0x278ef90>, 'quotaclusterlimits': object at 0x2540490>, 'quotastoragelimits': object at 0x278ef50>, 'superclass': } I see DataCenterQuotaQuotaClusterLimits and DataCenterQuotaQuotaStorageLimits allow creating limits for memory/cpu and storage respectively, and they're set in the DataCenterQuota __init__ method like this: self.quotaclusterlimits = DataCenterQuotaQuotaClusterLimits(self, context) self.quotastoragelimits = DataCenterQuotaQuotaStorageLimits(self, context) However, I'm unable to find out how to handle the 'context' parameter to contain those two limit classes. Could someone shed some light on it? An example would be welcome too. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users I found a way, not sure if it's the best way to go though (probably not), but works. dc=api.datacenters.get(name='DC') q = params.Quota(name='Python-SDK', description='Python-SDK', data_center=dc, cluster_soft_limit_pct=80, cluster_hard_limit_pct=20, storage_soft_limit_pct=80, storage_hard_limit_pct=20) dc.quotas.add(q) z = dc.quotas.get(name='Python-SDK') qcl = params.QuotaClusterLimit(vcpu_limit=20, memory_limit=1) z.quotaclusterlimits.add(qcl) qsl = params.QuotaStorageLimit(limit=500) z.quotastoragelimits.add(qsl) Regards. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Manually assign DC and Cluster to Blank template
Hi Greg, El 18/02/16 a las 18:36, Greg Padgett escribió: On 02/18/2016 02:49 AM, nico...@devels.es wrote: El 2016-02-17 22:55, Greg Padgett escribió: On 02/16/2016 07:56 AM, nico...@devels.es wrote: Hi, We upgraded from oVirt 3.5 and 3.6 and deleted the Default cluster, so now we have the Blank template with no DC and no Cluster, thus our users can't use it. Is there a way to manually set these two parameters to the current DC and Cluster values for the Blank template? I tried editing it but see no option to set them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi Nicolás, Removing the default cluster should be ok, since the templates don't bind VMs to a DC/Cluster--you should be able to specify the DC/Cluster when creating a VM. HTH, Greg Hi Greg, I'll elaborate a bit further on the issue. I'm attaching a screenshot of the 'Templates' tab on the webadmin pane - As you can see, all of them have a Data Center and a Cluster assigned (columns 4 and 5) but the Blank template (because we deleted the default DC). Even if this template has the 'Everyone' permission, as we're granting permissions to our users on the Data Center, they are not able to see the Blank template in the list when deploying new machines in the userportal view, so currently they necessarily need to choose a template from the list which is not Blank, and that's an issue to some of them. That's why I was wondering if there's a manual way to assign the DC and Cluster to the Blank template, even modifying it directly in the DB, so the users see it in the userportal. Any hint is very appreciated. Regards, Nicolás The default template is unbound to a DC/Cluster by design, so while forcing an assignment in the db could work (not sure), it's not supported and likely to break at some point. See [1] for details on that 3.6 change. However, since the root issue seems to be users not being able to use the template, you should be able to assign permissions that allow this from the Templates > Permissions sub-tab. If this isn't working, it could be a bug. [1] http://wiki.ovirt.org/develop/release-management/features/virt/blank-to-defaults/ Oh, now I see. Indeed, I was able to see the template in the side 'Template' tab, but unable to see it when deploying a machine. I realized that for some reason the Blank template missed the UserTemplateBasedVm permission (most probably someone accidentally deleted it), so I added it back and now I can see it. Thanks very much for the insight. Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How does VDSM-Fake actually work?
Hi Roman, El 16/02/16 a las 10:27, Roman Mohr escribió: On Fri, Feb 12, 2016 at 12:45 PM, Michal Skrivanek mailto:michal.skriva...@redhat.com>> wrote: On 09 Feb 2016, at 12:15, Nicolás mailto:nico...@devels.es>> wrote: Is there a way to get an account on mojo.redhat.com <http://mojo.redhat.com> or is it internal? I'm trying to open the document but credentials are required and I see no option to create an account. yes it is Eldad, would you please move it to ovirt.org <http://ovirt.org> instead? I recently played with fakevdsm myself. The result was the patch series in [1]. At least an updated README for the result of my patches can be found in [2]. Thanks, michal El 04/02/16 a las 13:49, emarcian escribió: Hi, Seems like you need to change this settings update vdc_options set option_value='false' where option_name='InstallVds'; follow the instructions here: https://mojo.redhat.com/docs/DOC-990399 in case you using 3.6 there is a new war (if you run the simulator as standalone). -Eldad On 02/04/2016 03:04 PM, Piotr Kliczewski wrote: Eldad is working on making it working with engine 3.6. He should be able to give you information you need. On Wed, Feb 3, 2016 at 12:33 PM, <mailto:nico...@devels.es> wrote: Anything? El 2016-02-02 10:18, Nicolás escribió: Hi, I'm trying to set up VDSM-Fake (git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however, I'm a bit confused about how does it actually work. As the instructions say, I was able to build the project with Maven (however, the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no longer provided at the repository). Once built, I run mvn jetty:run and the server started correctly: 2016-02-02 11:01:51.957:INFO::jetty-6.1.26 [1] 2016-02-02 11:01:52.804:INFO::No [2] Transaction manager found - if your webapp requires one, please configure one. 2016-02-02 11:01:53,424 Application initialized. 2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322 2016-02-02 11:01:53.702:INFO::Started [3] SelectChannelConnector@0.0.0.0:54321 <mailto:SelectChannelConnector@0.0.0.0:54321> [INFO] Started Jetty Server [INFO] Starting scanner at interval of 10 seconds. I could indeed verify it's listening on the VDSM port: [root@host ovirt-vdsmfake]# netstat -atpn | grep 54321 tcp6 0 0 :::54321 :::*LISTEN 44870/java So the next step is to add a fake host via REST. I used scripts provided here [4] and I successfully added the host, however, it starts installing all the VDSM packages as it were a normal host and therefore it tries to start vdsmd as well, which throws an error as the Jetty Server is already listening on the 54321 port. I shut down the Jetty Server and allowed oVirt Manager to install all the packages properly, then stopped vdsmd and started the Jetty Server, but expectedly oVirt Engine fails with message "Host xxx is non responsive", so what I actually got is a real VDSM host and not a fake one. FWIW, the fake VDSM runs on a different host, ports are reacheable from the oVirt engine, proper /etc/hosts has been added to the engine to reach the host, and no further customization of web.xml has been done. I feel like I'm missing something here. Could someone shed some light on what's wrong? Thanks. Nicolás @Nicolas I would recommend you to use the top of my gerrit patches to run vdsmake: git clone git://gerrit.ovirt.org/ovirt-vdsmfake <http://gerrit.ovirt.org/ovirt-vdsmfake> cd ovirt-vdsmfake git fetch git://gerrit.ovirt.org/ovirt-vdsmfake <http://gerrit.ovirt.org/ovirt-vdsmfake> refs/changes/70/53570/2 && git checkout FETCH_HEAD then follow the instructions in the README of the checked out repository [3]. Hope that helps. Best Regards, Roman [1] https://gerrit.ovirt.org/#/q/status:open+project:ovirt-vdsmfake+branch:master+topic:easy_access [2] https://gerrit.ovirt.org/#/c/53570/ [3] https://gerrit.ovirt.org/#/c/53570/2/README I could finally make fakevdsm work with your changes. Maybe I'm missing something but this works if the engine and the fake host are run on the same server - when I tried to run the fake host on a different host I wasn't seeing any responses from the host (the firewall was vanilla clean). In any case, I'm ok with both running on the same machine. Will this be merged into master? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How does VDSM-Fake actually work?
Is there a way to get an account on mojo.redhat.com or is it internal? I'm trying to open the document but credentials are required and I see no option to create an account. El 04/02/16 a las 13:49, emarcian escribió: Hi, Seems like you need to change this settings update vdc_options set option_value='false' where option_name='InstallVds'; follow the instructions here: https://mojo.redhat.com/docs/DOC-990399 in case you using 3.6 there is a new war (if you run the simulator as standalone). -Eldad On 02/04/2016 03:04 PM, Piotr Kliczewski wrote: Eldad is working on making it working with engine 3.6. He should be able to give you information you need. On Wed, Feb 3, 2016 at 12:33 PM, wrote: Anything? El 2016-02-02 10:18, Nicolás escribió: Hi, I'm trying to set up VDSM-Fake (git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however, I'm a bit confused about how does it actually work. As the instructions say, I was able to build the project with Maven (however, the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no longer provided at the repository). Once built, I run mvn jetty:run and the server started correctly: 2016-02-02 11:01:51.957:INFO::jetty-6.1.26 [1] 2016-02-02 11:01:52.804:INFO::No [2] Transaction manager found - if your webapp requires one, please configure one. 2016-02-02 11:01:53,424 Application initialized. 2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322 2016-02-02 11:01:53.702:INFO::Started [3] SelectChannelConnector@0.0.0.0:54321 [INFO] Started Jetty Server [INFO] Starting scanner at interval of 10 seconds. I could indeed verify it's listening on the VDSM port: [root@host ovirt-vdsmfake]# netstat -atpn | grep 54321 tcp6 0 0 :::54321 :::*LISTEN 44870/java So the next step is to add a fake host via REST. I used scripts provided here [4] and I successfully added the host, however, it starts installing all the VDSM packages as it were a normal host and therefore it tries to start vdsmd as well, which throws an error as the Jetty Server is already listening on the 54321 port. I shut down the Jetty Server and allowed oVirt Manager to install all the packages properly, then stopped vdsmd and started the Jetty Server, but expectedly oVirt Engine fails with message "Host xxx is non responsive", so what I actually got is a real VDSM host and not a fake one. FWIW, the fake VDSM runs on a different host, ports are reacheable from the oVirt engine, proper /etc/hosts has been added to the engine to reach the host, and no further customization of web.xml has been done. I feel like I'm missing something here. Could someone shed some light on what's wrong? Thanks. Nicolás Links: -- [1]INFO::jetty-6.1.26 [2]INFO::No [3]INFO::Started [4]http://www.ovirt.org/REST_API_Using_BASH_Automation ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] How does VDSM-Fake actually work?
Hi, I'm trying to set up VDSM-Fake (git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however, I'm a bit confused about how does it actually work. As the instructions say, I was able to build the project with Maven (however, the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no longer provided at the repository). Once built, I run mvn jetty:run and the server started correctly: 2016-02-02 11:01:51.957:INFO::jetty-6.1.26 2016-02-02 11:01:52.804:INFO::No Transaction manager found - if your webapp requires one, please configure one. 2016-02-02 11:01:53,424 Application initialized. 2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322 2016-02-02 11:01:53.702:INFO::Started SelectChannelConnector@0.0.0.0:54321 [INFO] Started Jetty Server [INFO] Starting scanner at interval of 10 seconds. I could indeed verify it's listening on the VDSM port: [root@host ovirt-vdsmfake]# netstat -atpn | grep 54321 tcp6 0 0 :::54321 :::*LISTEN 44870/java So the next step is to add a fake host via REST. I used scripts provided here <http://www.ovirt.org/REST_API_Using_BASH_Automation> and I successfully added the host, however, it starts installing all the VDSM packages as it were a normal host and therefore it tries to start vdsmd as well, which throws an error as the Jetty Server is already listening on the 54321 port. I shut down the Jetty Server and allowed oVirt Manager to install all the packages properly, then stopped vdsmd and started the Jetty Server, but expectedly oVirt Engine fails with message "Host xxx is non responsive", so what I actually got is a real VDSM host and not a fake one. FWIW, the fake VDSM runs on a different host, ports are reacheable from the oVirt engine, proper /etc/hosts has been added to the engine to reach the host, and no further customization of web.xml has been done. I feel like I'm missing something here. Could someone shed some light on what's wrong? Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Network interface profiles disappeared after upgrading to 3.6.1
Done. For those having the same issue: https://bugzilla.redhat.com/show_bug.cgi?id=1299049 Regards, Nicolás El 15/01/16 a las 18:58, Einav Cohen escribió: please file a BZ [1] on this issue with the necessary details as explained on the "OVirt Engine Debug Obfuscated UI" wiki page [2]. My guess is that the server side "Invalid XSRF token" message is not related. Thanks, Einav [1] https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt-engine [2] http://www.ovirt.org/OVirt_Engine_Debug_Obfuscated_UI - Original Message - From: nico...@devels.es To: users@ovirt.org Sent: Friday, January 15, 2016 1:47:01 PM Subject: Re: [ovirt-users] Network interface profiles disappeared after upgrading to 3.6.1 In the JavaScript console I see this: Fri Jan 15 18:38:17 GMT+000 2016 SEVERE: Uncaught exception: com.google.gwt.core.client.JavaScriptException: (TypeError) __gwt$exception: : NMk(...) is null at Unknown.POm(Unknown Source) at Unknown.ZFk(Unknown Source) at Unknown.aGk(Unknown Source) at Unknown.SJk(Unknown Source) at Unknown.VJk(Unknown Source) at Unknown.yIk(Unknown Source) at Unknown.BIk(Unknown Source) at Unknown.bTc(Unknown Source) at Unknown.B6h(Unknown Source) at Unknown.VS(Unknown Source) at Unknown.mT(Unknown Source) at Unknown.jAd/c.onreadystatechange<(Unknown Source) at Unknown.Yp(Unknown Source) at Unknown.aq(Unknown Source) at Unknown._p/<(Unknown Source) at Unknown.anonymous(Unknown Source) Also tried granting the VnicProfileUser and even NetworkAdmin permissions, no difference. In the server.log file I could find this: 2016-01-15 18:28:53,871 ERROR [io.undertow.servlet] (default task-28) Exception while dispatching incoming RPC call: com.google.gwt.user.client.rpc.RpcTokenException: Invalid RPC token (Invalid XSRF token) at org.ovirt.engine.ui.frontend.server.gwt.XsrfProtectedRpcServlet.validateXsrfToken(XsrfProtectedRpcServlet.java:31) [frontend.jar:] at org.ovirt.engine.ui.frontend.server.gwt.AbstractXsrfProtectedRpcServlet.onAfterRequestDeserialized(AbstractXsrfProtectedRpcServlet.java:56) [frontend.jar:] at com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:171) [gwt-servlet.jar:] at com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233) [gwt-servlet.jar:] at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) [gwt-servlet.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) [frontend.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:73) [branding.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:65) [utils.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31) [aaa.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.8.Final.jar:1.1.8.Final] at io.undertow.serv
Re: [ovirt-users] Allowing a user to manage all machines in a pool
Any hints to this, please? Mensaje original De: Nicolás Fecha:20/11/2015 18:39 (GMT+00:00) Para: users@ovirt.org Asunto: [ovirt-users] Allowing a user to manage all machines in a pool Hi, We're running oVirt 3.5.3.1-1, and we're currently deploying some Pools for students and teachers, so each has access to one machine in the pool. Thus, each of them is granted the UserRole in the pool. Now the teacher is asking us to allow him access to all students' VMs via the Web GUI to evaluate their work. Is there a permission to accomplish that? In worst of cases I will detach the VMs from the pool and grant the teacher the UserRole on each of them, but I'd like to know if there's a "cleaner" way. Thanks. Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Allowing a user to manage all machines in a pool
Hi, We're running oVirt 3.5.3.1-1, and we're currently deploying some Pools for students and teachers, so each has access to one machine in the pool. Thus, each of them is granted the UserRole in the pool. Now the teacher is asking us to allow him access to all students' VMs via the Web GUI to evaluate their work. Is there a permission to accomplish that? In worst of cases I will detach the VMs from the pool and grant the teacher the UserRole on each of them, but I'd like to know if there's a "cleaner" way. Thanks. Regards, Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Pool machines not listed in VM tab
Hi, We're running oVirt 3.5.3.1 and recently we had a crash of one of our hosts. Since then, there are some VMs that are not listed in the Virtual Machines tab, but still exist and are listed in the Pools tab when clicked on the specific pool. Is there a way to re-synchronize the list of Virtual Machines in accordance with the information of the Pools tab? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Adding a new quota via the ovirt-shell
Hi, Since this is not yet implemented, I was wondering whether adding quotas could be accomplished via purely raw SQL sentences. I've done a database dump before and after creating a quota in the oVirt manager and I could see the following changes: 1) An insertion into table 'quota' 2) An insertion into table 'quota_limitation' with field quota_id as a foreign key to the ID of the above row 3) For consumer permissions: a row per user into table 'permissions' Would that suffice in terms of engine consistency to reproduce a quota creation via the oVirt Manager? Thanks. Nicolás El 18/06/15 a las 19:54, Ondra Machacek escribió: Hi, cli/sdks are built on top of REST API, but there is no support for quota in 3.5 in REST API. But see[1], should be supported in 3.6. [1] https://bugzilla.redhat.com/show_bug.cgi?id=893927 On 06/18/2015 03:49 PM, nico...@devels.es wrote: Hi, Is it currently possible to define a new resource quota (CPU, memory, storage...) via the ovirt-shell (CLI) in oVirt 3.5.3? I have listed all the available commands but I can't find it under any of them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Adding a new quota via the ovirt-shell
I can't find out how to do the same with the Python SDK, either. There seems to be a 'Quota' object amongst the params, but it doesn't seem to have defined the CPU, memory and disk tresholds parameters. It seems quite confusing to me, AFAIK a Quota object should be assigned to a Datacenter, so I don't know how the Quota object should be built specifying those parameters. Any help with either the CLI or the SDK will be appreciated :-) Thanks. El 18/06/15 a las 14:49, nico...@devels.es escribió: Hi, Is it currently possible to define a new resource quota (CPU, memory, storage...) via the ovirt-shell (CLI) in oVirt 3.5.3? I have listed all the available commands but I can't find it under any of them. Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Unable to use the SPICE HTML5 tool
Hi, I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes everything is working fine, except that I can't start the SPICE HTML5 tool for any of the installed machines I have. I've installed the oVirt guest agent on the VM side, websocket-proxy is running and port 6100 is listening on the engine box: # systemctl status ovirt-websocket-proxy ovirt-websocket-proxy.service - oVirt Engine websockets proxy Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled) Active: active (running) # netstat -atpn | grep 6100 tcp0 0 0.0.0.0:6100 0.0.0.0:* LISTEN 7227/python Also, I imported the CA cert (https://fqdn/ca.crt) on the browser. However, once I run the SPICE HTML5 client from the userportal, all I get is an empty grey square with the two "Send ctrl+alt+delete" and "Toggle messages output" buttons at the bottom. Nothing in the logs about this issue. I tried to run it both with Chromium and Firefox on a linux box. Is there anything that I am missing? I've run out of ideas... Thanks. Nicolás ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users