[Users] Glance with oVirt
Dear ovirt users. I'm trying to setup an oVirt 3.3 installation using an already existing OpenStack glance service as an external provider. When I define the external provider, I put: Openstack Image as Type the glance service endpoint as URL (ie. http://xx.xx.xx.xx:9292) I used the openstack public url. check Requires Authentication put the administrator user/password/tenant in the following fields. Unfortunately the connection test always fails and the glance provider doesn't work in ovirt. In the engine.log I can see: 2013-09-24 15:57:30,665 INFO [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Running command: TestProviderConnectivityCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2013-09-24 15:57:30,671 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: (Failed with VDSM error PROVIDER_FAILURE and code 5050) 2013-09-24 15:57:30,674 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Transaction rolled-back for command: org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand. The glance URL is reachable from the oVirt engine host, but looking with tcpdump on the glance service I noticed that no connections come up --- when I use requires authentication --- a connection happens if --- I do not use requires authentication --- (even if the test fails ultimately) My OS is CentOS-6.4 and my packages are the following: [root@rhvmgr03 ovirt-engine]# rpm -qa | grep ovi ovirt-host-deploy-1.1.1-1.el6.noarch ovirt-log-collector-3.3.0-1.el6.noarch ovirt-engine-cli-3.3.0.4-1.el6.noarch ovirt-engine-webadmin-portal-3.3.0-4.el6.noarch ovirt-engine-tools-3.3.0-4.el6.noarch ovirt-release-el6-8-1.noarch ovirt-engine-sdk-python-3.3.0.6-1.el6.noarch ovirt-iso-uploader-3.3.0-1.el6.noarch ovirt-host-deploy-java-1.1.1-1.el6.noarch ovirt-engine-userportal-3.3.0-4.el6.noarch ovirt-engine-backend-3.3.0-4.el6.noarch ovirt-engine-setup-3.3.0-4.el6.noarch ovirt-engine-3.3.0-4.el6.noarch ovirt-image-uploader-3.3.0-1.el6.noarch ovirt-engine-lib-3.3.0-4.el6.noarch ovirt-engine-restapi-3.3.0-4.el6.noarch ovirt-engine-dbscripts-3.3.0-4.el6.noarch Do you have some suggestion to debug or solve this issue? Thanks a lot. Best Regards R. Brunetti ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Glance with oVirt
On 09/24/2013 04:56 PM, Gianluca Cecchi wrote: On Tue, Sep 24, 2013 at 4:15 PM, Riccardo Brunetti wrote: Dear ovirt users. I'm trying to setup an oVirt 3.3 installation using an already existing OpenStack glance service as an external provider. When I define the external provider, I put: Openstack Image as Type the glance service endpoint as URL (ie. http://xx.xx.xx.xx:9292) I used the openstack public url. check Requires Authentication put the administrator user/password/tenant in the following fields. Unfortunately the connection test always fails and the glance provider doesn't work in ovirt. Could you give more details regarding how you configured glance service in your openstack environment? Does it relay on swift as its store? Gianluca Hi Gianluca. Thank you for the prompt reply. This is the output of the command: keystone endpoint-list (for what concerns the glance service) | 78bf9c3381604e1ba1aa837c7a768173 | regionOne | http://10.0.54.7:9292 | http://10.0.54.7:9292| http://10.0.54.7:9292 | acb2d31657c5421aaddb1522e2e2340b | All the public/internal/admin URLs are the same, and are reachable from the ovirt engine host: # telnet 10.0.54.7 9292 Trying 10.0.54.7... Connected to 10.0.54.7. Escape character is '^]'. Glance is using a local storage and not swift to store images. Note that I can use them from the OpenStack testbed that I previously prepared. Riccardo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Glance with oVirt
On 09/24/2013 05:06 PM, Jason Brooks wrote: On Tue, 2013-09-24 at 16:15 +0200, Riccardo Brunetti wrote: Dear ovirt users. I'm trying to setup an oVirt 3.3 installation using an already existing OpenStack glance service as an external provider. When I define the external provider, I put: Openstack Image as Type the glance service endpoint as URL (ie. http://xx.xx.xx.xx:9292) I used the openstack public url. check Requires Authentication put the administrator user/password/tenant in the following fields. Unfortunately the connection test always fails and the glance provider doesn't work in ovirt. You also need to run this from the command line (of your engine): engine-config --set KeystoneAuthUrl=http://host.fqdn:35357 And then restart the ovirt-engine service. Jason In the engine.log I can see: 2013-09-24 15:57:30,665 INFO [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Running command: TestProviderConnectivityCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2013-09-24 15:57:30,671 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: (Failed with VDSM error PROVIDER_FAILURE and code 5050) 2013-09-24 15:57:30,674 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Transaction rolled-back for command: org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand. The glance URL is reachable from the oVirt engine host, but looking with tcpdump on the glance service I noticed that no connections come up --- when I use requires authentication --- a connection happens if --- I do not use requires authentication --- (even if the test fails ultimately) My OS is CentOS-6.4 and my packages are the following: [root@rhvmgr03 ovirt-engine]# rpm -qa | grep ovi ovirt-host-deploy-1.1.1-1.el6.noarch ovirt-log-collector-3.3.0-1.el6.noarch ovirt-engine-cli-3.3.0.4-1.el6.noarch ovirt-engine-webadmin-portal-3.3.0-4.el6.noarch ovirt-engine-tools-3.3.0-4.el6.noarch ovirt-release-el6-8-1.noarch ovirt-engine-sdk-python-3.3.0.6-1.el6.noarch ovirt-iso-uploader-3.3.0-1.el6.noarch ovirt-host-deploy-java-1.1.1-1.el6.noarch ovirt-engine-userportal-3.3.0-4.el6.noarch ovirt-engine-backend-3.3.0-4.el6.noarch ovirt-engine-setup-3.3.0-4.el6.noarch ovirt-engine-3.3.0-4.el6.noarch ovirt-image-uploader-3.3.0-1.el6.noarch ovirt-engine-lib-3.3.0-4.el6.noarch ovirt-engine-restapi-3.3.0-4.el6.noarch ovirt-engine-dbscripts-3.3.0-4.el6.noarch Do you have some suggestion to debug or solve this issue? Thanks a lot. Best Regards R. Brunetti ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Ok, now it works. Thank you all very much for your help. Riccardo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Glance with oVirt
On 09/24/2013 08:24 PM, Itamar Heim wrote: On 09/24/2013 06:06 PM, Jason Brooks wrote: On Tue, 2013-09-24 at 16:15 +0200, Riccardo Brunetti wrote: Dear ovirt users. I'm trying to setup an oVirt 3.3 installation using an already existing OpenStack glance service as an external provider. When I define the external provider, I put: Openstack Image as Type the glance service endpoint as URL (ie. http://xx.xx.xx.xx:9292) I used the openstack public url. check Requires Authentication put the administrator user/password/tenant in the following fields. Unfortunately the connection test always fails and the glance provider doesn't work in ovirt. You also need to run this from the command line (of your engine): engine-config --set KeystoneAuthUrl=http://host.fqdn:35357 maybe open a bug on missing a warning keystone is not configured when trying to use glance/neutron with authentication? And then restart the ovirt-engine service. Jason In the engine.log I can see: 2013-09-24 15:57:30,665 INFO [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Running command: TestProviderConnectivityCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2013-09-24 15:57:30,671 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: (Failed with VDSM error PROVIDER_FAILURE and code 5050) 2013-09-24 15:57:30,674 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-3) Transaction rolled-back for command: org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand. The glance URL is reachable from the oVirt engine host, but looking with tcpdump on the glance service I noticed that no connections come up --- when I use requires authentication --- a connection happens if --- I do not use requires authentication --- (even if the test fails ultimately) My OS is CentOS-6.4 and my packages are the following: [root@rhvmgr03 ovirt-engine]# rpm -qa | grep ovi ovirt-host-deploy-1.1.1-1.el6.noarch ovirt-log-collector-3.3.0-1.el6.noarch ovirt-engine-cli-3.3.0.4-1.el6.noarch ovirt-engine-webadmin-portal-3.3.0-4.el6.noarch ovirt-engine-tools-3.3.0-4.el6.noarch ovirt-release-el6-8-1.noarch ovirt-engine-sdk-python-3.3.0.6-1.el6.noarch ovirt-iso-uploader-3.3.0-1.el6.noarch ovirt-host-deploy-java-1.1.1-1.el6.noarch ovirt-engine-userportal-3.3.0-4.el6.noarch ovirt-engine-backend-3.3.0-4.el6.noarch ovirt-engine-setup-3.3.0-4.el6.noarch ovirt-engine-3.3.0-4.el6.noarch ovirt-image-uploader-3.3.0-1.el6.noarch ovirt-engine-lib-3.3.0-4.el6.noarch ovirt-engine-restapi-3.3.0-4.el6.noarch ovirt-engine-dbscripts-3.3.0-4.el6.noarch Do you have some suggestion to debug or solve this issue? Thanks a lot. Best Regards R. Brunetti ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Dear all. Unfortunately I did manage to work out only the first step of the procedure. I can successfully define the glance external provider and from the storage tab I can list the images available in glance, but when I try to import an image (ie. a Fedora19 qcow2 image which is working inside OpenStack) the disk is stuck in Illegal state and in the logs (ovirt-engine) I see messages like: 2013-09-25 16:01:37,740 INFO [org.ovirt.engine.core.bll.AsyncTaskManager] (DefaultQuartzScheduler_Worker-71) Polling and updating Async Tasks: 2 tasks, 2 tasks to poll now 2013-09-25 16:01:37,775 INFO [org.ovirt.engine.core.bll.SPMAsyncTask] (DefaultQuartzScheduler_Worker-71) BaseAsyncTask::OnTaskEndSuccess: Task 32982d1d-543c-4015-8b02-4b0f3f7ac45a (Parent Command ImportRepoImage, Parameters Type org.ovirt.engine.core.common.asynctasks.AsyncTaskParameters) ended successfully. 2013-09-25 16:01:37,776 INFO [org.ovirt.engine.core.bll.CommandAsyncTask] (DefaultQuartzScheduler_Worker-71) CommandAsyncTask::EndActionIfNecessary: All tasks of command 3a9eb626-2ea8-445f-8286-fb0e7c464b3d has ended - executing EndAction 2013-09-25 16:01:37,777 INFO [org.ovirt.engine.core.bll.CommandAsyncTask] (DefaultQuartzScheduler_Worker-71) CommandAsyncTask::EndAction: Ending action for 1 tasks (command ID: 3a9eb626-2ea8-445f-8286-fb0e7c464b3d): calling EndAction . 2013-09-25 16:01:37,778 INFO [org.ovirt.engine.core.bll.SPMAsyncTask] (DefaultQuartzScheduler_Worker-71) BaseAsyncTask::OnTaskEndSuccess: Task e8057bc2-e99f-4db8-ba1d-97b84a1f3db0 (Parent Command ImportRepoImage, Parameters Type org.ovirt.engine.core.common.asynctasks.AsyncTaskParameters) ended successfully. 2013-09-25 16:01:37,778 INFO
[Users] oVirt 3.3 and Neutron
Dear oVirt users. I'm trying to setup oVirt 3.3 using an OpenStack Neutron existing service as network provider. It works pretty well: I can use the networks defined in Neutron, import them and when I launch VM instances from oVirt they get an internal-IP address from Neutron. A can also associate a floating IP to the Neutron port and get inbound connectivity for the virtual machine. The problem is that if I shutdown the VM (both from inside the VM itself and from the oVirt WEB GUI) the association port/internal-IP/floating-IP is lost and when the VM is booted again It will get a different internal-IP on a different port and I have to manually re-associate the floating-IP. Is there a way to keep the IP addresses when the VM is simply shutted down and not deleted? This is the behavior when using OpenStack: if I poweroff the VM, the IPs are kept for the future. Moreover: can you confirm that in oVirt 3.3 there is still no support for the Neutron security rules? Thank you very much Best Regards Riccardo ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] How can I Disable console Single Sign On by default
Dear all. I'm trying to setup an oVirt environment able to provide VMs to a small number of users. I'm just using the "internal" domain and I defined some users and groups using ovirt-aaa-jdbc-tool. Everything seems to work, the users cal log-in into the VM portal and they can create VM. The problem comes out when I try to access the VM console: in order to be able to open the noVNC console, I need to set Disable Single Sign On on the console settings of the VM. But this is only possible using the Administrator portal and I couldn't find a way to do it "as user". How can I allow users to open the noVNC console from the VM portal? Is there a way to set Disable Single Sign On by default? Thanks a lot Riccardo ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/POQ76RL47NNCJPSJMXYKEZ2AOXYR2TJ7/
[ovirt-users] Re: How can I Disable console Single Sign On by default
Hi. Forgot to mention that I'm running oVirt 4.4.2.6-1.el8 Cheers ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/M5JRCEU5BJ2VWTYLOAVN72MUYIXCHT7E/
