[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-20 Thread Callum Smith
elp.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 20 Apr 2019, at 10:54, Benny Zlotnik 
mailto:bzlot...@redhat.com>> wrote:

Sorry, I kind of lost track of what the problem is

The  "KeyError: 'appsList'" issue is a known bug[1]

If a manual (not via vdsm) run of qemu-img is actually stuck, then
let's involve the qemu-discuss list, with the version of the relevant
packages (qemu, qemu-img, kernel, your distro) and the output of gdb
commands

[1] - https://bugzilla.redhat.com/show_bug.cgi?id=1690301



On Sat, Apr 20, 2019 at 1:36 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Benny and others,

So it seems I wasn’t being patient with GDB and it does show me some output. 
This error of qemu-img convert even is failing and preventing updating 
ovirt-node version from 4.3.2 to 4.3.3.1. I get a feeling this is an unrelated 
error, but I thought I’d be complete:

Excuse any typos, im having to type this manually from a remote session, but 
the error:

[733272.427922] hid-generic 0003:0624:0249.0001: usb_submit_urb(ctrl) failed: 
-19

If this bug is preventing even a local yum updatei can’t see how it’s any issue 
other than somehow involved with the hardware of the hypervisor, our network 
and storage configuration must be irrelevant to this fact at this stage?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 12:00, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Without the sudo and running in a  dir where the root has access to, gdb has 
zero output:


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 11:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Some more information:

running qemu-img convert manually having captured the failed attempt from the 
previous:

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/6597eede-9fa0-4451-84fc-9f9c070cb5f3/765fa48b-2e77-4637-b4ca-e1affcd71e48
 -O raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/9cc99110-70a2-477f-b3ef-1031a912d12b/c2776107-4579-43a6-9d60-93a5ea9c64c5
 -W

Added the -W flag just to see what would happen:

gdb -p 79913 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7f528e6bb840 (LWP 79913)):
#0  0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7f528dc510fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7f528dc49b44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x55e94aa0e271 in exec_nopty ()
#4  0x55e94aa0afda in sudo_execute ()
#5  0x55e94aa18a12 in run_command ()
#6  0x55e94aa0969e in main ()


And without -W:

gdb -p 85235 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7fc0cd5f0840 (LWP 85235)):
#0  0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7fc0ccb860fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7fc0ccb7eb44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x5610f4397271 in exec_nopty ()
#4  0x5610f4393fda in sudo_execute ()
#5  0x00005610f43a1a12 in run_command ()
#6  0x5610f439269e in main ()

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 09:57, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Benny,

It would seem that even cloning a VM is failing, creating a VM works on the 
same storage. This is the only error i could find:

ERROR Internal server error
 Traceback (most 
recent call last):
   File 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
 res = 
method(**params)
   File 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.p

[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-19 Thread Callum Smith
Dear Benny and others,

So it seems I wasn’t being patient with GDB and it does show me some output. 
This error of qemu-img convert even is failing and preventing updating 
ovirt-node version from 4.3.2 to 4.3.3.1. I get a feeling this is an unrelated 
error, but I thought I’d be complete:

Excuse any typos, im having to type this manually from a remote session, but 
the error:

[733272.427922] hid-generic 0003:0624:0249.0001: usb_submit_urb(ctrl) failed: 
-19

If this bug is preventing even a local yum updatei can’t see how it’s any issue 
other than somehow involved with the hardware of the hypervisor, our network 
and storage configuration must be irrelevant to this fact at this stage?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 12:00, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Without the sudo and running in a  dir where the root has access to, gdb has 
zero output:


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 11:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Some more information:

running qemu-img convert manually having captured the failed attempt from the 
previous:

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/6597eede-9fa0-4451-84fc-9f9c070cb5f3/765fa48b-2e77-4637-b4ca-e1affcd71e48
 -O raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/9cc99110-70a2-477f-b3ef-1031a912d12b/c2776107-4579-43a6-9d60-93a5ea9c64c5
 -W

Added the -W flag just to see what would happen:

gdb -p 79913 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7f528e6bb840 (LWP 79913)):
#0  0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7f528dc510fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7f528dc49b44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x55e94aa0e271 in exec_nopty ()
#4  0x55e94aa0afda in sudo_execute ()
#5  0x55e94aa18a12 in run_command ()
#6  0x55e94aa0969e in main ()


And without -W:

gdb -p 85235 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7fc0cd5f0840 (LWP 85235)):
#0  0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7fc0ccb860fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7fc0ccb7eb44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x5610f4397271 in exec_nopty ()
#4  0x5610f4393fda in sudo_execute ()
#5  0x5610f43a1a12 in run_command ()
#6  0x5610f439269e in main ()

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 09:57, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Benny,

It would seem that even cloning a VM is failing, creating a VM works on the 
same storage. This is the only error i could find:

ERROR Internal server error
  Traceback (most 
recent call last):
File 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
  res = 
method(**params)
File 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in 
_dynamicMethod
  result = 
fn(*methodArgs)
File 
"", line 2, in getAllVmStats
File 
"/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method
  ret = 
func(*args, **kwargs)
File 
"/usr/lib/python2.7/site-packages/vdsm/API.py", line 1388, in getAllVmStats
  statsList = 
self._cif.getAllVmStats()
   

[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-11 Thread Callum Smith
Without the sudo and running in a  dir where the root has access to, gdb has 
zero output:

[cid:CCCDE95C-DD82-48AE-90E0-68295827C3F9@in.bmrc.ox.ac.uk]
Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 11:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Some more information:

running qemu-img convert manually having captured the failed attempt from the 
previous:

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/6597eede-9fa0-4451-84fc-9f9c070cb5f3/765fa48b-2e77-4637-b4ca-e1affcd71e48
 -O raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/9cc99110-70a2-477f-b3ef-1031a912d12b/c2776107-4579-43a6-9d60-93a5ea9c64c5
 -W

Added the -W flag just to see what would happen:

gdb -p 79913 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7f528e6bb840 (LWP 79913)):
#0  0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7f528dc510fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7f528dc49b44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x55e94aa0e271 in exec_nopty ()
#4  0x55e94aa0afda in sudo_execute ()
#5  0x55e94aa18a12 in run_command ()
#6  0x55e94aa0969e in main ()


And without -W:

gdb -p 85235 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7fc0cd5f0840 (LWP 85235)):
#0  0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7fc0ccb860fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7fc0ccb7eb44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x5610f4397271 in exec_nopty ()
#4  0x5610f4393fda in sudo_execute ()
#5  0x5610f43a1a12 in run_command ()
#6  0x5610f439269e in main ()

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 09:57, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Benny,

It would seem that even cloning a VM is failing, creating a VM works on the 
same storage. This is the only error i could find:

ERROR Internal server error
  Traceback (most 
recent call last):
File 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
  res = 
method(**params)
File 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in 
_dynamicMethod
  result = 
fn(*methodArgs)
File 
"", line 2, in getAllVmStats
File 
"/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method
  ret = 
func(*args, **kwargs)
File 
"/usr/lib/python2.7/site-packages/vdsm/API.py", line 1388, in getAllVmStats
  statsList = 
self._cif.getAllVmStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/clientIF.py", line 567, in getAllVmStats
  return 
[v.getStats() for v in self.vmContainer.values()]
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1766, in getStats
  oga_stats = 
self._getGuestStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1967, in _getGuestStats
  stats = 
self.guestAgent.getGuestInfo()
File 
"/usr/lib/python2.7/si

[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-11 Thread Callum Smith
Some more information:

running qemu-img convert manually having captured the failed attempt from the 
previous:

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/6597eede-9fa0-4451-84fc-9f9c070cb5f3/765fa48b-2e77-4637-b4ca-e1affcd71e48
 -O raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/9cc99110-70a2-477f-b3ef-1031a912d12b/c2776107-4579-43a6-9d60-93a5ea9c64c5
 -W

Added the -W flag just to see what would happen:

gdb -p 79913 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7f528e6bb840 (LWP 79913)):
#0  0x7f528d7661f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7f528dc510fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7f528dc49b44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x55e94aa0e271 in exec_nopty ()
#4  0x55e94aa0afda in sudo_execute ()
#5  0x55e94aa18a12 in run_command ()
#6  0x55e94aa0969e in main ()


And without -W:

gdb -p 85235 -batch -ex "t a a bt"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6

Thread 1 (Thread 0x7fc0cd5f0840 (LWP 85235)):
#0  0x7fc0cc69b1f0 in __poll_nocancel () from /lib64/libc.so.6
#1  0x7fc0ccb860fb in sudo_ev_scan_impl () from 
/usr/libexec/sudo/libsudo_util.so.0
#2  0x7fc0ccb7eb44 in sudo_ev_loop_v1 () from 
/usr/libexec/sudo/libsudo_util.so.0
#3  0x5610f4397271 in exec_nopty ()
#4  0x5610f4393fda in sudo_execute ()
#5  0x5610f43a1a12 in run_command ()
#6  0x5610f439269e in main ()

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Apr 2019, at 09:57, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Benny,

It would seem that even cloning a VM is failing, creating a VM works on the 
same storage. This is the only error i could find:

ERROR Internal server error
  Traceback (most 
recent call last):
File 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
  res = 
method(**params)
File 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in 
_dynamicMethod
  result = 
fn(*methodArgs)
File 
"", line 2, in getAllVmStats
File 
"/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method
  ret = 
func(*args, **kwargs)
File 
"/usr/lib/python2.7/site-packages/vdsm/API.py", line 1388, in getAllVmStats
  statsList = 
self._cif.getAllVmStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/clientIF.py", line 567, in getAllVmStats
  return 
[v.getStats() for v in self.vmContainer.values()]
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1766, in getStats
  oga_stats = 
self._getGuestStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1967, in _getGuestStats
  stats = 
self.guestAgent.getGuestInfo()
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/guestagent.py", line 505, in 
getGuestInfo
  del 
qga['appsList']
  KeyError: 
'appsList'


It's the qemu-img convert for sure that's just failing to do anything, this is 
the command from the clone:
/usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_inst

[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-11 Thread Callum Smith
Dear Benny,

It would seem that even cloning a VM is failing, creating a VM works on the 
same storage. This is the only error i could find:

ERROR Internal server error
  Traceback (most 
recent call last):
File 
"/usr/lib/python2.7/site-packages/yajsonrpc/__init__.py", line 345, in 
_handle_request
  res = 
method(**params)
File 
"/usr/lib/python2.7/site-packages/vdsm/rpc/Bridge.py", line 194, in 
_dynamicMethod
  result = 
fn(*methodArgs)
File 
"", line 2, in getAllVmStats
File 
"/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 50, in method
  ret = 
func(*args, **kwargs)
File 
"/usr/lib/python2.7/site-packages/vdsm/API.py", line 1388, in getAllVmStats
  statsList = 
self._cif.getAllVmStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/clientIF.py", line 567, in getAllVmStats
  return 
[v.getStats() for v in self.vmContainer.values()]
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1766, in getStats
  oga_stats = 
self._getGuestStats()
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 1967, in _getGuestStats
  stats = 
self.guestAgent.getGuestInfo()
File 
"/usr/lib/python2.7/site-packages/vdsm/virt/guestagent.py", line 505, in 
getGuestInfo
  del 
qga['appsList']
  KeyError: 
'appsList'


It's the qemu-img convert for sure that's just failing to do anything, this is 
the command from the clone:
/usr/bin/qemu-img convert -p -t none -T none -f raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/6597eede-9fa0-4451-84fc-9f9c070cb5f3/765fa48b-2e77-4637-b4ca-e1affcd71e48
 -O raw 
/rhev/data-center/mnt/10.141.15.248:_export_instruct_vm__storage/0e01f014-530b-4067-aa1d-4e9378626a9d/images/f0700631-e60b-4c2a-a6f5-a6c818ae7651/d4fb05ec-7c78-4d89-9a66-614c093c6e16

gdb has a blank output for this though. This means 4.3.2 is fairly unusable for 
us, so two questions, can I downgrade to 4.2, and is there a fix coming in 
4.3.3 for this?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 11:22, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Creating a disk on the target share works fine. - This seems to specifically be 
an issue to do with moving a disk to/from a share.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 09:53, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"
289444: No such file or directory.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 09:36, Benny Zlotnik 
mailto:bzlot...@redhat.com>> wrote:

Can you run:
$ gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"


On Wed, Apr 10, 2019 at 11:26 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Further to this, I can't migrate a disk to different storage using the GUI. 
Both disks are configured identically and on the same physical NFS provider.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 9 Apr 2019, at 12:12, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

It would seem this is a bug in 4.3.? - As upgrading the old oVirt HE to 4.3 
(from 4.2.la

[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-10 Thread Callum Smith
Creating a disk on the target share works fine. - This seems to specifically be 
an issue to do with moving a disk to/from a share.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 09:53, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"
289444: No such file or directory.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 09:36, Benny Zlotnik 
mailto:bzlot...@redhat.com>> wrote:

Can you run:
$ gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"


On Wed, Apr 10, 2019 at 11:26 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Further to this, I can't migrate a disk to different storage using the GUI. 
Both disks are configured identically and on the same physical NFS provider.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 9 Apr 2019, at 12:12, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

It would seem this is a bug in 4.3.? - As upgrading the old oVirt HE to 4.3 
(from 4.2.latest) now means that the export of VMs to export domain no longer 
works.

Again qemu-img convert is using some cpu, but no network. Progress is 0.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 Apr 2019, at 15:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

We've exported some VMs from our old oVirt infrastructure and want to import 
them into the new one, but qemu-img appears to be failing. We have mounted an 
export domain populated from the old oVirt in the new hosted engine and are 
using the GUI to import the VM. Manually running the command sits at 16% CPU, 
0% network usage and no progress. It appears to lock the NFS mount and ls and 
lsof both hang.

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw  -O raw 

Conversely a simple cp will work (ruling out file permissions errors):
sudo -u vddm cp  

What might we be doing wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUBKWQIGGSJETPVRWN42R4J7COPFV6GS/


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6EE6X43GTAJ6L4QBH2XQJ4LVPIXCZC3T/


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GD2XCKEIPNCXXQWMR4OP5IKGCORJQEGB/

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SV3V34DQJZ7A3MH4CQMMIZ4GPPHWFB7E/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MICXCNEDJL5NOFUNS7R7W5CYDNEFINVK/


[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-10 Thread Callum Smith
gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"
289444: No such file or directory.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 10 Apr 2019, at 09:36, Benny Zlotnik 
mailto:bzlot...@redhat.com>> wrote:

Can you run:
$ gdb -p $(pidof qemu-img convert) -batch -ex "t a a bt"


On Wed, Apr 10, 2019 at 11:26 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Further to this, I can't migrate a disk to different storage using the GUI. 
Both disks are configured identically and on the same physical NFS provider.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 9 Apr 2019, at 12:12, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

It would seem this is a bug in 4.3.? - As upgrading the old oVirt HE to 4.3 
(from 4.2.latest) now means that the export of VMs to export domain no longer 
works.

Again qemu-img convert is using some cpu, but no network. Progress is 0.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 Apr 2019, at 15:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

We've exported some VMs from our old oVirt infrastructure and want to import 
them into the new one, but qemu-img appears to be failing. We have mounted an 
export domain populated from the old oVirt in the new hosted engine and are 
using the GUI to import the VM. Manually running the command sits at 16% CPU, 
0% network usage and no progress. It appears to lock the NFS mount and ls and 
lsof both hang.

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw  -O raw 

Conversely a simple cp will work (ruling out file permissions errors):
sudo -u vddm cp  

What might we be doing wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUBKWQIGGSJETPVRWN42R4J7COPFV6GS/


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6EE6X43GTAJ6L4QBH2XQJ4LVPIXCZC3T/


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GD2XCKEIPNCXXQWMR4OP5IKGCORJQEGB/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SV3V34DQJZ7A3MH4CQMMIZ4GPPHWFB7E/


[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-10 Thread Callum Smith
Dear All,

Further to this, I can't migrate a disk to different storage using the GUI. 
Both disks are configured identically and on the same physical NFS provider.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 9 Apr 2019, at 12:12, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

It would seem this is a bug in 4.3.? - As upgrading the old oVirt HE to 4.3 
(from 4.2.latest) now means that the export of VMs to export domain no longer 
works.

Again qemu-img convert is using some cpu, but no network. Progress is 0.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 Apr 2019, at 15:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

We've exported some VMs from our old oVirt infrastructure and want to import 
them into the new one, but qemu-img appears to be failing. We have mounted an 
export domain populated from the old oVirt in the new hosted engine and are 
using the GUI to import the VM. Manually running the command sits at 16% CPU, 
0% network usage and no progress. It appears to lock the NFS mount and ls and 
lsof both hang.

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw  -O raw 

Conversely a simple cp will work (ruling out file permissions errors):
sudo -u vddm cp  

What might we be doing wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUBKWQIGGSJETPVRWN42R4J7COPFV6GS/

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6EE6X43GTAJ6L4QBH2XQJ4LVPIXCZC3T/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GD2XCKEIPNCXXQWMR4OP5IKGCORJQEGB/


[ovirt-users] Re: Import of VMs failing - 0% progress on qemu-img

2019-04-09 Thread Callum Smith
Dear All,

It would seem this is a bug in 4.3.? - As upgrading the old oVirt HE to 4.3 
(from 4.2.latest) now means that the export of VMs to export domain no longer 
works.

Again qemu-img convert is using some cpu, but no network. Progress is 0.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 Apr 2019, at 15:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

We've exported some VMs from our old oVirt infrastructure and want to import 
them into the new one, but qemu-img appears to be failing. We have mounted an 
export domain populated from the old oVirt in the new hosted engine and are 
using the GUI to import the VM. Manually running the command sits at 16% CPU, 
0% network usage and no progress. It appears to lock the NFS mount and ls and 
lsof both hang.

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw  -O raw 

Conversely a simple cp will work (ruling out file permissions errors):
sudo -u vddm cp  

What might we be doing wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUBKWQIGGSJETPVRWN42R4J7COPFV6GS/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6EE6X43GTAJ6L4QBH2XQJ4LVPIXCZC3T/


[ovirt-users] Import of VMs failing - 0% progress on qemu-img

2019-04-08 Thread Callum Smith
Dear All,

We've exported some VMs from our old oVirt infrastructure and want to import 
them into the new one, but qemu-img appears to be failing. We have mounted an 
export domain populated from the old oVirt in the new hosted engine and are 
using the GUI to import the VM. Manually running the command sits at 16% CPU, 
0% network usage and no progress. It appears to lock the NFS mount and ls and 
lsof both hang.

sudo -u vdsm /usr/bin/qemu-img convert -p -t none -T none -f raw  -O raw 

Conversely a simple cp will work (ruling out file permissions errors):
sudo -u vddm cp  

What might we be doing wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUBKWQIGGSJETPVRWN42R4J7COPFV6GS/


[ovirt-users] UI bug viewing/editing host

2019-04-04 Thread Callum Smith
et.jar:]
at com.google.gwt.core.client.impl.Impl.entry0(Impl.java:275) 
[gwt-servlet.jar:]
at 
Unknown.Su/<(https://he.virt.in.bmrc.ox.ac.uk/ovirt-engine/webadmin/?locale=en_US#hosts-network_interfaces;name=virthyp04.virt.in.bmrc.ox.ac.uk)
at Unknown.anonymous(Unknown)
Caused by: com.google.gwt.core.client.JavaScriptException: (TypeError) : 
oab(...) is null
at 
org.ovirt.engine.ui.uicommonweb.models.hosts.HostListModel.$onSave(HostListModel.java:816)
at 
org.ovirt.engine.ui.uicommonweb.models.hosts.HostListModel.executeCommand(HostListModel.java:1969)
at 
org.ovirt.engine.ui.uicommonweb.UICommand.$execute(UICommand.java:163)
at 
org.ovirt.engine.ui.common.presenter.AbstractModelBoundPopupPresenterWidget.$lambda$4(AbstractModelBoundPopupPresenterWidget.java:306)
at 
org.ovirt.engine.ui.common.presenter.AbstractModelBoundPopupPresenterWidget$lambda$4$Type.onClick(AbstractModelBoundPopupPresenterWidget.java:306)
at 
com.google.gwt.event.dom.client.ClickEvent.dispatch(ClickEvent.java:55) 
[gwt-servlet.jar:]
at com.google.gwt.event.shared.GwtEvent.dispatch(GwtEvent.java:76) 
[gwt-servlet.jar:]
at 
com.google.web.bindery.event.shared.SimpleEventBus.$doFire(SimpleEventBus.java:173)
 [gwt-servlet.jar:]
... 12 more

Clean install ovirt-node-ng-4.3.0-0.20190204.0+1

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JHQVLYNWOSB3FC23ZI7PII7HAPK76WZO/


[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-29 Thread Callum Smith
So close now:

fatal: [virthyp04.virt.in.bmrc.ox.ac.uk]: FAILED! => {"changed": true, "cmd": 
["dd", "bs=20480", "count=1", "oflag=direct", 
"if=/var/tmp/localvmDBMVgn/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6", 
"of=/rhev/data-center/mnt/10.141.15.248:_export_virtman_hosted__storage/b4f93b28-1497-44b0-9eaf-5e5e2b71bce8/images/645c4286-71e4-4cce-9049-345903929e1b/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6"],
 "delta": "0:00:00.005134", "end": "2019-03-29 17:04:27.952367", "msg": 
"non-zero return code", "rc": 1, "start": "2019-03-29 17:04:27.947233", 
"stderr": "dd: failed to open 
‘/rhev/data-center/mnt/10.141.15.248:_export_virtman_hosted__storage/b4f93b28-1497-44b0-9eaf-5e5e2b71bce8/images/645c4286-71e4-4cce-9049-345903929e1b/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6’:
 Permission denied", "stderr_lines": ["dd: failed to open 
‘/rhev/data-center/mnt/10.141.15.248:_export_virtman_hosted__storage/b4f93b28-1497-44b0-9eaf-5e5e2b71bce8/images/645c4286-71e4-4cce-9049-345903929e1b/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6’:
 Permission denied"], "stdout": "", "stdout_lines": []}
to retry, use: --limit @/etc/ansible/playbook/ovirt.retry

ls -laZ 
/rhev/data-center/mnt/10.141.15.248:_export_virtman_hosted__storage/b4f93b28-1497-44b0-9eaf-5e5e2b71bce8/images/645c4286-71e4-4cce-9049-345903929e1b/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6
-rw-rw. vdsm kvm system_u:object_r:nfs_t:s0   
/rhev/data-center/mnt/10.141.15.248:_export_virtman_hosted__storage/b4f93b28-1497-44b0-9eaf-5e5e2b71bce8/images/645c4286-71e4-4cce-9049-345903929e1b/e208e0f9-0f4d-4d0d-9104-10d8a26bfab6

Any ideas on this one? I can almost touch this deployment now... Looking at the 
command it should run as `vdsm` so should work fine, could this be SELinux?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 15:50, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Guilty, will roll back and try again!

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 15:35, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:

The error comes from here:

TASK [ovirt.hosted_engine_setup : Parse OVF] 
***
fatal: 
[virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>]: 
FAILED! => {"changed": false, "msg": "missing parameter(s) required by 
'attribute': value"}

but are you really using it with ansible 2.8 alpha 1?
I'd strongly suggest to switch back to a stable release of ansible which is 
currently 2.7.9.

That one was due to: https://github.com/ansible/ansible/issues/53459
In the next ansible build it will be just a warning as for: 
https://github.com/ansible/ansible/pull/54336

https://github.com/oVirt/ovirt-ansible-hosted-engine-setup/pull/150/files 
already address this on ovirt-ansible-hosted-engine-setup to be compatible with 
future ansible releases.


On Fri, Mar 29, 2019 at 3:53 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
The OVF in question is here:

http://schemas.dmtf.org/ovf/envelope/1/; 
xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData;
 
xmlns:vssd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_VirtualSystemSettingData;
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;>List of 
Networkshttp://www.vmware.com/specifications/vmdk.html#sparse; 
ovf:parentRef="" ovf:size="51" 
ovf:vm_snapshot_id="5f2be758-82d7-4c07-a220-9060e782dc7a" 
ovf:volume-format="COW" ovf:volume-type="Sparse" ovf:wipe-after-delete="false" 
/>074a62d4-44f9-4ffe-a172-2702a9fe96df074a62d4-44f9-4ffe-a172-2702a9fe96dfCreated
 by OVABuilder2019/03/19 
08:35:09false101Guest 
OSOtherLinux4 CPU, 16384 
MemoryRHEVM 
4.6.0.1634 virtual 
CPUNumber of virtual 
CPU131416384
 MB of memoryMemory 
Size24MegaBytes16384Drive
 
172bc3948-5d8d-4877-bac8-7db4995045b5176f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5----0000-0000-0000----------2019/03/19
 08:35:092019/03/19 
08:35:09Ethernet 0 
rhevm3103rhevmeth01000Graphics5201

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.o

[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-29 Thread Callum Smith
Guilty, will roll back and try again!

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 15:35, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:

The error comes from here:

TASK [ovirt.hosted_engine_setup : Parse OVF] 
***
fatal: 
[virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>]: 
FAILED! => {"changed": false, "msg": "missing parameter(s) required by 
'attribute': value"}

but are you really using it with ansible 2.8 alpha 1?
I'd strongly suggest to switch back to a stable release of ansible which is 
currently 2.7.9.

That one was due to: https://github.com/ansible/ansible/issues/53459
In the next ansible build it will be just a warning as for: 
https://github.com/ansible/ansible/pull/54336

https://github.com/oVirt/ovirt-ansible-hosted-engine-setup/pull/150/files 
already address this on ovirt-ansible-hosted-engine-setup to be compatible with 
future ansible releases.


On Fri, Mar 29, 2019 at 3:53 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
The OVF in question is here:

http://schemas.dmtf.org/ovf/envelope/1/; 
xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData;
 
xmlns:vssd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_VirtualSystemSettingData;
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;>List of 
Networkshttp://www.vmware.com/specifications/vmdk.html#sparse; 
ovf:parentRef="" ovf:size="51" 
ovf:vm_snapshot_id="5f2be758-82d7-4c07-a220-9060e782dc7a" 
ovf:volume-format="COW" ovf:volume-type="Sparse" ovf:wipe-after-delete="false" 
/>074a62d4-44f9-4ffe-a172-2702a9fe96df074a62d4-44f9-4ffe-a172-2702a9fe96dfCreated
 by OVABuilder2019/03/19 
08:35:09false101Guest 
OSOtherLinux4 CPU, 16384 
MemoryRHEVM 
4.6.0.1634 virtual 
CPUNumber of virtual 
CPU131416384
 MB of memoryMemory 
Size24MegaBytes16384Drive
 
172bc3948-5d8d-4877-bac8-7db4995045b5176f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5------------0000----2019/03/19
 08:35:092019/03/19 
08:35:09Ethernet 0 
rhevm3103rhevmeth01000Graphics5201

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 14:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok so we're getting very close now, weird OVF error:

Full ansible log attached

Only error in the engine.log looks normal/expected to me:
2019-03-29 14:32:44,370Z ERROR [org.ovirt.engine.core.bll.pm.FenceProxyLocator] 
(EE-ManagedThreadFactory-engineScheduled-Thread-71) [4405d6db] Can not run 
fence action on host 'vir
thyp04.virt.in.bmrc.ox.ac.uk<http://thyp04.virt.in.bmrc.ox.ac.uk/>', no 
suitable proxy host was found.



Feeling damn close to success here, but have managed to replicate this issue 
twice re-running the installer.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 11:50, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Fri, Mar 29, 2019 at 12:36 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
ip link del ovirtmgmt has done the job

Another issue, but this is likely due to randomised MAC addresses:
fatal: 
[virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>]: 
FAILED! => {"changed": true, "cmd": ["virt-install", "-n", "HostedEngineLocal", 
"--os-variant", "rhel7", "--virt-type", "kvm", "--memory", "4096", "--vcpus", 
"64", "--network", "network=default,mac=fe:58:6c:da:1e:cc,model=virtio", 
"--disk", 
"/var/tmp/localvmOCYiyF/images/6f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5",
 "--import", "--disk", "path=/var/tmp/localvmOCYiyF/seed.iso,device=cdrom", 
"--noautoconsole", "--rng", "/dev/random", "--graphics", "vnc", "--video", 
"vga", "--sound", "none", "--controller", "usb,model=none", "--memballoon", 
"none", "--boot", "hd,menu=off", "--clock", "kvmclock_present=yes"], &q

[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-29 Thread Callum Smith
The OVF in question is here:

http://schemas.dmtf.org/ovf/envelope/1/; 
xmlns:rasd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_ResourceAllocationSettingData;
 
xmlns:vssd="http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/CIM_VirtualSystemSettingData;
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance;>List of 
Networkshttp://www.vmware.com/specifications/vmdk.html#sparse; 
ovf:parentRef="" ovf:size="51" 
ovf:vm_snapshot_id="5f2be758-82d7-4c07-a220-9060e782dc7a" 
ovf:volume-format="COW" ovf:volume-type="Sparse" ovf:wipe-after-delete="false" 
/>074a62d4-44f9-4ffe-a172-2702a9fe96df074a62d4-44f9-4ffe-a172-2702a9fe96dfCreated
 by OVABuilder2019/03/19 
08:35:09false101Guest 
OSOtherLinux4 CPU, 16384 
MemoryRHEVM 
4.6.0.1634 virtual 
CPUNumber of virtual 
CPU131416384
 MB of memoryMemory 
Size24MegaBytes16384Drive
 
172bc3948-5d8d-4877-bac8-7db4995045b5176f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5----------------2019/03/19
 08:35:092019/03/19 
08:35:09Ethernet 0 
rhevm3103rhevmeth01000Graphics5201

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 14:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok so we're getting very close now, weird OVF error:

Full ansible log attached

Only error in the engine.log looks normal/expected to me:
2019-03-29 14:32:44,370Z ERROR [org.ovirt.engine.core.bll.pm.FenceProxyLocator] 
(EE-ManagedThreadFactory-engineScheduled-Thread-71) [4405d6db] Can not run 
fence action on host 'vir
thyp04.virt.in.bmrc.ox.ac.uk', no suitable proxy host was found.



Feeling damn close to success here, but have managed to replicate this issue 
twice re-running the installer.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 11:50, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Fri, Mar 29, 2019 at 12:36 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
ip link del ovirtmgmt has done the job

Another issue, but this is likely due to randomised MAC addresses:
fatal: 
[virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>]: 
FAILED! => {"changed": true, "cmd": ["virt-install", "-n", "HostedEngineLocal", 
"--os-variant", "rhel7", "--virt-type", "kvm", "--memory", "4096", "--vcpus", 
"64", "--network", "network=default,mac=fe:58:6c:da:1e:cc,model=virtio", 
"--disk", 
"/var/tmp/localvmOCYiyF/images/6f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5",
 "--import", "--disk", "path=/var/tmp/localvmOCYiyF/seed.iso,device=cdrom", 
"--noautoconsole", "--rng", "/dev/random", "--graphics", "vnc", "--video", 
"vga", "--sound", "none", "--controller", "usb,model=none", "--memballoon", 
"none", "--boot", "hd,menu=off", "--clock", "kvmclock_present=yes"], "delta": 
"0:00:01.355834", "end": "2019-03-29 11:31:02.100143", "msg": "non-zero return 
code", "rc": 1, "start": "2019-03-29 11:31:00.744309", "stderr": "ERROR
unsupported configuration: Unable to use MAC address starting with reserved 
value 0xFE - 'fe:58:6c:da:1e:cc' - \nDomain installation does not appear to 
have been successful.\nIf it was, you can restart your domain by running:\n  
virsh --connect qemu:///system start HostedEngineLocal\notherwise, please 
restart your installation.", "stderr_lines": ["ERRORunsupported 
configuration: Unable to use MAC address starting with reserved value 0xFE - 
'fe:58:6c:da:1e:cc' - ", "Domain installation does not appear to have been 
successful.", "If it was, you can restart your domain by running:", "  virsh 
--connect qemu:///system start HostedEngineLocal", "otherwise, please restart 
your installation."], "stdout": "\nStarting install...", "stdout_lines": ["", 
"Starting install..."]}

Seems it doesn't take into account reserved values when generating.

If not specified by the user,
a random unicast MAC address is randomly generated here:
https://github.com/oVirt/ovirt-ansible-hosted-e

[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-29 Thread Callum Smith
ip link del ovirtmgmt has done the job

Another issue, but this is likely due to randomised MAC addresses:
fatal: [virthyp04.virt.in.bmrc.ox.ac.uk]: FAILED! => {"changed": true, "cmd": 
["virt-install", "-n", "HostedEngineLocal", "--os-variant", "rhel7", 
"--virt-type", "kvm", "--memory", "4096", "--vcpus", "64", "--network", 
"network=default,mac=fe:58:6c:da:1e:cc,model=virtio", "--disk", 
"/var/tmp/localvmOCYiyF/images/6f76686b-199c-4cb3-bbbe-86fc34365745/72bc3948-5d8d-4877-bac8-7db4995045b5",
 "--import", "--disk", "path=/var/tmp/localvmOCYiyF/seed.iso,device=cdrom", 
"--noautoconsole", "--rng", "/dev/random", "--graphics", "vnc", "--video", 
"vga", "--sound", "none", "--controller", "usb,model=none", "--memballoon", 
"none", "--boot", "hd,menu=off", "--clock", "kvmclock_present=yes"], "delta": 
"0:00:01.355834", "end": "2019-03-29 11:31:02.100143", "msg": "non-zero return 
code", "rc": 1, "start": "2019-03-29 11:31:00.744309", "stderr": "ERROR
unsupported configuration: Unable to use MAC address starting with reserved 
value 0xFE - 'fe:58:6c:da:1e:cc' - \nDomain installation does not appear to 
have been successful.\nIf it was, you can restart your domain by running:\n  
virsh --connect qemu:///system start HostedEngineLocal\notherwise, please 
restart your installation.", "stderr_lines": ["ERRORunsupported 
configuration: Unable to use MAC address starting with reserved value 0xFE - 
'fe:58:6c:da:1e:cc' - ", "Domain installation does not appear to have been 
successful.", "If it was, you can restart your domain by running:", "  virsh 
--connect qemu:///system start HostedEngineLocal", "otherwise, please restart 
your installation."], "stdout": "\nStarting install...", "stdout_lines": ["", 
"Starting install..."]}

Seems it doesn't take into account reserved values when generating.

I hope this feedback is valuable - I have a good feeling about the current 
deploy otherwise though.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 Mar 2019, at 11:01, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Fri, Mar 29, 2019 at 11:56 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Simone,

It doesn't seem to want to work:

# Settings
he_fqdn: "he.virt.in.bmrc.ox.ac.uk<http://he.virt.in.bmrc.ox.ac.uk/>"
he_ansible_host_name: 
"virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>"
he_admin_password:  
he_appliance_password:  

# Resources
he_mem_size_MB: "4096"

# Storage
he_domain_type: "nfs"
he_storage_domain_addr: 
he_storage_domain_path: 

# Network
he_vm_ip_addr: "10.141.31.240"
he_vm_ip_prefix: "20"
he_dns_addr: ["10.141.31.251","10.141.31.252","10.141.31.253"]
he_default_gateway_4: "10.141.31.254"
he_gateway: he_default_gateway_4
he_force_ip4: true
he_bridge_if: bond0.910
#he_just_collect_network_interfaces: true

# Email
he_smtp_port: 25
he_smtp_server: smtp.ox.ac.uk<http://smtp.ox.ac.uk/>
he_dest_email: rescomp-...@well.ox.ac.uk<mailto:rescomp-...@well.ox.ac.uk>
he_source_email: ov...@bmrc.ox.ac.uk<mailto:ov...@bmrc.ox.ac.uk>

# Ansible Stuff
ansible_ssh_user: root
ansible_become: false

host_key_checking: false

I've attached the output of the ansible command as a log file, this is what 
happens when the IF bond0.910 is assigned the IP and `ovirtmgmt` is not defined 
on the host.


TASK [ovirt.hosted_engine_setup : debug] 
*******
ok: [virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>] 
=> {
"target_address_v4": {
"changed": true,
"cmd": "ip addr show ovirtmgmt | grep 'inet ' | cut -d' ' -f6 | cut 
-d'/' -f1",
"delta": "0:00:00.008744",
"end": "2019-03-29 10:26:07.510481",
"failed": false,
"rc": 0,
"start": "2019-03-29 10:26:07.501737",
"stderr": "",
"stderr_lines": [],
"stdout"

[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-29 Thread Callum Smith
Dear Simone,

It doesn't seem to want to work:

# Settings
he_fqdn: "he.virt.in.bmrc.ox.ac.uk"
he_ansible_host_name: "virthyp04.virt.in.bmrc.ox.ac.uk"
he_admin_password:  
he_appliance_password:  

# Resources
he_mem_size_MB: "4096"

# Storage
he_domain_type: "nfs"
he_storage_domain_addr: 
he_storage_domain_path: 

# Network
he_vm_ip_addr: "10.141.31.240"
he_vm_ip_prefix: "20"
he_dns_addr: ["10.141.31.251","10.141.31.252","10.141.31.253"]
he_default_gateway_4: "10.141.31.254"
he_gateway: he_default_gateway_4
he_force_ip4: true
he_bridge_if: bond0.910
#he_just_collect_network_interfaces: true

# Email
he_smtp_port: 25
he_smtp_server: smtp.ox.ac.uk<http://smtp.ox.ac.uk>
he_dest_email: rescomp-...@well.ox.ac.uk<mailto:rescomp-...@well.ox.ac.uk>
he_source_email: ov...@bmrc.ox.ac.uk<mailto:ov...@bmrc.ox.ac.uk>

# Ansible Stuff
ansible_ssh_user: root
ansible_become: false

host_key_checking: false

I've attached the output of the ansible command as a log file, this is what 
happens when the IF bond0.910 is assigned the IP and `ovirtmgmt` is not defined 
on the host.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 28 Mar 2019, at 16:23, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Thu, Mar 28, 2019 at 1:44 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Simone,

This is my experience too, but I'm now hitting this error on the hosted-engine 
install at the part where it registers the hypervisor as the first host in the 
engine:

2019-03-28 12:40:50,025Z INFO  
[org.ovirt.engine.core.bll.host.HostConnectivityChecker] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Engine managed to 
communicate with VDSM
 agent on host 
'virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>' with 
address 
'virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>' 
('db571f8a-fc85-40d3-b86f-c0038e3cd7e7')
2019-03-28 12:40:53,111Z WARN  
[org.ovirt.engine.core.bll.network.NetworkConfigurator] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Failed to find a valid 
interface for the
 management network of host 
virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>. If 
the interface ovirtmgmt is a bridge, it should be torn-down manually.
2019-03-28 12:40:53,111Z ERROR 
[org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Exception: 
org.ovirt.engine.cor
e.bll.network.NetworkConfigurator$NetworkConfiguratorException: Interface 
ovirtmgmt is invalid for management network

The host's ovirtmgmt network connection is a statically assigned IP on a VLAN 
on a bond, how should I be configuring this if not manually?

If you need to deploy over vlan 123 over bond0 simply configure a device 
exactly called bond0.123 and statically configure your IP address there.
Choose it for hosted-engine deployment, nothing more: ovirtmgmt will be 
automatically created over that device and the vlan ID will be set at engine 
level for the whole management network.


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Mar 2019, at 17:09, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Wed, Mar 27, 2019 at 4:27 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
It's ok, migrating to 4.3.2 on the oVirt node (from 4.3.0) did the job of 
fixing it.

It is a bug if you intend on using the ovirtmgmt network to deploy your ansible 
from

This is a bit tricky: when the engine brings up the host it also creates the 
management bridge and this could lead to a temporary network down on the 
selected interface for the bridge creation time (a couple of seconds?)
I tried it on a LAN and ansible ssh connection always survived but I 'm not 
sure it's always true.

, and you need it to have an IP address already on that range! But - it works 
as expected with the ovirtmgmt bridge setup so nothing to worry about.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Mar 2019, at 14:57, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Wed, Mar 27, 2019 at 3:24 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

We're trying to deploy our hosted engine remotely using the ansible hosted 
engine playbook, which has been a rocky road but we're now at the point where 
it's installing, and failing. We've got a pre-defined bond/VLAN setup for our 
interface which has the correct bond0 bond0.123 and ovirtmgmt bri

[ovirt-users] Re: HE Install cannot login to VM

2019-03-29 Thread Callum Smith
In this email thread im talking about running `hosted-engine --deploy` as root 
directly on the hypervisor.

Checked the known_hosts and it was empty - I think we're going to go back to 
trying to fix the remote-deploy option!

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 28 Mar 2019, at 16:27, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:


On Thu, Mar 28, 2019 at 4:53 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear all,

Giving up on running ansible playbook remotely we're hitting earlier issues 
running hosted-engine --deploy

The issue is just running the role as unprivileged user on the ansible 
controller node; I opened a bug here: 
https://bugzilla.redhat.com/show_bug.cgi?id=1693607
For now simply run your palybook as root instead of as a regular user with 
become: true.
I think it will be fixed for the next build.



2019-03-28 15:42:33,975+ INFO otopi.ovirt_hosted_engine_setup.ansible_utils 
ansible_utils._process_output:109 TASK [ovirt.hosted_engine_setup : Wait for 
the local VM]
2019-03-28 15:45:40,739+ DEBUG 
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:103 
{u'msg': u"timed out waiting for ping module test success: Using
a SSH password instead of a key is not possible because Host Key checking is 
enabled and sshpass does not support this.  Please add this host's fingerprint 
to your known_hosts file
 to manage this host.", u'elapsed': 186, u'changed': False, u'_ansible_no_log': 
False, u'_ansible_delegated_vars': {u'ansible_delegated_host': 
u'he.virt.in.bmrc.ox.ac.uk<http://he.virt.in.bmrc.ox.ac.uk/>', u'ansibl
e_host': u'he.virt.in.bmrc.ox.ac.uk<http://he.virt.in.bmrc.ox.ac.uk/>'}}
2019-03-28 15:45:40,840+ ERROR 
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:107 
fatal: [localhost -> 
he.virt.in.bmrc.ox.ac.uk<http://he.virt.in.bmrc.ox.ac.uk/>]: FAILED! => 
{"changed": false, "elapsed": 186, "msg": "timed out waiting for ping module 
test success: Using a SSH password instead of a key is not possible because 
Host Key checking is enabled and sshpass does not support this.  Please add 
this host's fingerprint to your known_hosts file to manage this host."}

At a bit of a loss, especially since the old no-ansible install is not 
available anymore?

Please check ~/.ssh/know_hosts for leftovers from previous attempt.
On each deploy attempt the engine VM will get a fresh ssh keys.


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OLOH2VEI64CBDAMVJPZJL5WOGPTU5D2N/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GO5CTEMEOGAAQYHLSXVODMJJBBEOXMBM/


[ovirt-users] HE Install cannot login to VM

2019-03-28 Thread Callum Smith
Dear all,

Giving up on running ansible playbook remotely we're hitting earlier issues 
running hosted-engine --deploy

2019-03-28 15:42:33,975+ INFO otopi.ovirt_hosted_engine_setup.ansible_utils 
ansible_utils._process_output:109 TASK [ovirt.hosted_engine_setup : Wait for 
the local VM]
2019-03-28 15:45:40,739+ DEBUG 
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:103 
{u'msg': u"timed out waiting for ping module test success: Using
a SSH password instead of a key is not possible because Host Key checking is 
enabled and sshpass does not support this.  Please add this host's fingerprint 
to your known_hosts file
 to manage this host.", u'elapsed': 186, u'changed': False, u'_ansible_no_log': 
False, u'_ansible_delegated_vars': {u'ansible_delegated_host': 
u'he.virt.in.bmrc.ox.ac.uk', u'ansibl
e_host': u'he.virt.in.bmrc.ox.ac.uk'}}
2019-03-28 15:45:40,840+ ERROR 
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:107 
fatal: [localhost -> he.virt.in.bmrc.ox.ac.uk]: FAILED! => {"changed": false, 
"elapsed": 186, "msg": "timed out waiting for ping module test success: Using a 
SSH password instead of a key is not possible because Host Key checking is 
enabled and sshpass does not support this.  Please add this host's fingerprint 
to your known_hosts file to manage this host."}

At a bit of a loss, especially since the old no-ansible install is not 
available anymore?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OLOH2VEI64CBDAMVJPZJL5WOGPTU5D2N/


[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-28 Thread Callum Smith
Dear Simone,

This is my experience too, but I'm now hitting this error on the hosted-engine 
install at the part where it registers the hypervisor as the first host in the 
engine:

2019-03-28 12:40:50,025Z INFO  
[org.ovirt.engine.core.bll.host.HostConnectivityChecker] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Engine managed to 
communicate with VDSM
 agent on host 'virthyp04.virt.in.bmrc.ox.ac.uk' with address 
'virthyp04.virt.in.bmrc.ox.ac.uk' ('db571f8a-fc85-40d3-b86f-c0038e3cd7e7')
2019-03-28 12:40:53,111Z WARN  
[org.ovirt.engine.core.bll.network.NetworkConfigurator] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Failed to find a valid 
interface for the
 management network of host virthyp04.virt.in.bmrc.ox.ac.uk. If the interface 
ovirtmgmt is a bridge, it should be torn-down manually.
2019-03-28 12:40:53,111Z ERROR 
[org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand] 
(EE-ManagedThreadFactory-engine-Thread-1) [49f371c1] Exception: 
org.ovirt.engine.cor
e.bll.network.NetworkConfigurator$NetworkConfiguratorException: Interface 
ovirtmgmt is invalid for management network

The host's ovirtmgmt network connection is a statically assigned IP on a VLAN 
on a bond, how should I be configuring this if not manually?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Mar 2019, at 17:09, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Wed, Mar 27, 2019 at 4:27 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
It's ok, migrating to 4.3.2 on the oVirt node (from 4.3.0) did the job of 
fixing it.

It is a bug if you intend on using the ovirtmgmt network to deploy your ansible 
from

This is a bit tricky: when the engine brings up the host it also creates the 
management bridge and this could lead to a temporary network down on the 
selected interface for the bridge creation time (a couple of seconds?)
I tried it on a LAN and ansible ssh connection always survived but I 'm not 
sure it's always true.

, and you need it to have an IP address already on that range! But - it works 
as expected with the ovirtmgmt bridge setup so nothing to worry about.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Mar 2019, at 14:57, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Wed, Mar 27, 2019 at 3:24 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

We're trying to deploy our hosted engine remotely using the ansible hosted 
engine playbook, which has been a rocky road but we're now at the point where 
it's installing, and failing. We've got a pre-defined bond/VLAN setup for our 
interface which has the correct bond0 bond0.123 and ovirtmgmt bridge on top but 
we're hitting the classic error:

Failed to find a valid in
terface for the management network of host 
virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>. If 
the interface ovirtmgmt is a bridge, it should be torn-down manually.

Does this bug still exist in the latest (4.3) version, and is installing using 
ansible with this network configuration impossible?

I don't think it's a bug; please avoid manually creating ovirtmgmt and simply 
set:
he_bridge_if: "bond0.123", in ansible variable file and the management bridge 
will be created for you at host-deploy time.


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SBOZ6FRBRQKE7FMTEHT6FBKHOW3PIPHK/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DYYGXZBVPLT6D2O7QWUK5R5IJ7KKZT7C/


[ovirt-users] Re: Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-27 Thread Callum Smith
It's ok, migrating to 4.3.2 on the oVirt node (from 4.3.0) did the job of 
fixing it.

It is a bug if you intend on using the ovirtmgmt network to deploy your ansible 
from, and you need it to have an IP address already on that range! But - it 
works as expected with the ovirtmgmt bridge setup so nothing to worry about.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Mar 2019, at 14:57, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Wed, Mar 27, 2019 at 3:24 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

We're trying to deploy our hosted engine remotely using the ansible hosted 
engine playbook, which has been a rocky road but we're now at the point where 
it's installing, and failing. We've got a pre-defined bond/VLAN setup for our 
interface which has the correct bond0 bond0.123 and ovirtmgmt bridge on top but 
we're hitting the classic error:

Failed to find a valid in
terface for the management network of host 
virthyp04.virt.in.bmrc.ox.ac.uk<http://virthyp04.virt.in.bmrc.ox.ac.uk/>. If 
the interface ovirtmgmt is a bridge, it should be torn-down manually.

Does this bug still exist in the latest (4.3) version, and is installing using 
ansible with this network configuration impossible?

I don't think it's a bug; please avoid manually creating ovirtmgmt and simply 
set:
he_bridge_if: "bond0.123", in ansible variable file and the management bridge 
will be created for you at host-deploy time.


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SBOZ6FRBRQKE7FMTEHT6FBKHOW3PIPHK/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RM5U5IT2X6FXGMTMU6JASPET5FQS5BVY/


[ovirt-users] Ansible hosted-engine deploy still doesnt support manually defined ovirtmgmt?

2019-03-27 Thread Callum Smith
Dear All,

We're trying to deploy our hosted engine remotely using the ansible hosted 
engine playbook, which has been a rocky road but we're now at the point where 
it's installing, and failing. We've got a pre-defined bond/VLAN setup for our 
interface which has the correct bond0 bond0.123 and ovirtmgmt bridge on top but 
we're hitting the classic error:

Failed to find a valid in
terface for the management network of host virthyp04.virt.in.bmrc.ox.ac.uk. If 
the interface ovirtmgmt is a bridge, it should be torn-down manually.

Does this bug still exist in the latest (4.3) version, and is installing using 
ansible with this network configuration impossible?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SBOZ6FRBRQKE7FMTEHT6FBKHOW3PIPHK/


[ovirt-users] Adding host with local-storage VMs configured

2019-01-23 Thread Callum Smith
Dear All,

We’re in a world where we had to recover from outage by installing a clean 
hosted engine and importing VMs from storage. We do, however, have a host that 
is configured for local-storage and has a VM running on it. What is the best 
way to re-introduce this host to a new hosted-engine with minimal outage of the 
VM on that host.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AVZX7U7BSMIMYUOR6ZBVULMFGMXJNH7H/


[ovirt-users] exporting VMs using vdsm-client

2019-01-11 Thread Callum Smith
Is it possible to export VMs using vdsm-client to import into a new oVirt 
engine in a case of catastrophic failure such that they can be imported into a 
new setup?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5RNYW2W2LLZTISTPTNARMFVQ6OQ7R477/


[ovirt-users] JSON internal error setting bonding using vdsm-client

2019-01-10 Thread Callum Smith
Dear All,

I’m getting the error: “(code=32603, message=Internal JSON-RPC error: 
{‘reason’: “‘unicode’ object has no attribute ’sort’”})
when trying to apply networking configuration with vdsm-client -f bond.json 
Host setupNetworks

bond.json contains:

{
  “networks”: {},
  “bondings”: {
“bond0”: {
  “nics”: “eno1+eno2”,
  “options”: “mode=4”
}
  },
  “options”: {}
}

Of course python is handling all the arguments as unicode entities rather than 
strings. Any idea what might be wrong?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UON6H2RCEUY37KIYYUEK7TPNZ6SPHB7L/


[ovirt-users] Re: Disk corruption on hosted engine

2018-12-18 Thread Callum Smith
Dear Simone,

Thanks for the response. Unfortunately I didn't get the install up to 4.7 in 
time for this event, so we might go down the spare host route just to be triple 
safe pending the arrival of some networking kit.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 Dec 2018, at 10:08, Simone Tiraboschi 
mailto:stira...@redhat.com>> wrote:



On Mon, Dec 17, 2018 at 2:24 PM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

So we've had some major disk corruption on our hosted engine (hardware to 
blame), and we have taken backups. However, the hosted-engine VM will no longer 
boot at all, database is thoroughly corrupted, and we need to rebuild the 
thing. Just a sanity check on the best route:

Preamble:
VMs are still running fine - only hosted engine affected
VMs are distributed across our entire 3 node cluster
All 3 nodes are registered as hosted engine candidates

1. Do another hosted-engine --deploy on one of the existing hosts, and then 
restore the backup into that
2. Build a new host, deploy the hosted-engine, then restore a backup on a fresh 
node

Hi,
since 4.2.7 you can use
hosted-engine --deploy --restore-from-file=backup.tar.gz

And the deployment will restore your backup on the fly.
Technically you an also use one of the existing hosts with running VMs but if 
you want to be on the safe and you have a spare host I'd suggest to use that 
one.
You will be asked to create a new SD for the new engine VM, the previous HE SD 
will be still visible in the engine if you have to migrate other disks stored 
there.



Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VYQM7WWIBP7Z7FQQ6TG7HH3IFDZ64LXQ/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PTCSNZT7V3NA7WAHDANKHZE4Z2AHMQE3/


[ovirt-users] Re: Disk corruption on hosted engine

2018-12-18 Thread Callum Smith
Memory error on the storage array that cause postgres to become corrupted. 
Attempting to restore from backup before the DIMM was replaced was ill advised 
and now the whole HE is trash.

We're having a long talk with our vendor of the affected piece of kit.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 Dec 2018, at 15:45, femi adegoke 
mailto:ov...@fateknollogee.com>> wrote:

Curious question: How did the hardware corrupt the HE?

On Dec 17 2018, at 5:02 am, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

So we've had some major disk corruption on our hosted engine (hardware to 
blame), and we have taken backups. However, the hosted-engine VM will no longer 
boot at all, database is thoroughly corrupted, and we need to rebuild the 
thing. Just a sanity check on the best route:

Preamble:
VMs are still running fine - only hosted engine affected
VMs are distributed across our entire 3 node cluster
All 3 nodes are registered as hosted engine candidates

1. Do another hosted-engine --deploy on one of the existing hosts, and then 
restore the backup into that
2. Build a new host, deploy the hosted-engine, then restore a backup on a fresh 
node

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VYQM7WWIBP7Z7FQQ6TG7HH3IFDZ64LXQ/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3MWI53U5OHUQJ2IJFMF4L6GNNNH2QV44/


[ovirt-users] Disk corruption on hosted engine

2018-12-17 Thread Callum Smith
Dear All,

So we've had some major disk corruption on our hosted engine (hardware to 
blame), and we have taken backups. However, the hosted-engine VM will no longer 
boot at all, database is thoroughly corrupted, and we need to rebuild the 
thing. Just a sanity check on the best route:

Preamble:
VMs are still running fine - only hosted engine affected
VMs are distributed across our entire 3 node cluster
All 3 nodes are registered as hosted engine candidates

1. Do another hosted-engine --deploy on one of the existing hosts, and then 
restore the backup into that
2. Build a new host, deploy the hosted-engine, then restore a backup on a fresh 
node

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VYQM7WWIBP7Z7FQQ6TG7HH3IFDZ64LXQ/


[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-10-24 Thread Callum Smith
Dear Greg,

Here's my config, this is based on the original guide and some other stuff that 
i found to help make it work.
Squid Cache: Version 3.5.20

https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key 
cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt defaultsite=
cache_peer  parent 443 0 no-query originserver ssl 
sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
cache_peer_access engine allow all
ssl_bump allow all
http_port 3128
acl ovirt_nodes dst 
acl ovirt_engine dstdomain .
acl all_ips src 1.1.1.1/1
http_access allow ovirt_nodes ovirt_engine
http_access allow all_ips
http_access allow all


# Following are from:
# https://access.redhat.com/solutions/425693

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# RHEV and Spice may leave connections idle for long periods
pconn_timeout   12 hours
request_timeout 12 hours
read_timeout12 hours

# We need approx 20 open filehandles per spice client
max_filedesc 16384

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 3 Oct 2018, at 00:39, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

Hi Callum,

I took a look at this, but got in the weeds pretty quickly with squid 
configuration. I can help more offline, but it might be a while.

It'll probably be easier if you can provide me exact steps for how I could 
reproduce. Looks like I need to generate some keys. Can you create and share a 
simple reproducer?

Greg


On Thu, Sep 20, 2018 at 11:37 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

Did you manage to get any further with this, reverse proxy is rather critical 
to this project.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 6 Aug 2018, at 12:13, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

I'll look into it and get back to you.

On Mon, Aug 6, 2018 at 7:02 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

So what's the go-to here, it seems so close but something in the API ajax is 
failing.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 12:21, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

On Fri, Jul 27, 2018 at 4:39 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

Indeed, always the latest and greatest for us while trying to get this running.

https://www.ovirt.org/documentation/security/squid-reverse-proxy/

Arrggghh, that is referring to the old GWT UserPortal and not the new 
react-based VM Portal. (I'll delete it / mark it obsolete. I apologize for the 
out-of-date state of our documentation. I am working on improving it.)

Unfortunately we have never tested VM Portal with squid.

@Lukas Svaty<mailto:lsv...@redhat.com> any chance you or someone on the team 
can assist?


And the squid.conf file looks like this:

https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key 
cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt 
defaultsite=ovirtengine.cluster
cache_peer ovirtengine.cluster parent 443 0 no-query originserver ssl 
sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
cache_peer_access engine allow all
ssl_bump allow all
http_port 3128
acl ovirt_nodes dst 192.168.64.0/24<http://192.168.64.0/24>
acl ovirt_engine dstdomain .ovirtengine.cluster
acl all_ips src 1.1.1.1/1<http://1.1.1.1/1>
http_access allow ovirt_nodes ovirt_engine
http_access allow all_ips
http_access allow all


# Following are from:
# https://access.redhat.com/solutions/425693

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# RHEV and Spice may leave connections idle for long periods
pconn_timeout   12 hours
request_timeout 12 hours
read_timeout12 hours

# We need approx 20 open filehandles per spice client
max_filedesc 16384

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:15, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

>From your other thread, I'm guessing 4.2.4.

Can you send the link to the squid guide you used?

On Wed, Jul 25, 2018 at 7:55 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Hi Callum,

What version of ovirt-web-ui is this?

Greg

On Wed, Jul 18, 2018 at 7:12 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Those error logs are relevant only to another issue, please ignore.

There appears to be a problem to do with authentication through the squid proxy 
though, which presents differently in 

[ovirt-users] Re: Cannot configure local storage, network issue?

2018-09-24 Thread Callum Smith
Dear Dominik,

Thanks for taking the time to reply, and sorry for my delay in replying. I 
don't actually want to remove the host from the cluster, I want to configure 
local storage. The whole point of the configure local storage tool is to create 
a new cluster with local storage of the machine configured right?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 21 Sep 2018, at 15:14, Dominik Holler 
mailto:dhol...@redhat.com>> wrote:

On Fri, 21 Sep 2018 15:05:59 +0200
Sandro Bonazzola mailto:sbona...@redhat.com>> wrote:

Il giorno ven 21 set 2018 alle ore 14:58 Callum Smith
mailto:cal...@well.ox.ac.uk>> ha scritto:

Dear All,

I'lm getting this problem when trying to add local storage from the
node:

Cannot edit Host. Moving a host to a cluster with different
management network is not allowed. That might cause connectivity
loss.

The cluster the host is in uses a different default network to the
default cluster - is this the problem?


Yes, but you can remove the host from oVirt and add again to the new
cluster.


Adding Dominik



Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UW7UZBPD5SWQ54PWETWPYY2AYZDV5IVK/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZYZXAAFTG7PMK5SZ6ITBHH5ZBUVGPVHJ/


[ovirt-users] Cannot configure local storage, network issue?

2018-09-21 Thread Callum Smith
Dear All,

I'lm getting this problem when trying to add local storage from the node:

Cannot edit Host. Moving a host to a cluster with different management network 
is not allowed. That might cause connectivity loss.

The cluster the host is in uses a different default network to the default 
cluster - is this the problem?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UW7UZBPD5SWQ54PWETWPYY2AYZDV5IVK/


[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-09-20 Thread Callum Smith
Dear Greg,

Did you manage to get any further with this, reverse proxy is rather critical 
to this project.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 6 Aug 2018, at 12:13, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

I'll look into it and get back to you.

On Mon, Aug 6, 2018 at 7:02 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

So what's the go-to here, it seems so close but something in the API ajax is 
failing.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 12:21, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

On Fri, Jul 27, 2018 at 4:39 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

Indeed, always the latest and greatest for us while trying to get this running.

https://www.ovirt.org/documentation/security/squid-reverse-proxy/

Arrggghh, that is referring to the old GWT UserPortal and not the new 
react-based VM Portal. (I'll delete it / mark it obsolete. I apologize for the 
out-of-date state of our documentation. I am working on improving it.)

Unfortunately we have never tested VM Portal with squid.

@Lukas Svaty<mailto:lsv...@redhat.com> any chance you or someone on the team 
can assist?


And the squid.conf file looks like this:

https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key 
cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt 
defaultsite=ovirtengine.cluster
cache_peer ovirtengine.cluster parent 443 0 no-query originserver ssl 
sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
cache_peer_access engine allow all
ssl_bump allow all
http_port 3128
acl ovirt_nodes dst 192.168.64.0/24<http://192.168.64.0/24>
acl ovirt_engine dstdomain .ovirtengine.cluster
acl all_ips src 1.1.1.1/1<http://1.1.1.1/1>
http_access allow ovirt_nodes ovirt_engine
http_access allow all_ips
http_access allow all


# Following are from:
# https://access.redhat.com/solutions/425693

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# RHEV and Spice may leave connections idle for long periods
pconn_timeout   12 hours
request_timeout 12 hours
read_timeout12 hours

# We need approx 20 open filehandles per spice client
max_filedesc 16384

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:15, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

>From your other thread, I'm guessing 4.2.4.

Can you send the link to the squid guide you used?

On Wed, Jul 25, 2018 at 7:55 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Hi Callum,

What version of ovirt-web-ui is this?

Greg

On Wed, Jul 18, 2018 at 7:12 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Those error logs are relevant only to another issue, please ignore.

There appears to be a problem to do with authentication through the squid proxy 
though, which presents differently in Safari and Firefox:

[X][X]

Sorry for the screenshots but its the only way i can extract this data due to 
the page-refresh.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 Jul 2018, at 10:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Some relevant error logs:

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(defaul

[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-08-06 Thread Callum Smith
Dear Greg,

So what's the go-to here, it seems so close but something in the API ajax is 
failing.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 12:21, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

On Fri, Jul 27, 2018 at 4:39 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Greg,

Indeed, always the latest and greatest for us while trying to get this running.

https://www.ovirt.org/documentation/security/squid-reverse-proxy/

Arrggghh, that is referring to the old GWT UserPortal and not the new 
react-based VM Portal. (I'll delete it / mark it obsolete. I apologize for the 
out-of-date state of our documentation. I am working on improving it.)

Unfortunately we have never tested VM Portal with squid.

@Lukas Svaty<mailto:lsv...@redhat.com> any chance you or someone on the team 
can assist?


And the squid.conf file looks like this:

https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key 
cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt 
defaultsite=ovirtengine.cluster
cache_peer ovirtengine.cluster parent 443 0 no-query originserver ssl 
sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
cache_peer_access engine allow all
ssl_bump allow all
http_port 3128
acl ovirt_nodes dst 192.168.64.0/24<http://192.168.64.0/24>
acl ovirt_engine dstdomain .ovirtengine.cluster
acl all_ips src 1.1.1.1/1<http://1.1.1.1/1>
http_access allow ovirt_nodes ovirt_engine
http_access allow all_ips
http_access allow all


# Following are from:
# https://access.redhat.com/solutions/425693

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# RHEV and Spice may leave connections idle for long periods
pconn_timeout   12 hours
request_timeout 12 hours
read_timeout12 hours

# We need approx 20 open filehandles per spice client
max_filedesc 16384

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:15, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

>From your other thread, I'm guessing 4.2.4.

Can you send the link to the squid guide you used?

On Wed, Jul 25, 2018 at 7:55 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Hi Callum,

What version of ovirt-web-ui is this?

Greg

On Wed, Jul 18, 2018 at 7:12 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Those error logs are relevant only to another issue, please ignore.

There appears to be a problem to do with authentication through the squid proxy 
though, which presents differently in Safari and Firefox:

[X][X]

Sorry for the screenshots but its the only way i can extract this data due to 
the page-refresh.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 Jul 2018, at 10:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Some relevant error logs:

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,393+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,394+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query

[ovirt-users] Re: VM User with UserRole missing permissions to activate console and other actions

2018-07-30 Thread Callum Smith
Dear Michal,

We’re on the latest release version, 4.2.4.

VM Permissions are UserRole and no others.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 18:14, Michal Skrivanek 
mailto:mskri...@redhat.com>> wrote:



On 27 Jul 2018, at 16:37, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Scott,

You're not wrong, console reports the error:

Reducing action: 
{"type":"VM_ACTIONS_SET_CONSOLE_IN_USE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleInUse":false}}
 helpers.js:19:6
Reducing action: 
{"type":"SET_VM_CONSOLES","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoles":[{"id":"7370696365","protocol":"spice"},{"id":"766e63","protocol":"vnc"}]}}
 helpers.js:19:6
Reducing action: 
{"type":"VM_ACTION_IN_PROGRESS","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","name":"getConsole","started":false}}
 helpers.js:19:6
External action console() starts on 
{"type":"INTERNAL_CONSOLE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleId":"7370696365"}}
 helpers.js:19:6
_httpGet start: 
url="/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365"
 helpers.js:19:6
_httpGet: 
url="/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365",
 headers="{"Authorization":"Bearer 
5orPWAJBkJx5g1bZDxi7Q3h3oQHFpWZW6XP5rZo_Moy3IShguyuA6VPpa4EB-o7mc8g_gHuua5BdMy8wwet3Yw","Accept-Language":"en_US","Filter":true,"Accept":"application/x-virt-viewer"}"
XML Parsing Error: no root element found Location: 
https://ovirtengine.cluster/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365
 Line Number 1, Column 1:
Ajax failed: 
{"readyState":4,"responseText":"","status":403,"statusText":"Forbidden"} 
helpers.js:19:6
External action exception: 
{"readyState":4,"responseText":"","status":403,"statusText":"Forbidden"} 
helpers.js:19:6
Reducing action: {"type":"FAILED_EXTERNAL_ACTION","payload":{"message":"Failed 
to retrieve VM console details\nForbidden","shortMessage":"Failed to retrieve 
VM console 
details","type":403,"action":{"type":"INTERNAL_CONSOLE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleId":"7370696365"

All of the forbidden issues could be misleading, but along with the server-side 
permissions issues that leads me to believe it could be a combination of both 
the issue you suggest and another one underlying?

We have to go with full release versions ideally as the ovirtengine is in 
production, I'd rather avoid the master branch version.

sure, so which ones do you have?
both ovirt-engine and ovirt-web-ui
Also please add what all permissions you have set on that VM, and which user 
tries to access it


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 15:25, Scott Dickerson 
mailto:sdick...@redhat.com>> wrote:

Callum,

If you are seeing the error when opening the console from VM Portal (web-ui), 
this sounds a lot like issue [1].  A patch against the ovirt REST api was done 
to help mitigate some errors that should not happen.  I'll take a look to see 
how it is working in the current master snapshot of ovirt-engine and VM Portal.

What version of oVirt are you using?

[1] - https://github.com/oVirt/ovirt-web-ui/issues/509

Regards,
Scott Dickerson


On Fri, Jul 27, 2018 at 4:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Thanks Greg, it really would be great to resolve this and would really like to 
not have to clean install the engine on a new hostname (especially without a 
guarantee that it will work). Migrating is a significant portion of work.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:20, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

Adding some people who may be able to help.

On Wed, Jul 18

[ovirt-users] Re: VM User with UserRole missing permissions to activate console and other actions

2018-07-27 Thread Callum Smith
Dear Scott,

You're not wrong, console reports the error:

Reducing action: 
{"type":"VM_ACTIONS_SET_CONSOLE_IN_USE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleInUse":false}}
 helpers.js:19:6
Reducing action: 
{"type":"SET_VM_CONSOLES","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoles":[{"id":"7370696365","protocol":"spice"},{"id":"766e63","protocol":"vnc"}]}}
 helpers.js:19:6
Reducing action: 
{"type":"VM_ACTION_IN_PROGRESS","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","name":"getConsole","started":false}}
 helpers.js:19:6
External action console() starts on 
{"type":"INTERNAL_CONSOLE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleId":"7370696365"}}
 helpers.js:19:6
_httpGet start: 
url="/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365"
 helpers.js:19:6
_httpGet: 
url="/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365",
 headers="{"Authorization":"Bearer 
5orPWAJBkJx5g1bZDxi7Q3h3oQHFpWZW6XP5rZo_Moy3IShguyuA6VPpa4EB-o7mc8g_gHuua5BdMy8wwet3Yw","Accept-Language":"en_US","Filter":true,"Accept":"application/x-virt-viewer"}"
XML Parsing Error: no root element found Location: 
https://ovirtengine.cluster/ovirt-engine/api/vms/a437d298-59b3-4e10-9ced-516edb38a7ea/graphicsconsoles/7370696365
 Line Number 1, Column 1:
Ajax failed: 
{"readyState":4,"responseText":"","status":403,"statusText":"Forbidden"} 
helpers.js:19:6
External action exception: 
{"readyState":4,"responseText":"","status":403,"statusText":"Forbidden"} 
helpers.js:19:6
Reducing action: {"type":"FAILED_EXTERNAL_ACTION","payload":{"message":"Failed 
to retrieve VM console details\nForbidden","shortMessage":"Failed to retrieve 
VM console 
details","type":403,"action":{"type":"INTERNAL_CONSOLE","payload":{"vmId":"a437d298-59b3-4e10-9ced-516edb38a7ea","consoleId":"7370696365"

All of the forbidden issues could be misleading, but along with the server-side 
permissions issues that leads me to believe it could be a combination of both 
the issue you suggest and another one underlying?

We have to go with full release versions ideally as the ovirtengine is in 
production, I'd rather avoid the master branch version.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 15:25, Scott Dickerson 
mailto:sdick...@redhat.com>> wrote:

Callum,

If you are seeing the error when opening the console from VM Portal (web-ui), 
this sounds a lot like issue [1].  A patch against the ovirt REST api was done 
to help mitigate some errors that should not happen.  I'll take a look to see 
how it is working in the current master snapshot of ovirt-engine and VM Portal.

What version of oVirt are you using?

[1] - https://github.com/oVirt/ovirt-web-ui/issues/509

Regards,
Scott Dickerson


On Fri, Jul 27, 2018 at 4:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Thanks Greg, it really would be great to resolve this and would really like to 
not have to clean install the engine on a new hostname (especially without a 
guarantee that it will work). Migrating is a significant portion of work.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:20, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

Adding some people who may be able to help.

On Wed, Jul 18, 2018 at 7:15 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Please see the errors below. I'm seeing this in the engine.log when as a user 
I'm trying to activate either a VM console or reboot a VM which I have access 
to as a user ("UserRole permission assigned to VM).

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN

[ovirt-users] Re: VM User with UserRole missing permissions to activate console and other actions

2018-07-27 Thread Callum Smith
Thanks Greg, it really would be great to resolve this and would really like to 
not have to clean install the engine on a new hostname (especially without a 
guarantee that it will work). Migrating is a significant portion of work.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:20, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

Adding some people who may be able to help.

On Wed, Jul 18, 2018 at 7:15 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Please see the errors below. I'm seeing this in the engine.log when as a user 
I'm trying to activate either a VM console or reboot a VM which I have access 
to as a user ("UserRole permission assigned to VM).

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,393+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,394+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,396+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:59,195+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] User '9386d6f5-f172-4cdb
-abca-62492a357888' is trying to take the console of virtual machine 
'ddb23e0a-01d5-403c-89ab-37c400d2c938', but the console is alrea
dy taken by user 'd021fc10-4f7c-11e8-88cb-00163e6a7aff'.
2018-07-18 10:51:59,197+01 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] No permission found for
user '9386d6f5-f172-4cdb-abca-62492a357888' or one of the groups he is member 
of, when running action 'SetVmTicket', Required permiss
ions are: Action type: 'USER' Action group: 'RECONNECT_TO_VM' Object type: 'VM' 
 Object ID: 'ddb23e0a-01d5-403c-89ab-37c400d2c938'.
2018-07-18 10:51:59,197+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] Validation of action 'Se
tVmTicket' failed for user callum@Biomedical Research Computing. Reasons: 
VAR__ACTION__SET,VAR__TYPE__VM_TICKET,USER_CANNOT_FORCE_REC
ONNECT_TO_VM
2018-07-18 10:51:59,198+01 ERROR 
[org.ovirt.engine.api.restapi.resource.BackendVmGraphicsConsoleResource] 
(default task-18) [] Operat
ion Failed: USER_CANNOT_FORCE_RECONNECT_TO_VM

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/D7GSJDZ32DBIMYRMX3MF2TKVNTP5Q6DW/


--
GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA

<https://www.redhat.com/>

gsher...@redhat.com<mailto:gsher...@redhat.com>IRC: gshereme

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig

[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-07-27 Thread Callum Smith
Dear Greg,

Indeed, always the latest and greatest for us while trying to get this running.

https://www.ovirt.org/documentation/security/squid-reverse-proxy/

And the squid.conf file looks like this:

https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key 
cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt 
defaultsite=ovirtengine.cluster
cache_peer ovirtengine.cluster parent 443 0 no-query originserver ssl 
sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
cache_peer_access engine allow all
ssl_bump allow all
http_port 3128
acl ovirt_nodes dst 192.168.64.0/24
acl ovirt_engine dstdomain .ovirtengine.cluster
acl all_ips src 1.1.1.1/1
http_access allow ovirt_nodes ovirt_engine
http_access allow all_ips
http_access allow all


# Following are from:
# https://access.redhat.com/solutions/425693

# Leave coredumps in the first cache dir
coredump_dir /var/spool/squid

# RHEV and Spice may leave connections idle for long periods
pconn_timeout   12 hours
request_timeout 12 hours
read_timeout12 hours

# We need approx 20 open filehandles per spice client
max_filedesc 16384

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 27 Jul 2018, at 01:15, Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:

>From your other thread, I'm guessing 4.2.4.

Can you send the link to the squid guide you used?

On Wed, Jul 25, 2018 at 7:55 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Hi Callum,

What version of ovirt-web-ui is this?

Greg

On Wed, Jul 18, 2018 at 7:12 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Those error logs are relevant only to another issue, please ignore.

There appears to be a problem to do with authentication through the squid proxy 
though, which presents differently in Safari and Firefox:

[X][X]

Sorry for the screenshots but its the only way i can extract this data due to 
the page-refresh.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 Jul 2018, at 10:54, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Some relevant error logs:

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,393+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,394+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,396+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:59,195+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] User '9386d6f5-f172-4cdb
-abca-62492a357888' is trying to take the console of virtual machine 
'ddb23e0a-01d5-403c-89ab-37c400d2c938', but the console is alrea
dy taken by user 'd021fc10-4f7c-11e8-88cb-00163e6a7aff'.
2018-07-18 10:51:59,197+01 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] No permission found for
user '9386d6f5-f172-4cdb-abca-62492a357888' or one of the groups he is member 
of, when running action 'SetVmTicket', Required permiss
ion

[ovirt-users] VM User with UserRole missing permissions to activate console and other actions

2018-07-18 Thread Callum Smith
Dear All,

Please see the errors below. I'm seeing this in the engine.log when as a user 
I'm trying to activate either a VM console or reboot a VM which I have access 
to as a user ("UserRole permission assigned to VM).

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,393+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,394+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,396+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:59,195+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] User '9386d6f5-f172-4cdb
-abca-62492a357888' is trying to take the console of virtual machine 
'ddb23e0a-01d5-403c-89ab-37c400d2c938', but the console is alrea
dy taken by user 'd021fc10-4f7c-11e8-88cb-00163e6a7aff'.
2018-07-18 10:51:59,197+01 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] No permission found for
user '9386d6f5-f172-4cdb-abca-62492a357888' or one of the groups he is member 
of, when running action 'SetVmTicket', Required permiss
ions are: Action type: 'USER' Action group: 'RECONNECT_TO_VM' Object type: 'VM' 
 Object ID: 'ddb23e0a-01d5-403c-89ab-37c400d2c938'.
2018-07-18 10:51:59,197+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] Validation of action 'Se
tVmTicket' failed for user callum@Biomedical Research Computing. Reasons: 
VAR__ACTION__SET,VAR__TYPE__VM_TICKET,USER_CANNOT_FORCE_REC
ONNECT_TO_VM
2018-07-18 10:51:59,198+01 ERROR 
[org.ovirt.engine.api.restapi.resource.BackendVmGraphicsConsoleResource] 
(default task-18) [] Operat
ion Failed: USER_CANNOT_FORCE_RECONNECT_TO_VM

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/D7GSJDZ32DBIMYRMX3MF2TKVNTP5Q6DW/


[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-07-18 Thread Callum Smith
Dear All,

Some relevant error logs:

2018-07-18 10:51:33,554+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-9) 
[557ca876] Running command
: CreateUserSessionCommand internal: false.
2018-07-18 10:51:33,575+01 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-9) [557ca876] E
VENT_ID: USER_VDC_LOGIN(30), User callum@Biomedical Research Computing 
connecting from '192.168.1.241' using session 'wiWA25wdaRP1zay
iyTSGBJKpvi89LdzgKqeX12BcZhNVhpV2BIA+zkAnT50xOSDglxnhfAi3S2ZiODls8JYFUA==' 
logged in.
2018-07-18 10:51:34,135+01 ERROR 
[org.ovirt.engine.core.bll.GetSystemStatisticsQuery] (default task-5) 
[8d830cdb-fc11-4e68-94e6-73309
65c4488] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,205+01 ERROR 
[org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-26) 
[ba1825f1-60fb-44cd-8b57-
ea701cf698c0] Query execution failed due to insufficient permissions.
2018-07-18 10:51:34,242+01 ERROR 
[org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default 
task-26) [] Operation Faile
d: query execution failed due to insufficient permissions.
2018-07-18 10:51:34,389+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,393+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,394+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:34,396+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.GetStorageDomainListByIdQuery] 
(default task-17) [02965366
-44b0-4370-ab83-4781065e46c2] Query execution failed due to insufficient 
permissions.
2018-07-18 10:51:59,195+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] User '9386d6f5-f172-4cdb
-abca-62492a357888' is trying to take the console of virtual machine 
'ddb23e0a-01d5-403c-89ab-37c400d2c938', but the console is alrea
dy taken by user 'd021fc10-4f7c-11e8-88cb-00163e6a7aff'.
2018-07-18 10:51:59,197+01 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] No permission found for
user '9386d6f5-f172-4cdb-abca-62492a357888' or one of the groups he is member 
of, when running action 'SetVmTicket', Required permiss
ions are: Action type: 'USER' Action group: 'RECONNECT_TO_VM' Object type: 'VM' 
 Object ID: 'ddb23e0a-01d5-403c-89ab-37c400d2c938'.
2018-07-18 10:51:59,197+01 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] 
(default task-18) [7881a832] Validation of action 'Se
tVmTicket' failed for user callum@Biomedical Research Computing. Reasons: 
VAR__ACTION__SET,VAR__TYPE__VM_TICKET,USER_CANNOT_FORCE_REC
ONNECT_TO_VM
2018-07-18 10:51:59,198+01 ERROR 
[org.ovirt.engine.api.restapi.resource.BackendVmGraphicsConsoleResource] 
(default task-18) [] Operat
ion Failed: USER_CANNOT_FORCE_RECONNECT_TO_VM

Seems like there's a permission missing in there - this is a newly attached 
LDAP group.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 Jul 2018, at 10:02, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Does anyone know how to set such options in the web-ui?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jul 2018, at 11:09, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear oVirt Gurus,

Using the oVirt user VM portal seems to not work through the squid proxy setup 
(configured as per the guide). The page loads and login works fine through the 
proxy, but the asynchronous requests just hang. I've attached a screenshot, but 
you can see the "api" endpoint just hanging in a web inspector:
"https://proxyfqdn/ovirt-engine/api/;



This works fine when not going through the proxy.

Is there a way to force noVNC HTML as the console mode through the web-ui, or 
at least have it as an option if not default?

The console seems not to work when logged in with a base 'user role'.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https:/

[ovirt-users] Re: Issue when updating node to 4.2.4

2018-07-18 Thread Callum Smith
Dear All,

A combination of options fixed this:

yum downgrade ovirt-node-ng-image-update
lvremove /dev//.0
lvremove /dev//.0+1
lvremove /dev//var_crash
fstrim -av
reboot

Next time the yum update ovirt-node-ng-image-update works.

Thanks all for your help!

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 Jul 2018, at 07:07, Oliver Riesener 
mailto:oliver.riese...@hs-bremen.de>> wrote:

Hi Callum,

your LVM thin pool seams to be full.
Try to trim it with: fstrin -av.

Am 12.07.2018 um 13:13 schrieb Callum Smith 
mailto:cal...@well.ox.ac.uk>>:

'lvcreate', '--thin', '--virtualsize', u'349121282048B', '--name', 
'ovirt-node-ng-4.2.4-0.20180626.0', u'onn_virta003/pool00']'


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SGJTCFJJZDZ6CZL3JXICH3X2DFY7HUX5/


[ovirt-users] Re: Issue when updating node to 4.2.4

2018-07-17 Thread Callum Smith
Dear all,

Has anyone else experienced these issues or are the exclusive to these nodes? 
I'd rather avoid re-installing them as a work-around if possible.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jul 2018, at 12:13, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Error in the scripts as part of doing a yum update on the host:


/var/log/messages
Jul 12 12:07:00 virtA003 imgbased: 2018-07-12 12:07:00,170 [INFO] (MainThread) 
Extracting image 
'/usr/share/ovirt-node-ng/image//ovirt-node-ng-4.2.0-0.20180626.0.el7.squashfs.img'
Jul 12 12:07:00 virtA003 kernel: EXT4-fs (loop3): mounted filesystem with 
ordered data mode. Opts: (null)
Jul 12 12:07:00 virtA003 imgbased: 2018-07-12 12:07:00,295 [INFO] (MainThread) 
Starting base creation
Jul 12 12:07:00 virtA003 imgbased: 2018-07-12 12:07:00,295 [INFO] (MainThread) 
New base will be: ovirt-node-ng-4.2.4-0.20180626.0
Jul 12 12:07:00 virtA003 python: detected unhandled Python exception in 
'/tmp/tmp.awWEfeJStR/usr/lib/python2.7/site-packages/imgbased/__main__.py'
Jul 12 12:07:00 virtA003 abrt-server: Executable 
'/tmp/tmp.awWEfeJStR/usr/lib/python2.7/site-packages/imgbased/__main__.py' 
doesn't belong to any package and ProcessUnpackaged is set to 'no'
Jul 12 12:07:00 virtA003 abrt-server: 'post-create' on 
'/var/tmp/abrt/Python-2018-07-12-12:07:00-4688' exited with 1
Jul 12 12:07:00 virtA003 abrt-server: Deleting problem directory 
'/var/tmp/abrt/Python-2018-07-12-12:07:00-4688'
Jul 12 12:07:00 virtA003 yum[4558]: Updated: 
ovirt-node-ng-image-update-4.2.4-1.el7.noarch

/tmp/imgbased.log

2018-07-12 12:07:00,166 [DEBUG] (MainThread) Version: imgbased-1.0.20
2018-07-12 12:07:00,170 [DEBUG] (MainThread) Arguments: 
Namespace(FILENAME='/usr/share/ovirt-node-ng/image//ovirt-node-ng-4.2.0-0.20180626.0.el7.squashfs.img',
 command='update', debug=True, experimental=False, format='liveimg', 
stream='Image')
2018-07-12 12:07:00,170 [INFO] (MainThread) Extracting image 
'/usr/share/ovirt-node-ng/image//ovirt-node-ng-4.2.0-0.20180626.0.el7.squashfs.img'
2018-07-12 12:07:00,170 [DEBUG] (MainThread) Calling binary: (['mktemp', '-d', 
'--tmpdir', 'mnt.X'],) {}
2018-07-12 12:07:00,170 [DEBUG] (MainThread) Calling: (['mktemp', '-d', 
'--tmpdir', 'mnt.X'],) {'close_fds': True, 'stderr': -2}
2018-07-12 12:07:00,173 [DEBUG] (MainThread) Returned: /tmp/mnt.qTRik
2018-07-12 12:07:00,173 [DEBUG] (MainThread) Calling binary: (['mount', 
'/usr/share/ovirt-node-ng/image//ovirt-node-ng-4.2.0-0.20180626.0.el7.squashfs.img',
 u'/tmp/mnt.qTRik'],) {}
2018-07-12 12:07:00,174 [DEBUG] (MainThread) Calling: (['mount', 
'/usr/share/ovirt-node-ng/image//ovirt-node-ng-4.2.0-0.20180626.0.el7.squashfs.img',
 u'/tmp/mnt.qTRik'],) {'close_fds': True, 'stderr': -2}
2018-07-12 12:07:00,180 [DEBUG] (MainThread) Returned:
2018-07-12 12:07:00,180 [DEBUG] (MainThread) Mounted squashfs
2018-07-12 12:07:00,180 [DEBUG] (MainThread) Found fsimage at 
'/tmp/mnt.qTRik/LiveOS/rootfs.img'
2018-07-12 12:07:00,180 [DEBUG] (MainThread) Calling binary: (['mktemp', '-d', 
'--tmpdir', 'mnt.X'],) {}
2018-07-12 12:07:00,181 [DEBUG] (MainThread) Calling: (['mktemp', '-d', 
'--tmpdir', 'mnt.X'],) {'close_fds': True, 'stderr': -2}
2018-07-12 12:07:00,184 [DEBUG] (MainThread) Returned: /tmp/mnt.SIk9q
2018-07-12 12:07:00,184 [DEBUG] (MainThread) Calling binary: (['mount', 
u'/tmp/mnt.qTRik/LiveOS/rootfs.img', u'/tmp/mnt.SIk9q'],) {}
2018-07-12 12:07:00,184 [DEBUG] (MainThread) Calling: (['mount', 
u'/tmp/mnt.qTRik/LiveOS/rootfs.img', u'/tmp/mnt.SIk9q'],) {'close_fds': True, 
'stderr': -2}
2018-07-12 12:07:00,199 [DEBUG] (MainThread) Returned:
2018-07-12 12:07:00,212 [DEBUG] (MainThread) Using nvr: 
ovirt-node-ng-4.2.4-0.20180626.0
2018-07-12 12:07:00,212 [DEBUG] (MainThread) Fetching image for '/'
2018-07-12 12:07:00,212 [DEBUG] (MainThread) Calling binary: (['findmnt', 
'--noheadings', '-o', 'SOURCE', '/'],) {}
2018-07-12 12:07:00,212 [DEBUG] (MainThread) Calling: (['findmnt', 
'--noheadings', '-o', 'SOURCE', '/'],) {'close_fds': True, 'stderr': -2}
2018-07-12 12:07:00,217 [DEBUG] (MainThread) Returned: 
/dev/mapper/onn_virta003-ovirt--node--ng--4.2.3.1--0.20180530.0+1
2018-07-12 12:07:00,218 [DEBUG] (MainThread) Found 
'/dev/mapper/onn_virta003-ovirt--node--ng--4.2.3.1--0.20180530.0+1'
2018-07-12 12:07:00,218 [DEBUG] (MainThread) Calling binary: (['lvs', 
'--noheadings', '--ignoreskippedcluster', '-ovg_name,lv_name', 
u'/dev/mapper/onn_virta003-ovirt--node--ng--4.2.3.1--0.20180530.0+1'],) 
{'stderr': }
2018-07-12 12:07:00,218 [DEBUG] (MainThread) Calling: (['lvs', '--noheadings', 
'--ignoreskippedcluster', '-ovg_name,lv_name', 
u'/dev/mapper/onn_virta003-ovirt--node--ng--4.2.3.1--0.20180530.0+1'],) 
{'close_fds': True, 'stderr': }
2018-07-12 12:07:00,248 [DEBUG] (MainThread) Returned: onn_virta003 
ovirt-node-ng-4.2.3.1-0.20180530.0+1
2018-07-12 12:07:0

[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

2018-07-17 Thread Callum Smith
Dear All,

Does anyone know how to set such options in the web-ui?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jul 2018, at 11:09, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear oVirt Gurus,

Using the oVirt user VM portal seems to not work through the squid proxy setup 
(configured as per the guide). The page loads and login works fine through the 
proxy, but the asynchronous requests just hang. I've attached a screenshot, but 
you can see the "api" endpoint just hanging in a web inspector:
"https://proxyfqdn/ovirt-engine/api/;



This works fine when not going through the proxy.

Is there a way to force noVNC HTML as the console mode through the web-ui, or 
at least have it as an option if not default?

The console seems not to work when logged in with a base 'user role'.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VZIGGZZ2IIHBZ65QCX5PLB65DEMRQD4X/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7NBOGYVL4EAH4QQI6ETPMFNXC5VSTZCP/


[ovirt-users] Issue when updating node to 4.2.4

2018-07-12 Thread Callum Smith
uot;/tmp/tmp.awWEfeJStR/usr/lib/python2.7/site-packages/imgbased/utils.py", 
line 378, in call
stdout = call(*args, **kwargs)
  File "/tmp/tmp.awWEfeJStR/usr/lib/python2.7/site-packages/imgbased/utils.py", 
line 153, in call
return subprocess.check_output(*args, **kwargs).strip()
  File "/usr/lib64/python2.7/subprocess.py", line 575, in check_output
raise CalledProcessError(retcode, cmd, output=output)
subprocess.CalledProcessError: Command '['lvcreate', '--thin', '--virtualsize', 
u'349121282048B', '--name', 'ovirt-node-ng-4.2.4-0.20180626.0', 
u'onn_virta003/pool00']' returned non-zero exit status 5

How would i move forward on this?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EMEF6P2RMCDUVQST42BMPEN3O3NQGCET/


[ovirt-users] Using the web-ui VM portal through a proxy failing

2018-07-12 Thread Callum Smith
Dear oVirt Gurus,

Using the oVirt user VM portal seems to not work through the squid proxy setup 
(configured as per the guide). The page loads and login works fine through the 
proxy, but the asynchronous requests just hang. I've attached a screenshot, but 
you can see the "api" endpoint just hanging in a web inspector:
"https://proxyfqdn/ovirt-engine/api/;

[cid:CA42E493-3AD9-45F8-B4C3-C914F059390C@well.ox.ac.uk]

This works fine when not going through the proxy.

Is there a way to force noVNC HTML as the console mode through the web-ui, or 
at least have it as an option if not default?

The console seems not to work when logged in with a base 'user role'.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VZIGGZZ2IIHBZ65QCX5PLB65DEMRQD4X/


[ovirt-users] Re: vGPU setup guide

2018-06-24 Thread Callum Smith
Works perfectly on our P40, going to try on a 32GB V100 card too, just got 
console and general user-portal woes to get through before we can do proper 
scale testing though.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 24 Jun 2018, at 13:20, femi adegoke 
mailto:ov...@fateknollogee.com>> wrote:

What's the latest, any updates?

What GPU are you using?
___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQUVLRVZZ5IILWTVPAQP7CLKSGW4DTLX/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/I252NSG6P7FSZOBNBIWCI2I7I3UPIBAC/


[ovirt-users] Re: Hosted engine cannot migrate

2018-06-14 Thread Callum Smith
So the one host with the stale-data, putting that into maintenance and then 
rebooting seems to have brought it back and stopped the errors. It seems the 
ha-broker is a bit more temperamental than usual after the 4.2.3.1 release.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 14 Jun 2018, at 10:34, Martin Sivak 
mailto:msi...@redhat.com>> wrote:

Dear Callum,

unknown stale-data means the hosts did not submit status update during
the last minute. That might be just a glitch or something happened to
the storage connection there.

Best regards

Martin Sivak


On Thu, Jun 14, 2018 at 11:28 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Martin,

The engine is running happily and migration appears to work although it
appears one node has dropped into "unknown stale-data" on vm-status (the
node that is neither the originator or the target for the migration.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 14 Jun 2018, at 10:22, Martin Sivak 
mailto:msi...@redhat.com>> wrote:

Hi,

is the engine running even though you see the errors in the log?
Hosted engine agents fight for the lock when starting the engine VM.
One wins and the others report an issue. We have some checks in place
to silence those, but maybe it leaked again.

This might be just annoying as long as the engine is up. Manually
clicking the migrate button should also work.

Best regards

Martin Sivak

On Thu, Jun 14, 2018 at 10:41 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Getting an issue where the HE can't b migrated, the log is full of:
"VM HostedEngine is down with error. Exit message: resource busy: Failed to
acquire lock: Lease is held by another host."

engine.log attached

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SR5RVQ2WFDMKNO4RXSCU45GJ7RTXDZX4/



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JXTP2AUZ7P7YJY7XQFE7DM2YWOOZLFRE/


[ovirt-users] Re: Hosted engine cannot migrate

2018-06-14 Thread Callum Smith
Dear Martin,

The engine is running happily and migration appears to work although it appears 
one node has dropped into "unknown stale-data" on vm-status (the node that is 
neither the originator or the target for the migration.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 14 Jun 2018, at 10:22, Martin Sivak 
mailto:msi...@redhat.com>> wrote:

Hi,

is the engine running even though you see the errors in the log?
Hosted engine agents fight for the lock when starting the engine VM.
One wins and the others report an issue. We have some checks in place
to silence those, but maybe it leaked again.

This might be just annoying as long as the engine is up. Manually
clicking the migrate button should also work.

Best regards

Martin Sivak

On Thu, Jun 14, 2018 at 10:41 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Getting an issue where the HE can't b migrated, the log is full of:
"VM HostedEngine is down with error. Exit message: resource busy: Failed to
acquire lock: Lease is held by another host."

engine.log attached

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SR5RVQ2WFDMKNO4RXSCU45GJ7RTXDZX4/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KRGOH56HKO6SHS7CEMSMS7JMZKXSCPDG/


[ovirt-users] Hosted engine cannot migrate

2018-06-14 Thread Callum Smith
Dear All,

Getting an issue where the HE can't b migrated, the log is full of:
"VM HostedEngine is down with error. Exit message: resource busy: Failed to 
acquire lock: Lease is held by another host."

engine.log attached

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


engine.log.tar.gz
Description: engine.log.tar.gz
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SR5RVQ2WFDMKNO4RXSCU45GJ7RTXDZX4/


[ovirt-users] Re: LDAP Authentication issues

2018-06-12 Thread Callum Smith
Dear All,

Seems the required element for the CPU Profile to work is in roles_groups table:

insert into roles_groups (role_id, action_group_id) VALUES 
('def00017----def00017', '1668');

Whether the action_group_id is install-specific or not is unclear, but the role 
UUID for "CPUOperator" should be standard.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jun 2018, at 09:47, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear All,

Process of database "fixing" is required because adding system permissions to 
the "Everyone" group is a one-way process that causes many problems and there 
is no way to rescue from the GUI, only options are to restore from backup or 
rebuild the permissions database.

The next issue, is that CPU Profiles are locked out to even the SuperUser - so 
creating a VM with the SuperUser account with reset permissions is denied:
User doesn't have permissions to assign the cpu profile Default with id 
58ca604e-01a7-003f-01de-0250 to VMs.

I consider that to be a bug, personally, as a SuperUser should have access to 
everything by definition.

To solve this in the mean time, i need to know the object_type_id of a cpu 
profile to manually reassign permissions to it (you can't control CPU profile 
permissions in the GUI either, only view).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jun 2018, at 06:44, Roy Golan 
mailto:rgo...@redhat.com>> wrote:



On Tue, 12 Jun 2018 at 02:24 Donny Davis 
mailto:do...@fortnebula.com>> wrote:
I am happy to help where I can. I would also not recommend tinkering around in 
the database, but I am happy to hear you have it all running. :)

Everything you should every be doing in the engine is available via the API/UI. 
Just some general advice.



On Mon, Jun 11, 2018 at 9:31 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All & Donny,

Thank you for the clarifications, very useful indeed.

A note for future users who go down this path and dont want to restore or 
reinstall:

Cleaning out the `permissions` table in the database and restoring the defaults 
will solve the issue, but you need to restore the SuperUser permission on the 
admin@internal account:



Learning from here:
https://www.ovirt.org/develop/developer-guide/action-permissions-overview/

Clean out your `roles_groups` and `permissions`
DELETE FROM `permissions`;
DELETE FROM `roles_groups`;

Restore the defaults:
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00600_insert_permissions.sql
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00700_insert_roles_groups.sql

Re-assign the SuperUser role to the admin@internal user:
Either: 
https://github.com/oVirt/ovirt-engine/blob/master/packaging/bin/ovirt-engine-role.sh
Or just go straight into your localhost psql on your engine, replacing 
information as appropriate:
Get your external_id from the users table and use it in the function:
SELECT external_id FROM `users` WHERE `name` = 'admin' AND `domain` = 
'internal-authz';
select 
attach_user_to_role('admin','internal-authz','*','#external_id#','SuperUser');

Regards,
Callum




I think the root cause here is that you are trying to login to the webadmin and 
not the vm portal. User are authorized to login to the web admin
only if they have a role of type 'admin'. And UserRole is a 'user' type. So the 
solution is not the give SuperUser for all those users, this is just a 
workaround.

If you want to know for sure, go to Administration - Configure - Roles.

So ask yourself why users need access to the webadmin at all. If they need 
admin permission assign them an appropriate role on the DC or the cluster.
If not, they use the VM portal.

Having said all that, if nothing helps and the db needs 'fixing' (I doubt it 
though) then this is a bug.
--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:57, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

https://lists.ovirt.org/pipermail/users/2015-January/030981.html

This is the thread where I discussed a bit of the permissions thing. I am sure 
things have changed since 3.5.1, but should get you down the right path.

On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Yes, in process of trying to fix/identify things - need to undo this.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:48, Donny Dav

[ovirt-users] Re: LDAP Authentication issues

2018-06-12 Thread Callum Smith
Yes indeed

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jun 2018, at 10:18, Roy Golan 
mailto:rgo...@redhat.com>> wrote:



On Tue, 12 Jun 2018 at 11:48 Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Process of database "fixing" is required because adding system permissions to 
the "Everyone" group is a one-way process that causes many problems and there 
is no way to rescue from the GUI, only options are to restore from backup or 
rebuild the permissions database.

The next issue, is that CPU Profiles are locked out to even the SuperUser - so 
creating a VM with the SuperUser account with reset permissions is denied:
User doesn't have permissions to assign the cpu profile Default with id 
58ca604e-01a7-003f-01de-0250 to VMs.


I consider that to be a bug, personally, as a SuperUser should have access to 
everything by definition.

Is that user is admin@internal?

To solve this in the mean time, i need to know the object_type_id of a cpu 
profile to manually reassign permissions to it (you can't control CPU profile 
permissions in the GUI either, only view).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jun 2018, at 06:44, Roy Golan 
mailto:rgo...@redhat.com>> wrote:



On Tue, 12 Jun 2018 at 02:24 Donny Davis 
mailto:do...@fortnebula.com>> wrote:
I am happy to help where I can. I would also not recommend tinkering around in 
the database, but I am happy to hear you have it all running. :)

Everything you should every be doing in the engine is available via the API/UI. 
Just some general advice.



On Mon, Jun 11, 2018 at 9:31 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All & Donny,

Thank you for the clarifications, very useful indeed.

A note for future users who go down this path and dont want to restore or 
reinstall:

Cleaning out the `permissions` table in the database and restoring the defaults 
will solve the issue, but you need to restore the SuperUser permission on the 
admin@internal account:



Learning from here:
https://www.ovirt.org/develop/developer-guide/action-permissions-overview/

Clean out your `roles_groups` and `permissions`
DELETE FROM `permissions`;
DELETE FROM `roles_groups`;

Restore the defaults:
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00600_insert_permissions.sql
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00700_insert_roles_groups.sql

Re-assign the SuperUser role to the admin@internal user:
Either: 
https://github.com/oVirt/ovirt-engine/blob/master/packaging/bin/ovirt-engine-role.sh
Or just go straight into your localhost psql on your engine, replacing 
information as appropriate:
Get your external_id from the users table and use it in the function:
SELECT external_id FROM `users` WHERE `name` = 'admin' AND `domain` = 
'internal-authz';
select 
attach_user_to_role('admin','internal-authz','*','#external_id#','SuperUser');

Regards,
Callum




I think the root cause here is that you are trying to login to the webadmin and 
not the vm portal. User are authorized to login to the web admin
only if they have a role of type 'admin'. And UserRole is a 'user' type. So the 
solution is not the give SuperUser for all those users, this is just a 
workaround.

If you want to know for sure, go to Administration - Configure - Roles.

So ask yourself why users need access to the webadmin at all. If they need 
admin permission assign them an appropriate role on the DC or the cluster.
If not, they use the VM portal.

Having said all that, if nothing helps and the db needs 'fixing' (I doubt it 
though) then this is a bug.
--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:57, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

https://lists.ovirt.org/pipermail/users/2015-January/030981.html

This is the thread where I discussed a bit of the permissions thing. I am sure 
things have changed since 3.5.1, but should get you down the right path.

On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Yes, in process of trying to fix/identify things - need to undo this.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:48, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

did you add system permissions to the everyone group?

On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Happy for you to

[ovirt-users] Re: LDAP Authentication issues

2018-06-12 Thread Callum Smith
Dear All,

Process of database "fixing" is required because adding system permissions to 
the "Everyone" group is a one-way process that causes many problems and there 
is no way to rescue from the GUI, only options are to restore from backup or 
rebuild the permissions database.

The next issue, is that CPU Profiles are locked out to even the SuperUser - so 
creating a VM with the SuperUser account with reset permissions is denied:
User doesn't have permissions to assign the cpu profile Default with id 
58ca604e-01a7-003f-01de-0250 to VMs.

I consider that to be a bug, personally, as a SuperUser should have access to 
everything by definition.

To solve this in the mean time, i need to know the object_type_id of a cpu 
profile to manually reassign permissions to it (you can't control CPU profile 
permissions in the GUI either, only view).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 12 Jun 2018, at 06:44, Roy Golan 
mailto:rgo...@redhat.com>> wrote:



On Tue, 12 Jun 2018 at 02:24 Donny Davis 
mailto:do...@fortnebula.com>> wrote:
I am happy to help where I can. I would also not recommend tinkering around in 
the database, but I am happy to hear you have it all running. :)

Everything you should every be doing in the engine is available via the API/UI. 
Just some general advice.



On Mon, Jun 11, 2018 at 9:31 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All & Donny,

Thank you for the clarifications, very useful indeed.

A note for future users who go down this path and dont want to restore or 
reinstall:

Cleaning out the `permissions` table in the database and restoring the defaults 
will solve the issue, but you need to restore the SuperUser permission on the 
admin@internal account:



Learning from here:
https://www.ovirt.org/develop/developer-guide/action-permissions-overview/

Clean out your `roles_groups` and `permissions`
DELETE FROM `permissions`;
DELETE FROM `roles_groups`;

Restore the defaults:
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00600_insert_permissions.sql
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00700_insert_roles_groups.sql

Re-assign the SuperUser role to the admin@internal user:
Either: 
https://github.com/oVirt/ovirt-engine/blob/master/packaging/bin/ovirt-engine-role.sh
Or just go straight into your localhost psql on your engine, replacing 
information as appropriate:
Get your external_id from the users table and use it in the function:
SELECT external_id FROM `users` WHERE `name` = 'admin' AND `domain` = 
'internal-authz';
select 
attach_user_to_role('admin','internal-authz','*','#external_id#','SuperUser');

Regards,
Callum




I think the root cause here is that you are trying to login to the webadmin and 
not the vm portal. User are authorized to login to the web admin
only if they have a role of type 'admin'. And UserRole is a 'user' type. So the 
solution is not the give SuperUser for all those users, this is just a 
workaround.

If you want to know for sure, go to Administration - Configure - Roles.

So ask yourself why users need access to the webadmin at all. If they need 
admin permission assign them an appropriate role on the DC or the cluster.
If not, they use the VM portal.

Having said all that, if nothing helps and the db needs 'fixing' (I doubt it 
though) then this is a bug.
--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:57, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

https://lists.ovirt.org/pipermail/users/2015-January/030981.html

This is the thread where I discussed a bit of the permissions thing. I am sure 
things have changed since 3.5.1, but should get you down the right path.

On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Yes, in process of trying to fix/identify things - need to undo this.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:48, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

did you add system permissions to the everyone group?

On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Happy for you to link me a guide, googlefu is failing me.

How do i get around this "It's not allowed to remove system permissions 
assigned to built-in Everyone group" - to remove permissions erroneously added.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Dear All & Donny,

Thank you for the clarifications, very useful indeed.

A note for future users who go down this path and dont want to restore or 
reinstall:

Cleaning out the `permissions` table in the database and restoring the defaults 
will solve the issue, but you need to restore the SuperUser permission on the 
admin@internal account:

Learning from here:
https://www.ovirt.org/develop/developer-guide/action-permissions-overview/

Clean out your `roles_groups` and `permissions`
DELETE FROM `permissions`;
DELETE FROM `roles_groups`;

Restore the defaults:
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00600_insert_permissions.sql
https://github.com/oVirt/ovirt-engine/blob/master/packaging/dbscripts/data/00700_insert_roles_groups.sql

Re-assign the SuperUser role to the admin@internal user:
Either: 
https://github.com/oVirt/ovirt-engine/blob/master/packaging/bin/ovirt-engine-role.sh
Or just go straight into your localhost psql on your engine, replacing 
information as appropriate:
Get your external_id from the users table and use it in the function:
SELECT external_id FROM `users` WHERE `name` = 'admin' AND `domain` = 
'internal-authz';
select 
attach_user_to_role('admin','internal-authz','*','#external_id#','SuperUser');

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:57, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

https://lists.ovirt.org/pipermail/users/2015-January/030981.html

This is the thread where I discussed a bit of the permissions thing. I am sure 
things have changed since 3.5.1, but should get you down the right path.

On Mon, Jun 11, 2018 at 6:54 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Yes, in process of trying to fix/identify things - need to undo this.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:48, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

did you add system permissions to the everyone group?

On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Happy for you to link me a guide, googlefu is failing me.

How do i get around this "It's not allowed to remove system permissions 
assigned to built-in Everyone group" - to remove permissions erroneously added.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:38, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

You can create a profile that has the proper permissions to allow what you are 
looking for, and then assign that profile to the groups you wish.
I wrote a post on this quite a while back on how to setup oVirt to appear to be 
multi-tenant.

Happy to see you don't have an ldap issue :)

>This will be a problem for us to now create group permissions for all 100+ 
>groups since Everyone === No-one. -sigh-


On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Ah, this appears to be an issue with the proxy - setting up the spice proxy as 
indicated in the guides is causing this issue, and likely will need support.

https://www.ovirt.org/documentation/admin-guide/chap-Proxies/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:29, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok, the user now logs in! This will be a problem for us to now create group 
permissions for all 100+ groups since Everyone === No-one. -sigh-

A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth 
login prompts, and a "Authorization expired" error, then a page reload. Nothing 
in the logs seem to indicate an issue.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:26, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Try giving your user system permissions as a superuser and see if it goes away.

I wouldn't leave it like that, but it will help isolate your issue. I don't 
think you have an ldap issue... the log entry is telling you that user has no 
permissions
>The user callum@Biomedical Research Computing is not authorized to perform 
>login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:

Regards,
Callum

--

Callum Smith
Research Computin

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Yes, in process of trying to fix/identify things - need to undo this.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:48, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

did you add system permissions to the everyone group?

On Mon, Jun 11, 2018 at 6:42 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Happy for you to link me a guide, googlefu is failing me.

How do i get around this "It's not allowed to remove system permissions 
assigned to built-in Everyone group" - to remove permissions erroneously added.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:38, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

You can create a profile that has the proper permissions to allow what you are 
looking for, and then assign that profile to the groups you wish.
I wrote a post on this quite a while back on how to setup oVirt to appear to be 
multi-tenant.

Happy to see you don't have an ldap issue :)

>This will be a problem for us to now create group permissions for all 100+ 
>groups since Everyone === No-one. -sigh-


On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Ah, this appears to be an issue with the proxy - setting up the spice proxy as 
indicated in the guides is causing this issue, and likely will need support.

https://www.ovirt.org/documentation/admin-guide/chap-Proxies/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:29, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok, the user now logs in! This will be a problem for us to now create group 
permissions for all 100+ groups since Everyone === No-one. -sigh-

A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth 
login prompts, and a "Authorization expired" error, then a page reload. Nothing 
in the logs seem to indicate an issue.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:26, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Try giving your user system permissions as a superuser and see if it goes away.

I wouldn't leave it like that, but it will help isolate your issue. I don't 
think you have an ldap issue... the log entry is telling you that user has no 
permissions
>The user callum@Biomedical Research Computing is not authorized to perform 
>login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:21, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Just a shot in the dark, but after you setup ldap did you go in as the default 
admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regar

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Happy for you to link me a guide, googlefu is failing me.

How do i get around this "It's not allowed to remove system permissions 
assigned to built-in Everyone group" - to remove permissions erroneously added.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:38, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

You can create a profile that has the proper permissions to allow what you are 
looking for, and then assign that profile to the groups you wish.
I wrote a post on this quite a while back on how to setup oVirt to appear to be 
multi-tenant.

Happy to see you don't have an ldap issue :)

>This will be a problem for us to now create group permissions for all 100+ 
>groups since Everyone === No-one. -sigh-


On Mon, Jun 11, 2018 at 6:34 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Ah, this appears to be an issue with the proxy - setting up the spice proxy as 
indicated in the guides is causing this issue, and likely will need support.

https://www.ovirt.org/documentation/admin-guide/chap-Proxies/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:29, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok, the user now logs in! This will be a problem for us to now create group 
permissions for all 100+ groups since Everyone === No-one. -sigh-

A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth 
login prompts, and a "Authorization expired" error, then a page reload. Nothing 
in the logs seem to indicate an issue.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:26, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Try giving your user system permissions as a superuser and see if it goes away.

I wouldn't leave it like that, but it will help isolate your issue. I don't 
think you have an ldap issue... the log entry is telling you that user has no 
permissions
>The user callum@Biomedical Research Computing is not authorized to perform 
>login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:21, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Just a shot in the dark, but after you setup ldap did you go in as the default 
admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human G

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Ah, this appears to be an issue with the proxy - setting up the spice proxy as 
indicated in the guides is causing this issue, and likely will need support.

https://www.ovirt.org/documentation/admin-guide/chap-Proxies/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk

On 11 Jun 2018, at 11:29, Callum Smith  wrote:

Ok, the user now logs in! This will be a problem for us to now create group 
permissions for all 100+ groups since Everyone === No-one. -sigh-

A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth 
login prompts, and a "Authorization expired" error, then a page reload. Nothing 
in the logs seem to indicate an issue.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:26, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Try giving your user system permissions as a superuser and see if it goes away.

I wouldn't leave it like that, but it will help isolate your issue. I don't 
think you have an ldap issue... the log entry is telling you that user has no 
permissions
>The user callum@Biomedical Research Computing is not authorized to perform 
>login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:21, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Just a shot in the dark, but after you setup ldap did you go in as the default 
admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.descripti

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Ok, the user now logs in! This will be a problem for us to now create group 
permissions for all 100+ groups since Everyone === No-one. -sigh-

A new issue, when in the VM portal as the LDAP user, i get HTTP basic auth 
login prompts, and a "Authorization expired" error, then a page reload. Nothing 
in the logs seem to indicate an issue.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:26, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Try giving your user system permissions as a superuser and see if it goes away.

I wouldn't leave it like that, but it will help isolate your issue. I don't 
think you have an ldap issue... the log entry is telling you that user has no 
permissions
>The user callum@Biomedical Research Computing is not authorized to perform 
>login

On Mon, Jun 11, 2018 at 6:23 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:21, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Just a shot in the dark, but after you setup ldap did you go in as the default 
admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name<http://sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name/>
 = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Dear Donny,

No, though the user shows the permissions inherited from the Everyone group:
[cid:3C4DA68E-6FBF-4D50-AA88-9E063CFBED6C@well.ox.ac.uk]
Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 11:21, Donny Davis 
mailto:do...@fortnebula.com>> wrote:

Just a shot in the dark, but after you setup ldap did you go in as the default 
admin and give an ldap account permissions?

On Mon, Jun 11, 2018 at 6:04 AM, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name<http://sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name/>
 = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record
sequence.bmrc-resolve-groups.030.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name<http://sequence.bmrc-resolve-groups.030.fetch-record.map.gidnumber.name/>
 = _rfc2307_gid
sequence.bmrc-resolve-groups.040.description = query groups
sequence.bmrc-resolve-groups.040.type = search-open
sequence.bmrc-resolve-groups.040.search-open.search = 
rfc2307-resolve-groups-memberUid
sequence.bmrc-resolve-groups.040.search-open.variable = queryRFC2307ByMemberUid

sequence.rfc2307-resolve-groups.020.call.name<http://sequence.rfc2307-resolve-groups.020.call.name/>
 = bmrc-resolve-groups


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 4 Jun 2018, at 15:07, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra,

I went for openldap-rfc2307 as that best desc

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
Dear All,

Could this be as our LDAP is fairly short on attributes?

2018-06-11 11:00:52,856+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-5) 
[5dff9eb0] Running command: CreateUserSessionCommand internal: false.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-5) [5dff9eb0] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User callum@Biomedical 
Research Computing connecting from '--ipaddr--' failed to log in.
2018-06-11 11:00:52,884+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-5) [] The 
user callum@Biomedical Research Computing is not authorized to perform login

I note that a number of variables are included in this action, but which are 
required and which are optional is the question:

https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules/aaa/src/main/java/org/ovirt/engine/core/aaa/servlet/SsoPostLoginServlet.java#L88

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 11 Jun 2018, at 09:35, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record
sequence.bmrc-resolve-groups.030.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name = _rfc2307_gid
sequence.bmrc-resolve-groups.040.description = query groups
sequence.bmrc-resolve-groups.040.type = search-open
sequence.bmrc-resolve-groups.040.search-open.search = 
rfc2307-resolve-groups-memberUid
sequence.bmrc-resolve-groups.040.search-open.variable = queryRFC2307ByMemberUid

sequence.rfc2307-resolve-groups.020.call.name = bmrc-resolve-groups


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 4 Jun 2018, at 15:07, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra,

I went for openldap-rfc2307 as that best describes our ldap setup. The issue 
seems to be that the gidNumber is set, but users are not a member of their 
primary group within the LDAP. So, user's gidNumber represents primary group 
and posixGroup membership (memberUid) represents their secondary groups. What's 
the best way to approach this (fix the filters on oVirt end or change the LDAP? 
This is a question of what is most compliant with standards really).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 May 2018, at 11:29, Ondra Machacek 
mailto:omach...@redhat.com>> wrote:

What's you LDAP and what profile did you choose? This looks like you have 
chosen incorect profile during setup. Are you sure you arent using posix group 
and using n

[ovirt-users] Re: LDAP Authentication issues

2018-06-11 Thread Callum Smith
What would be the next step to help solve this issue? All users authenticating 
through LDAP get "This user is not authorised to perform authentication".

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 11:42, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record
sequence.bmrc-resolve-groups.030.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name = _rfc2307_gid
sequence.bmrc-resolve-groups.040.description = query groups
sequence.bmrc-resolve-groups.040.type = search-open
sequence.bmrc-resolve-groups.040.search-open.search = 
rfc2307-resolve-groups-memberUid
sequence.bmrc-resolve-groups.040.search-open.variable = queryRFC2307ByMemberUid

sequence.rfc2307-resolve-groups.020.call.name = bmrc-resolve-groups


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 4 Jun 2018, at 15:07, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra,

I went for openldap-rfc2307 as that best describes our ldap setup. The issue 
seems to be that the gidNumber is set, but users are not a member of their 
primary group within the LDAP. So, user's gidNumber represents primary group 
and posixGroup membership (memberUid) represents their secondary groups. What's 
the best way to approach this (fix the filters on oVirt end or change the LDAP? 
This is a question of what is most compliant with standards really).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 May 2018, at 11:29, Ondra Machacek 
mailto:omach...@redhat.com>> wrote:

What's you LDAP and what profile did you choose? This looks like you have 
chosen incorect profile during setup. Are you sure you arent using posix group 
and using non-posix aaa profile? Sharing a debug log of 
ovirt-engine-extensions-tool would be helpfull.


On Fri, May 25, 2018, 10:04 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

I'm having problems getting LDAP running, login works, but I'm getting "user is 
not authorised to perform login" - this is even if i specify the UserRole 
specifically to the LDAP group the user is in.

2018-05-25 08:56:16,212+01 INFO  
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-23) [] User 
callum@Biomedical Research Computing successfully logged in with scopes: 
ovirt-app-admin ovirt-app-api ovirt-app-portal 
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all 
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search 
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-05-25 08:56:16,391+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-25) 
[63e60fe9] Running command: CreateUserSessionCommand internal: false.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-25) [63e60fe9] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
callum@Biomedical Research Computing connec

[ovirt-users] Re: LDAP Authentication issues

2018-06-05 Thread Callum Smith
Ok I spoke too soon, I have resolved the groups, but authentication still isn't 
working for LDAP users, same error as before (114).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 5 Jun 2018, at 10:14, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record
sequence.bmrc-resolve-groups.030.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name = _rfc2307_gid
sequence.bmrc-resolve-groups.040.description = query groups
sequence.bmrc-resolve-groups.040.type = search-open
sequence.bmrc-resolve-groups.040.search-open.search = 
rfc2307-resolve-groups-memberUid
sequence.bmrc-resolve-groups.040.search-open.variable = queryRFC2307ByMemberUid

sequence.rfc2307-resolve-groups.020.call.name = bmrc-resolve-groups


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 4 Jun 2018, at 15:07, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra,

I went for openldap-rfc2307 as that best describes our ldap setup. The issue 
seems to be that the gidNumber is set, but users are not a member of their 
primary group within the LDAP. So, user's gidNumber represents primary group 
and posixGroup membership (memberUid) represents their secondary groups. What's 
the best way to approach this (fix the filters on oVirt end or change the LDAP? 
This is a question of what is most compliant with standards really).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 May 2018, at 11:29, Ondra Machacek 
mailto:omach...@redhat.com>> wrote:

What's you LDAP and what profile did you choose? This looks like you have 
chosen incorect profile during setup. Are you sure you arent using posix group 
and using non-posix aaa profile? Sharing a debug log of 
ovirt-engine-extensions-tool would be helpfull.


On Fri, May 25, 2018, 10:04 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

I'm having problems getting LDAP running, login works, but I'm getting "user is 
not authorised to perform login" - this is even if i specify the UserRole 
specifically to the LDAP group the user is in.

2018-05-25 08:56:16,212+01 INFO  
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-23) [] User 
callum@Biomedical Research Computing successfully logged in with scopes: 
ovirt-app-admin ovirt-app-api ovirt-app-portal 
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all 
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search 
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-05-25 08:56:16,391+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-25) 
[63e60fe9] Running command: CreateUserSessionCommand internal: false.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-25) [63e60fe9] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
callum@Biomedical Research Computing connecting from '192.168.65.254' failed to 
log in.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-25) [] 
The user callum@Biomedical Research Computing is not authorized to perform login


on a side note: is it possible to assign permissions to all members of an LDAP 
tree where they dont have a common group membership?

Regards,
Callum

--

Callum Smith
Research Computing 

[ovirt-users] Re: LDAP Authentication issues

2018-06-05 Thread Callum Smith
Dear Ondra, all,

Managed to solve this once i got my head around the properties file. 
Conceptually the problem is that users are typically not a member of their 
primary group in a POSIX scenario, and their primary group is set by the 
gidNumber of the user's record, with additional group memberships specified by 
memberUid entries against a posixGroup entry.

search.rfc2307-resolve-groups-memberUid.search-request.filter = 
&(objectClass=posixGroup)(|(memberUid=${seq:_rfc2307_uid_encoded})(gidNumber=${seq:_rfc2307_gid_encoded}))

search.rfc2307-resolve-principal-uid.search-request.attributes = uid, gidNumber

sequence.bmrc-resolve-groups.010.description = set dn
sequence.bmrc-resolve-groups.010.type = var-set
sequence.bmrc-resolve-groups.010.var-set.variable = _rfc2307_dn
sequence.bmrc-resolve-groups.010.var-set.value = ${seq:dn}
sequence.bmrc-resolve-groups.010.description = resolve uid
sequence.bmrc-resolve-groups.020.type = fetch-record
sequence.bmrc-resolve-groups.020.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.020.fetch-record.map.uid.name = _rfc2307_uid
sequence.bmrc-resolve-groups.030.description = resolve gid
sequence.bmrc-resolve-groups.030.type = fetch-record
sequence.bmrc-resolve-groups.030.fetch-record.search = 
rfc2307-resolve-principal-uid
sequence.bmrc-resolve-groups.030.fetch-record.map.gidNumber.name = _rfc2307_gid
sequence.bmrc-resolve-groups.040.description = query groups
sequence.bmrc-resolve-groups.040.type = search-open
sequence.bmrc-resolve-groups.040.search-open.search = 
rfc2307-resolve-groups-memberUid
sequence.bmrc-resolve-groups.040.search-open.variable = queryRFC2307ByMemberUid

sequence.rfc2307-resolve-groups.020.call.name = bmrc-resolve-groups


Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 4 Jun 2018, at 15:07, Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:

Dear Ondra,

I went for openldap-rfc2307 as that best describes our ldap setup. The issue 
seems to be that the gidNumber is set, but users are not a member of their 
primary group within the LDAP. So, user's gidNumber represents primary group 
and posixGroup membership (memberUid) represents their secondary groups. What's 
the best way to approach this (fix the filters on oVirt end or change the LDAP? 
This is a question of what is most compliant with standards really).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 May 2018, at 11:29, Ondra Machacek 
mailto:omach...@redhat.com>> wrote:

What's you LDAP and what profile did you choose? This looks like you have 
chosen incorect profile during setup. Are you sure you arent using posix group 
and using non-posix aaa profile? Sharing a debug log of 
ovirt-engine-extensions-tool would be helpfull.


On Fri, May 25, 2018, 10:04 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

I'm having problems getting LDAP running, login works, but I'm getting "user is 
not authorised to perform login" - this is even if i specify the UserRole 
specifically to the LDAP group the user is in.

2018-05-25 08:56:16,212+01 INFO  
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-23) [] User 
callum@Biomedical Research Computing successfully logged in with scopes: 
ovirt-app-admin ovirt-app-api ovirt-app-portal 
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all 
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search 
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-05-25 08:56:16,391+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-25) 
[63e60fe9] Running command: CreateUserSessionCommand internal: false.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-25) [63e60fe9] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
callum@Biomedical Research Computing connecting from '192.168.65.254' failed to 
log in.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-25) [] 
The user callum@Biomedical Research Computing is not authorized to perform login


on a side note: is it possible to assign permissions to all members of an LDAP 
tree where they dont have a common group membership?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

___
Users mailing 

[ovirt-users] Re: LDAP Authentication issues

2018-06-04 Thread Callum Smith
Dear Ondra,

I went for openldap-rfc2307 as that best describes our ldap setup. The issue 
seems to be that the gidNumber is set, but users are not a member of their 
primary group within the LDAP. So, user's gidNumber represents primary group 
and posixGroup membership (memberUid) represents their secondary groups. What's 
the best way to approach this (fix the filters on oVirt end or change the LDAP? 
This is a question of what is most compliant with standards really).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 29 May 2018, at 11:29, Ondra Machacek 
mailto:omach...@redhat.com>> wrote:

What's you LDAP and what profile did you choose? This looks like you have 
chosen incorect profile during setup. Are you sure you arent using posix group 
and using non-posix aaa profile? Sharing a debug log of 
ovirt-engine-extensions-tool would be helpfull.


On Fri, May 25, 2018, 10:04 AM Callum Smith 
mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

I'm having problems getting LDAP running, login works, but I'm getting "user is 
not authorised to perform login" - this is even if i specify the UserRole 
specifically to the LDAP group the user is in.

2018-05-25 08:56:16,212+01 INFO  
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-23) [] User 
callum@Biomedical Research Computing successfully logged in with scopes: 
ovirt-app-admin ovirt-app-api ovirt-app-portal 
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all 
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search 
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-05-25 08:56:16,391+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-25) 
[63e60fe9] Running command: CreateUserSessionCommand internal: false.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-25) [63e60fe9] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
callum@Biomedical Research Computing connecting from '192.168.65.254' failed to 
log in.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-25) [] 
The user callum@Biomedical Research Computing is not authorized to perform login


on a side note: is it possible to assign permissions to all members of an LDAP 
tree where they dont have a common group membership?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NAEUHLW3YMYAP6L44RRS5MCLRU2OTXPZ/


[ovirt-users] LDAP Authentication issues

2018-05-25 Thread Callum Smith
Dear All,

I'm having problems getting LDAP running, login works, but I'm getting "user is 
not authorised to perform login" - this is even if i specify the UserRole 
specifically to the LDAP group the user is in.

2018-05-25 08:56:16,212+01 INFO  
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-23) [] User 
callum@Biomedical Research Computing successfully logged in with scopes: 
ovirt-app-admin ovirt-app-api ovirt-app-portal 
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all 
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search 
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-05-25 08:56:16,391+01 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-25) 
[63e60fe9] Running command: CreateUserSessionCommand internal: false.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-25) [63e60fe9] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
callum@Biomedical Research Computing connecting from '192.168.65.254' failed to 
log in.
2018-05-25 08:56:16,430+01 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-25) [] 
The user callum@Biomedical Research Computing is not authorized to perform login


on a side note: is it possible to assign permissions to all members of an LDAP 
tree where they dont have a common group membership?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU VM not starting

2018-05-21 Thread Callum Smith
Dear Ales,

4.2.3,5-1

Through extensive testing done with the help of Martin Polednik the issues with 
the vGPU startup appear to be within the nvidia drivers, so continuation of 
that issue is now going through nvidia.

The issue with the nics MTU appears to have gone away with the upgrade of host 
to the version above.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 21 May 2018, at 13:23, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Mon, May 21, 2018 at 1:15 PM, Francesco Romani 
<from...@redhat.com<mailto:from...@redhat.com>> wrote:

On 05/17/2018 12:01 AM, Callum Smith wrote:
> Dear All,
>
> Our vGPU installation is progressing, though the VM is failing to start.
>
> 2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm]
> (vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process
> failed (vm:943)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872,
> in _startUnderlyingVm
> self._run()
>   File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872,
> in _run
> dom.createWithFlags(flags)
>   File
> "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py",
> line 130, in wrapper
> ret = f(*args, **kwargs)
>   File "/usr/lib/python2.7/site-packages/vdsm/common/function.py",
> line 92, in wrapper
> return func(inst, *args, **kwargs)
>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in
> createWithFlags
> if ret == -1: raise libvirtError ('virDomainCreateWithFlags()
> failed', dom=self)
> libvirtError: Cannot get interface MTU on '': No such device

This is another bug, related to
https://bugzilla.redhat.com/show_bug.cgi?id=1561010.
The proper fix is on Engine side, even though we can fix it on Vdsm side too

Bests,

--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh
___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

Dear Callum,

can you send us also the engine.log? And which version of the engine are you 
using?

Regards,
Ales.

--
ALES MUSIL
INTERN - rhv network
Red Hat EMEA<https://www.redhat.com/>


amu...@redhat.com<mailto:amu...@redhat.com>   IM: amusil

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>
___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU VM not starting

2018-05-21 Thread Callum Smith
Dear All,

I'm still having the same problems, is this a bug or something that's 
configured incorrectly?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 May 2018, at 13:22, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

Yep, creating the mdev manually works, and in fact like I said previously, the 
VM does actually create an mdev successfully as you can see the UUID of the 
device (and is correctly identifiable though the 
/sys/class/mdev_bus/${DEVICE_ADDR}/${UUID}/mdev_type/name

In this specific case to help with the logs, the uuid generated is consistently 
the similar (even after manual deletion) of 
"f5dc8396-dad5-3893-9eb4-94eedf60a881"

The VM then fails to start because of the MTU issue. Restarting the VM on the 
node then produces the issue of the device not being available (because the 
device with the previous uuid exists and it's of max_instance=1). So it's the 
first VM start with the MTU issue that needs resolving, with the added 
complication that the issue of MTU (network) is caused by the mdev being set. 
The same error does not happen when mdev is not set.

PS. In fact this was the guide i followed, so thank you Martin for writing it, 
without it getting this far would have been very difficult:
https://mpolednik.github.io/2017/09/13/vgpu-in-ovirt/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 May 2018, at 13:05, Martin Polednik 
<mpoled...@redhat.com<mailto:mpoled...@redhat.com>> wrote:

On 18/05/18 13:42 +0200, Francesco Romani wrote:
Hi,


On 05/17/2018 10:56 AM, Callum Smith wrote:
In an attempt not to mislead you guys as well, there appears to be a
separate, vGPU specific, issue.

https://www.dropbox.com/s/hlymmf9d6rn12tq/vdsm.vgpu.log?dl=0

I've uploaded the full vdsm.log to dropbox. Most recently I tried
unmounting alll network devices from the VM and booting it and i get a
different issue around the vGPU:

2018-05-17 09:48:24,806+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_hos
tedengine: rc=0 err= (hooks:110)
2018-05-17 09:48:24,953+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_vfi
o_mdev: rc=1 err=vgpu: No device with type nvidia-61 is available.
 (hooks:110)
2018-05-17 09:48:25,069+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_vho
stmd: rc=0 err= (hooks:110)
2018-05-17 09:48:25,070+0100 ERROR (vm/1bc9dae8) [virt.vm]
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0
') The vm start process failed (vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872,
in _startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2862,
in _run
self._custom)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line
153, in before_vm_start
return _runHooksDir(domxml, 'before_vm_start', vmconf=vmconf)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line
120, in _runHooksDir
raise exception.HookError(err)
HookError: Hook Error: ('',)

Despite the nvidia-61 being an option on the
GPU: https://pastebin.com/bucw21DG

Let's tackle one issue at time :)
>From the shared logs, the VM start failed because of

2018-05-17 10:11:12,681+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_hostedengine: rc=0 err= (hooks:110)
2018-05-17 10:11:12,837+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vfio_mdev: rc=1 err=vgpu: No device 
with type nvidia-53 is available.

maybe Martin can shed some light here?

Given that the actual slice is available in sysfs (as indicated by one
of the other branches of this thread), I fear we may be facing some
weird issue with the driver itself.
Can you create the mdev manually?

$ uuidgen >
/sys/class/mdev_bus/${DEVICE_ADDR}/mdev_supported_types/nvidia-61

should be enough for a test.

Callum, please share Vdsm logs showing the network failure


Bests,

--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU VM not starting

2018-05-18 Thread Callum Smith
Yep, creating the mdev manually works, and in fact like I said previously, the 
VM does actually create an mdev successfully as you can see the UUID of the 
device (and is correctly identifiable though the 
/sys/class/mdev_bus/${DEVICE_ADDR}/${UUID}/mdev_type/name

In this specific case to help with the logs, the uuid generated is consistently 
the similar (even after manual deletion) of 
"f5dc8396-dad5-3893-9eb4-94eedf60a881"

The VM then fails to start because of the MTU issue. Restarting the VM on the 
node then produces the issue of the device not being available (because the 
device with the previous uuid exists and it's of max_instance=1). So it's the 
first VM start with the MTU issue that needs resolving, with the added 
complication that the issue of MTU (network) is caused by the mdev being set. 
The same error does not happen when mdev is not set.

PS. In fact this was the guide i followed, so thank you Martin for writing it, 
without it getting this far would have been very difficult:
https://mpolednik.github.io/2017/09/13/vgpu-in-ovirt/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 18 May 2018, at 13:05, Martin Polednik 
<mpoled...@redhat.com<mailto:mpoled...@redhat.com>> wrote:

On 18/05/18 13:42 +0200, Francesco Romani wrote:
Hi,


On 05/17/2018 10:56 AM, Callum Smith wrote:
In an attempt not to mislead you guys as well, there appears to be a
separate, vGPU specific, issue.

https://www.dropbox.com/s/hlymmf9d6rn12tq/vdsm.vgpu.log?dl=0

I've uploaded the full vdsm.log to dropbox. Most recently I tried
unmounting alll network devices from the VM and booting it and i get a
different issue around the vGPU:

2018-05-17 09:48:24,806+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_hos
tedengine: rc=0 err= (hooks:110)
2018-05-17 09:48:24,953+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_vfi
o_mdev: rc=1 err=vgpu: No device with type nvidia-61 is available.
 (hooks:110)
2018-05-17 09:48:25,069+0100 INFO  (vm/1bc9dae8) [root]
/usr/libexec/vdsm/hooks/before_vm_start/50_vho
stmd: rc=0 err= (hooks:110)
2018-05-17 09:48:25,070+0100 ERROR (vm/1bc9dae8) [virt.vm]
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0
') The vm start process failed (vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872,
in _startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2862,
in _run
self._custom)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line
153, in before_vm_start
return _runHooksDir(domxml, 'before_vm_start', vmconf=vmconf)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line
120, in _runHooksDir
raise exception.HookError(err)
HookError: Hook Error: ('',)

Despite the nvidia-61 being an option on the
GPU: https://pastebin.com/bucw21DG

Let's tackle one issue at time :)
>From the shared logs, the VM start failed because of

2018-05-17 10:11:12,681+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_hostedengine: rc=0 err= (hooks:110)
2018-05-17 10:11:12,837+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vfio_mdev: rc=1 err=vgpu: No device 
with type nvidia-53 is available.

maybe Martin can shed some light here?

Given that the actual slice is available in sysfs (as indicated by one
of the other branches of this thread), I fear we may be facing some
weird issue with the driver itself.
Can you create the mdev manually?

$ uuidgen >
/sys/class/mdev_bus/${DEVICE_ADDR}/mdev_supported_types/nvidia-61

should be enough for a test.

Callum, please share Vdsm logs showing the network failure


Bests,

--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU VM not starting

2018-05-17 Thread Callum Smith
Dear All,

Similar issues with a clean install

https://www.dropbox.com/s/jf9pwapohn5dq5p/vdsm.gpu2.log?dl=0

Above is the dropbox of the log of the clean install. This VM has a custom 
"mdev_type" of "nvidia-53" which relates to a specific GRID P40-24Q instance. 
Even looking in /sys/class/mdev_bus/*/ you see that there has been correctly a 
vGPU slice created as part of the boot of the machine, but still you get this 
error:

2018-05-17 14:19:42,757+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vfio_mdev: rc=1 err=vgpu: No device 
with type nvidia-53 is available.
 (hooks:110)
2018-05-17 14:19:42,873+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vhostmd: rc=0 err= (hooks:110)
2018-05-17 14:19:42,874+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)

Thanks all for your input.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 14:05, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

Dear Yaniv,

Please see my most recent response:
https://www.dropbox.com/s/hlymmf9d6rn12tq/vdsm.vgpu.log?dl=0

I'm doing a clean install of the host right now to see if doing the exact same 
procedure a second time produces different results (this way lies madness, but 
we have excited bosses about vGPUs on oVirt).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 14:02, Yaniv Kaul 
<yk...@redhat.com<mailto:yk...@redhat.com>> wrote:

It'd be easier if you could share the complete vdsm log.
Perhaps file a bug and we can investigate it?
Y.

On Thu, May 17, 2018 at 11:25 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Some information that appears to be from around the time of installation to the 
cluster:

WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -X 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -F 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -L 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -D POSTROUTING 
-o vnet0 -j libvirt-O-vnet0' failed: Illegal target name 'libvirt-O-vnet0'.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:20, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

PS. some other WARN's that come up on the host:

WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.org.qemu.guest_agent.0
 already removed
vdsm
WARN Attempting to remove a non existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN Attempting to remove a non existing network: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.ovirt-guest-agent.0
 already removed
vdsm
WARN Attempting to add an existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:16, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our v

[ovirt-users] Re: vGPU VM not starting

2018-05-17 Thread Callum Smith
Dear Yaniv,

Please see my most recent response:
https://www.dropbox.com/s/hlymmf9d6rn12tq/vdsm.vgpu.log?dl=0

I'm doing a clean install of the host right now to see if doing the exact same 
procedure a second time produces different results (this way lies madness, but 
we have excited bosses about vGPUs on oVirt).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 14:02, Yaniv Kaul 
<yk...@redhat.com<mailto:yk...@redhat.com>> wrote:

It'd be easier if you could share the complete vdsm log.
Perhaps file a bug and we can investigate it?
Y.

On Thu, May 17, 2018 at 11:25 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Some information that appears to be from around the time of installation to the 
cluster:

WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -X 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -F 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -L 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -D POSTROUTING 
-o vnet0 -j libvirt-O-vnet0' failed: Illegal target name 'libvirt-O-vnet0'.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:20, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

PS. some other WARN's that come up on the host:

WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.org.qemu.guest_agent.0
 already removed
vdsm
WARN Attempting to remove a non existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN Attempting to remove a non existing network: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.ovirt-guest-agent.0
 already removed
vdsm
WARN Attempting to add an existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:16, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
su

[ovirt-users] Re: vGPU VM not starting

2018-05-17 Thread Callum Smith
In an attempt not to mislead you guys as well, there appears to be a separate, 
vGPU specific, issue.

https://www.dropbox.com/s/hlymmf9d6rn12tq/vdsm.vgpu.log?dl=0

I've uploaded the full vdsm.log to dropbox. Most recently I tried unmounting 
alll network devices from the VM and booting it and i get a different issue 
around the vGPU:

2018-05-17 09:48:24,806+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_hos
tedengine: rc=0 err= (hooks:110)
2018-05-17 09:48:24,953+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vfi
o_mdev: rc=1 err=vgpu: No device with type nvidia-61 is available.
 (hooks:110)
2018-05-17 09:48:25,069+0100 INFO  (vm/1bc9dae8) [root] 
/usr/libexec/vdsm/hooks/before_vm_start/50_vho
stmd: rc=0 err= (hooks:110)
2018-05-17 09:48:25,070+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0
') The vm start process failed (vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2862, in _run
self._custom)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line 153, in 
before_vm_start
return _runHooksDir(domxml, 'before_vm_start', vmconf=vmconf)
  File "/usr/lib/python2.7/site-packages/vdsm/common/hooks.py", line 120, in 
_runHooksDir
raise exception.HookError(err)
HookError: Hook Error: ('',)

Despite the nvidia-61 being an option on the GPU: https://pastebin.com/bucw21DG

So I think we have two issues here, one relating to the network and one to GPU.

Thanks all for your rapid and very useful help!

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:28, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:

Seems like some vdsm problem with xml generation.

+Francesco

On Thu, May 17, 2018 at 10:20 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
PS. some other WARN's that come up on the host:

WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.org.qemu.guest_agent.0
 already removed
vdsm
WARN Attempting to remove a non existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN Attempting to remove a non existing network: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.ovirt-guest-agent.0
 already removed
vdsm
WARN Attempting to add an existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:16, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
succeed in going up with this error. Any other logs or information relevant to 
help diagnose?

Reg

[ovirt-users] Re: vGPU VM not starting

2018-05-17 Thread Callum Smith
Some information that appears to be from around the time of installation to the 
cluster:

WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -X 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -F 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -L 
libvirt-O-vnet0' failed: Chain 'libvirt-O-vnet0' doesn't exist.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ebtables --concurrent -t nat -D POSTROUTING 
-o vnet0 -j libvirt-O-vnet0' failed: Illegal target name 'libvirt-O-vnet0'.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F HI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -X FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld
WARNING: COMMAND_FAILED: '/usr/sbin/ip6tables -w2 -w -F FI-vnet0' failed: 
ip6tables: No chain/target/match by that name.
firewalld

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:20, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

PS. some other WARN's that come up on the host:

WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.org.qemu.guest_agent.0
 already removed
vdsm
WARN Attempting to remove a non existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN Attempting to remove a non existing network: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.ovirt-guest-agent.0
 already removed
vdsm
WARN Attempting to add an existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:16, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
succeed in going up with this error. Any other logs or information relevant to 
help diagnose?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>


Hi Callum,

can you share your version of the setup?

Also do you use OVS switch type in the cluster?

Regards,
Ales.


--
ALES MUSIL
INTERN - rhv network
Red Hat EMEA<https://www.redhat.com/>


amu...@redhat.com<mailto:amu...@redhat.com>   IM: amusil

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig&g

[ovirt-users] Re: vGPU VM not starting

2018-05-17 Thread Callum Smith
PS. some other WARN's that come up on the host:

WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.org.qemu.guest_agent.0
 already removed
vdsm
WARN Attempting to remove a non existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN Attempting to remove a non existing network: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm
WARN File: 
/var/lib/libvirt/qemu/channels/1bc9dae8-a0ea-44b3-9103-5805100648d0.ovirt-guest-agent.0
 already removed
vdsm
WARN Attempting to add an existing net user: 
ovirtmgmt/1bc9dae8-a0ea-44b3-9103-5805100648d0
vdsm

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 09:16, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:

OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
succeed in going up with this error. Any other logs or information relevant to 
help diagnose?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>


Hi Callum,

can you share your version of the setup?

Also do you use OVS switch type in the cluster?

Regards,
Ales.


--
ALES MUSIL
INTERN - rhv network
Red Hat EMEA<https://www.redhat.com/>


amu...@redhat.com<mailto:amu...@redhat.com>   IM: amusil

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Fwd: vGPU VM not starting

2018-05-17 Thread Callum Smith
OVN Network provider is used, and the node is running 4.2.3 (specifically 
2018051606 clean install last night).

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 17 May 2018, at 07:47, Ales Musil 
<amu...@redhat.com<mailto:amu...@redhat.com>> wrote:



On Thu, May 17, 2018 at 12:01 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
succeed in going up with this error. Any other logs or information relevant to 
help diagnose?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>


Hi Callum,

can you share your version of the setup?

Also do you use OVS switch type in the cluster?

Regards,
Ales.


--
ALES MUSIL
INTERN - rhv network
Red Hat EMEA<https://www.redhat.com/>


amu...@redhat.com<mailto:amu...@redhat.com>   IM: amusil

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>

___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] vGPU VM not starting

2018-05-16 Thread Callum Smith
Dear All,

Our vGPU installation is progressing, though the VM is failing to start.

2018-05-16 22:57:34,328+0100 ERROR (vm/1bc9dae8) [virt.vm] 
(vmId='1bc9dae8-a0ea-44b3-9103-5805100648d0') The vm start process failed 
(vm:943)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 872, in 
_startUnderlyingVm
self._run()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 2872, in _run
dom.createWithFlags(flags)
  File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", 
line 130, in wrapper
ret = f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in 
wrapper
return func(inst, *args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1099, in 
createWithFlags
if ret == -1: raise libvirtError ('virDomainCreateWithFlags() failed', 
dom=self)
libvirtError: Cannot get interface MTU on '': No such device

That's the specific error, some other information. It seems the GPU 
'allocation' of uuid against the nvidia-xx mdev type is proceeding correctly, 
and the device is being created by the VM instantiation but the VM does not 
succeed in going up with this error. Any other logs or information relevant to 
help diagnose?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU setup guide

2018-05-15 Thread Callum Smith
OK I guess it was literally just a breath away:
https://blogs.nvidia.com/blog/2018/05/15/red-hat-virtualization-vgpu-support/

So based on it now being actually supported, is this guide still relevant?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 14 May 2018, at 21:48, Don Dupuis 
<donds...@gmail.com<mailto:donds...@gmail.com>> wrote:

No, if you look at support matrix, there is no rhev/ovirt. RHEL KVM only 
supports pass through, not vGPU!! That driver only support 1 to 1 pass through, 
no vGPU profiles. I hope it get released soon as when RHEV 4.2 gets released.

Don

On Mon, May 14, 2018 at 3:33 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
That should be fine then, because they have done, right?

https://docs.nvidia.com/grid/6.0/product-support-matrix/

And inside my product manager for NVIDIA i can download "NVIDIA vGPU for RHEL 
KVM" which comes with the hypervisor driver.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

> On 14 May 2018, at 21:19, Don Dupuis 
> <donds...@gmail.com<mailto:donds...@gmail.com>> wrote:
>
> Nvidia vGPU support won't work until Nvidia releases hypervisor drivers for 
> RHEV/oVirt.
>
> Don
>
> On Mon, May 14, 2018 at 3:08 PM, Callum Smith 
> <cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
> Dear All,
>
> IS this the most current and useful example of implenting vGPUs in oVirt? I 
> had understood that 4.2 had NVIDIA GRID support as a flagship feature, but 
> this appears to be 4.1.4? It seems a very reasonable and decent guide, just 
> don't want to go down this route if there's alternatives now available in 
> 4.2.x.
>
> https://mpolednik.github.io/2017/09/13/vgpu-in-ovirt/
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>
>
>
> ___
> Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
> To unsubscribe send an email to 
> users-le...@ovirt.org<mailto:users-le...@ovirt.org>
>
>



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: vGPU setup guide

2018-05-14 Thread Callum Smith
That should be fine then, because they have done, right?

https://docs.nvidia.com/grid/6.0/product-support-matrix/

And inside my product manager for NVIDIA i can download "NVIDIA vGPU for RHEL 
KVM" which comes with the hypervisor driver.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk

> On 14 May 2018, at 21:19, Don Dupuis <donds...@gmail.com> wrote:
> 
> Nvidia vGPU support won't work until Nvidia releases hypervisor drivers for 
> RHEV/oVirt.
> 
> Don
> 
> On Mon, May 14, 2018 at 3:08 PM, Callum Smith <cal...@well.ox.ac.uk> wrote:
> Dear All,
> 
> IS this the most current and useful example of implenting vGPUs in oVirt? I 
> had understood that 4.2 had NVIDIA GRID support as a flagship feature, but 
> this appears to be 4.1.4? It seems a very reasonable and decent guide, just 
> don't want to go down this route if there's alternatives now available in 
> 4.2.x.
> 
> https://mpolednik.github.io/2017/09/13/vgpu-in-ovirt/
> 
> Regards,
> Callum
> 
> --
> 
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
> 
> 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> 
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] vGPU setup guide

2018-05-14 Thread Callum Smith
Dear All,

IS this the most current and useful example of implenting vGPUs in oVirt? I had 
understood that 4.2 had NVIDIA GRID support as a flagship feature, but this 
appears to be 4.1.4? It seems a very reasonable and decent guide, just don't 
want to go down this route if there's alternatives now available in 4.2.x.

https://mpolednik.github.io/2017/09/13/vgpu-in-ovirt/

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Host install failed - cannot set maintenance or remove

2018-05-13 Thread Callum Smith
Sorry this is the existing discussion, duplicated because of the mail list 
migration.

Cheers,

Callum

On 13 May 2018, at 13:06, Michael Burman 
<mbur...@redhat.com<mailto:mbur...@redhat.com>> wrote:

Adding Alona,

On Tue, May 8, 2018 at 12:25 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

There appears to be an issue with the host install on these, there's quite a 
lot of errors being kicked out into the logs as they cycle through attempting 
to activate, failing, and then failing to go into maintenance. I can't remove 
the hosts from the engine to attempt to reinstall them.

Issue presented from having a statically configured network on the ovritmgmt 
network on the hosts before running the host install. There are SQL errors (FK 
missing) and assorted goodness in there.

Any help greatly appreciated, not sure what the next step forward is from here

Engine.log on dropbox:
https://www.dropbox.com/s/82iem0ov869yh32/engine.log-20180508.zip?dl=0

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>




--

Michael Burman

Senior Quality engineer - rhv network - redhat israel

Red Hat

<https://www.redhat.com>

mbur...@redhat.com<mailto:mbur...@redhat.com>M: 0545355725  
   IM: mburman

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Host install failed - cannot set maintenance or remove

2018-05-13 Thread Callum Smith
Dear All,

There appears to be an issue with the host install on these, there's quite a 
lot of errors being kicked out into the logs as they cycle through attempting 
to activate, failing, and then failing to go into maintenance. I can't remove 
the hosts from the engine to attempt to reinstall them.

Issue presented from having a statically configured network on the ovritmgmt 
network on the hosts before running the host install. There are SQL errors (FK 
missing) and assorted goodness in there.

Any help greatly appreciated, not sure what the next step forward is from here

Engine.log on dropbox:
https://www.dropbox.com/s/82iem0ov869yh32/engine.log-20180508.zip?dl=0

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Host install failed - cannot set maintenance or remove

2018-05-08 Thread Callum Smith
Dear Michael,

No luck, the cycling is still happening. This is with a hard reset of the 
host-engine vm, the host, updating the node versions on everything.

Would it be really bad to just delete the nodes from the DB and clean install 
them?

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 May 2018, at 13:44, Michael Burman 
<mbur...@redhat.com<mailto:mbur...@redhat.com>> wrote:

You should only remove the required property from the network, this will 
release the host from the activating cycle in which it's stuck now.

On Tue, May 8, 2018 at 3:39 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear Michael,

Good to know - didn't know about that path to configure networks.

What's the procedure to remove the failing hosts and re-install? I can't get 
them into maintenance mode to then install them.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 May 2018, at 12:37, Michael Burman 
<mbur...@redhat.com<mailto:mbur...@redhat.com>> wrote:

Hi Callum
Looks like you hitting  https://bugzilla.redhat.com/show_bug.cgi?id=1570388
Do you have a required network in your env(except ovirtmgmt)? try to uncheck 
the 'required' from this network, this will solve the issue(via 
Clusters>network or Networks>Cluster).
The bug was fixed in ovirt-engine-4.2.3.4

Cheers)

On Tue, May 8, 2018 at 12:55 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

There appears to be an issue with the host install on these, there's quite a 
lot of errors being kicked out into the logs as they cycle through attempting 
to activate, failing, and then failing to go into maintenance. I can't remove 
the hosts from the engine to attempt to reinstall them.

Issue presented from having a statically configured network on the ovritmgmt 
network on the hosts before running the host install. There are SQL errors (FK 
missing) and assorted goodness in there.

Any help greatly appreciated, not sure what the next step forward is from here

Engine.log on dropbox:
https://www.dropbox.com/s/82iem0ov869yh32/engine.log-20180508.zip?dl=0

PS. Sorry if this comes through a few times, mailing list membership seems to 
be having a funny turn this morning.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>




--
Michael Burman

Senior Quality engineer - rhv network - redhat israel

Red Hat

<https://www.redhat.com/>

mbur...@redhat.com<mailto:mbur...@redhat.com>M: 0545355725  
   IM: mburman

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>




--
Michael Burman

Senior Quality engineer - rhv network - redhat israel

Red Hat

<https://www.redhat.com/>

mbur...@redhat.com<mailto:mbur...@redhat.com>M: 0545355725  
   IM: mburman

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Host install failed - cannot set maintenance or remove

2018-05-08 Thread Callum Smith
Dear Michael,

Good to know - didn't know about that path to configure networks.

What's the procedure to remove the failing hosts and re-install? I can't get 
them into maintenance mode to then install them.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 8 May 2018, at 12:37, Michael Burman 
<mbur...@redhat.com<mailto:mbur...@redhat.com>> wrote:

Hi Callum
Looks like you hitting  https://bugzilla.redhat.com/show_bug.cgi?id=1570388
Do you have a required network in your env(except ovirtmgmt)? try to uncheck 
the 'required' from this network, this will solve the issue(via 
Clusters>network or Networks>Cluster).
The bug was fixed in ovirt-engine-4.2.3.4

Cheers)

On Tue, May 8, 2018 at 12:55 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

There appears to be an issue with the host install on these, there's quite a 
lot of errors being kicked out into the logs as they cycle through attempting 
to activate, failing, and then failing to go into maintenance. I can't remove 
the hosts from the engine to attempt to reinstall them.

Issue presented from having a statically configured network on the ovritmgmt 
network on the hosts before running the host install. There are SQL errors (FK 
missing) and assorted goodness in there.

Any help greatly appreciated, not sure what the next step forward is from here

Engine.log on dropbox:
https://www.dropbox.com/s/82iem0ov869yh32/engine.log-20180508.zip?dl=0

PS. Sorry if this comes through a few times, mailing list membership seems to 
be having a funny turn this morning.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>




--
Michael Burman

Senior Quality engineer - rhv network - redhat israel

Red Hat

<https://www.redhat.com/>

mbur...@redhat.com<mailto:mbur...@redhat.com>M: 0545355725  
   IM: mburman

[https://www.redhat.com/files/brand/email/sig-redhat.png]<https://red.ht/sig>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Re: Re-attaching ISOs and moving ISOs storage

2018-05-08 Thread Callum Smith
Dear Fred,

Hosts can indeed access the share, in fact i can manually mount it on the hosts 
and engine.

I've attached the day's logs from when the ISO domain was detached, again 
expect lots of noise.

The time pressure on this issue has gone as we now have a functional fresh 
install on another node, and the ability to export the VMs across using a 
shared export domain.

https://www.dropbox.com/s/rdcyzoef3j3cjgx/engine.log-20180501.gz?dl=0

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 6 May 2018, at 15:38, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

I am trying to reproduce this on my setup, with no success for now.
Can you share the engine log corresponding to the time you tried to detach?

What are the options available currently?
I understand that "Activate" does not work, what about "Detach"?

Can your hosts access the ISO domain?


On Fri, May 4, 2018 at 2:09 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Is there any sensible way to either clean up the existing ISOs storage or 
re-attach it? I'm struggling to even export VMs and migrate them elsewhere with 
this and need to recover them asap.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 15:09, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:


Attached, thank you for looking into this


https://HOSTNAME/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae









VMISOs





11770357874688
false
0
5
false
ok
false

backoffice01.cluster
/vm-iso
nfs

v1
false
false
iso
38654705664
10
false






https://HOSTNAME/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains








tegile-virtman-backup

17519171600384
false
0
5
false
ok
false
maintenance

192.168.64.248
auto
/export/virtman/backup
nfs

v1
false
false
export
8589934592
10
false










VMStorage

11770357874688
false
118111600640
5
false
ok
true
active

backoffice01.cluster
/vm-storage2
nfs

v4
false
false
data
38654705664
10
false










tegile-virtman

2190433320960
false
226559524864
5
false
ok
false
active

192.168.64.248
auto
/export/virtman/VirtualServerShare_1
nfs

v4
false
false
data
8589934592
10
false










VMISOs
11770357874688
false
0
5
false
ok
false
maintenance

backoffice01.cluster
/vm-iso
nfs

v1
false
false
iso
38654705664
10
false
    
    








Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 14:46, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

Can you share the REST API data of the Storage domain and Data Center?
Here an example of the URLs, you will need to replace with correct ids.

http://MY-SERVER/ovirt-engine/api/v4/storagedomains/13461356-f6f7-4a58-9897-2fac61ff40af<http://my-server/ovirt-engine/api/v4/storagedomains/13461356-f6f7-4a58-9897-2fac61ff40af>

http://MY-SERVER/ovirt-engine/api/v4/datacenters/5a5df553-022d-036d-01e8-0071/storagedomains<http://my-server/ovirt-engine/api/v4/datacenters/5a5df553-022d-036d-01e8-0071/storagedomains>



On Wed, May 2, 2018 at 12:53 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
This is on 4.2.0.2-1, I've linked the main logs to dropbox simply 

[ovirt-users] Host install failed - cannot set maintenance or remove

2018-05-08 Thread Callum Smith
Dear All,

There appears to be an issue with the host install on these, there's quite a 
lot of errors being kicked out into the logs as they cycle through attempting 
to activate, failing, and then failing to go into maintenance. I can't remove 
the hosts from the engine to attempt to reinstall them.

Issue presented from having a statically configured network on the ovritmgmt 
network on the hosts before running the host install. There are SQL errors (FK 
missing) and assorted goodness in there.

Any help greatly appreciated, not sure what the next step forward is from here

Engine.log on dropbox:
https://www.dropbox.com/s/82iem0ov869yh32/engine.log-20180508.zip?dl=0

PS. Sorry if this comes through a few times, mailing list membership seems to 
be having a funny turn this morning.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


Re: [ovirt-users] Re-attaching ISOs and moving ISOs storage

2018-05-04 Thread Callum Smith
Is there any sensible way to either clean up the existing ISOs storage or 
re-attach it? I'm struggling to even export VMs and migrate them elsewhere with 
this and need to recover them asap.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 15:09, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:


Attached, thank you for looking into this


https://HOSTNAME/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae


https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae>"
 id="f5914df0-f46c-4cc0-b666-c929aa0225ae">

https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/isattached>"
 rel="isattached"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/reduceluns>"
 rel="reduceluns"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/refreshluns>"
 rel="refreshluns"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/updateovfstore>"
 rel="updateovfstore"/>

VMISOs
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/disksnapshots>"
 rel="disksnapshots"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/files>"
 rel="files"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/diskprofiles>"
 rel="diskprofiles"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/storageconnections>"
 rel="storageconnections"/>
https://virtman.cluster/ovirt-engine/api/v4/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/permissions>"
 rel="permissions"/>
11770357874688
false
0
5
false
ok
false

backoffice01.cluster
/vm-iso
nfs

v1
false
false
iso
38654705664
10
false

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>




https://HOSTNAME/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains



https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/d9f8093b-71cd-423d-9b7d-91a613ef98ba>"
 id="d9f8093b-71cd-423d-9b7d-91a613ef98ba">

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/d9f8093b-71cd-423d-9b7d-91a613ef98ba/activate>"
 rel="activate"/>
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/d9f8093b-71cd-423d-9b7d-91a613ef98ba/deactivate>"
 rel="deactivate"/>

tegile-virtman-backup
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/d9f8093b-71cd-423d-9b7d-91a613ef98ba/disks>"
 rel="disks"/>
17519171600384
false
0
5
false
ok
false
maintenance

192.168.64.248
auto
/export/virtman/backup
nfs

v1
false
false
export
8589934592
10
false
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>


https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/017dd620-65ec-4fa4-8d46-67737dedd7a1>"
 id="017dd620-65ec-4fa4-8d46-67737dedd7a1">

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/017dd620-65ec-4fa4-8d46-67737dedd7a1/activate>"
 rel="activate"/>
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/017dd620-65ec-4fa4-8d46-67737dedd7a1/deactivate>"
 rel="deactivate"/>

VMStorage
https://virtman.cluster/o

Re: [ovirt-users] Re-attaching ISOs and moving ISOs storage

2018-05-02 Thread Callum Smith
s://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>


https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/e572c874-17f8-4ad8-9bac-b6f563a9fc17>"
 id="e572c874-17f8-4ad8-9bac-b6f563a9fc17">

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/e572c874-17f8-4ad8-9bac-b6f563a9fc17/activate>"
 rel="activate"/>
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/e572c874-17f8-4ad8-9bac-b6f563a9fc17/deactivate>"
 rel="deactivate"/>

tegile-virtman
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/e572c874-17f8-4ad8-9bac-b6f563a9fc17/disks>"
 rel="disks"/>
2190433320960
false
226559524864
5
false
ok
false
active

192.168.64.248
auto
/export/virtman/VirtualServerShare_1
nfs

v4
false
false
data
8589934592
10
false
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>


https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae>"
 id="f5914df0-f46c-4cc0-b666-c929aa0225ae">

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/activate>"
 rel="activate"/>
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304/storagedomains/f5914df0-f46c-4cc0-b666-c929aa0225ae/deactivate>"
 rel="deactivate"/>

VMISOs
11770357874688
false
    0
5
false
ok
false
maintenance

backoffice01.cluster
/vm-iso
nfs

v1
false
false
iso
38654705664
10
false
https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>

https://virtman.cluster/ovirt-engine/api/v4/datacenters/5a54bf81-0228-02bc-0358-0304>"
 id="5a54bf81-0228-02bc-0358-0304"/>






[cid:921E5257-26F4-4E0D-83B0-68F996842D08@well.ox.ac.uk]
Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 14:46, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

Can you share the REST API data of the Storage domain and Data Center?
Here an example of the URLs, you will need to replace with correct ids.

http://MY-SERVER/ovirt-engine/api/v4/storagedomains/13461356-f6f7-4a58-9897-2fac61ff40af<http://my-server/ovirt-engine/api/v4/storagedomains/13461356-f6f7-4a58-9897-2fac61ff40af>

http://MY-SERVER/ovirt-engine/api/v4/datacenters/5a5df553-022d-036d-01e8-0071/storagedomains<http://my-server/ovirt-engine/api/v4/datacenters/5a5df553-022d-036d-01e8-0071/storagedomains>



On Wed, May 2, 2018 at 12:53 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
This is on 4.2.0.2-1, I've linked the main logs to dropbox simply because 
they're big, full of noise right now.
https://www.dropbox.com/s/f8q3m5amro2a1b2/engine.log?dl=0
https://www.dropbox.com/s/uods85jk65halo3/vdsm.log?dl=0

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 10:43, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

Which version are you using?
Can you provide the whole log?

For some reason, it looks like the Vdsm thinks that the Storage Domain is not 
part of the pool.

On Wed, May 2, 2018 at 11:20 AM, Callum Smith 

Re: [ovirt-users] Re-attaching ISOs and moving ISOs storage

2018-05-02 Thread Callum Smith
This is on 4.2.0.2-1, I've linked the main logs to dropbox simply because 
they're big, full of noise right now.
https://www.dropbox.com/s/f8q3m5amro2a1b2/engine.log?dl=0
https://www.dropbox.com/s/uods85jk65halo3/vdsm.log?dl=0

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 10:43, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

Which version are you using?
Can you provide the whole log?

For some reason, it looks like the Vdsm thinks that the Storage Domain is not 
part of the pool.

On Wed, May 2, 2018 at 11:20 AM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
State is maintenance for the ISOs storage. I've extracted what is hopefully the 
relevant bits of the log.

VDSM.log (SPM)

2018-05-02 09:16:03,455+0100 INFO  (ioprocess communication (179084)) 
[IOProcess] Starting ioprocess (__init__:447)
2018-05-02 09:16:03,456+0100 INFO  (ioprocess communication (179091)) 
[IOProcess] Starting ioprocess (__init__:447)
2018-05-02 09:16:03,461+0100 INFO  (jsonrpc/0) [vdsm.api] FINISH 
activateStorageDomain error=Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304' from=:::192.168.64.254,58968, 
flow_id=93433989-8e26-48a9-bd3a-2ab95f296c08, 
task_id=7f21f911-348f-45a3-b79c-e3cb11642035 (api:50)
2018-05-02 09:16:03,461+0100 ERROR (jsonrpc/0) [storage.TaskManager.Task] 
(Task='7f21f911-348f-45a3-b79c-e3cb11642035') Unexpected error (task:875)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in 
_run
return fn(*args, **kargs)
  File "", line 2, in activateStorageDomain
  File "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 48, in method
ret = func(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 1256, in 
activateStorageDomain
pool.activateSD(sdUUID)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/securable.py", line 79, 
in wrapper
return method(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 1130, in 
activateSD
self.validateAttachedDomain(dom)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/securable.py", line 79, 
in wrapper
return method(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 557, in 
validateAttachedDomain
raise se.StorageDomainNotInPool(self.spUUID, dom.sdUUID)
StorageDomainNotInPool: Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304'
2018-05-02 09:16:03,461+0100 INFO  (jsonrpc/0) [storage.TaskManager.Task] 
(Task='7f21f911-348f-45a3-b79c-e3cb11642035') aborting: Task is aborted: 
"Storage domain not in pool: u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304'" - code 353 (task:1181)
2018-05-02 09:16:03,462+0100 ERROR (jsonrpc/0) [storage.Dispatcher] FINISH 
activateStorageDomain error=Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304' (dispatcher:82)

engine.log

2018-05-02 09:16:02,326+01 INFO  
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(default task-20) [93433989-8e26-48a9-bd3a-2ab95f296c08] Lock Acquired to 
object 
'EngineLock:{exclusiveLocks='[f5914df0-f46c-4cc0-b666-c929aa0225ae=STORAGE]', 
sharedLocks=''}'
2018-05-02 09:16:02,376+01 INFO  
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] Running command: 
ActivateStorageDomainCommand internal: false. Entities affected :  ID: 
f5914df0-f46c-4cc0-b666-c929aa0225ae Type: StorageAction group 
MANIPULATE_STORAGE_DOMA
IN with role type ADMIN
2018-05-02 09:16:02,385+01 INFO  
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] Lock freed to object 
'EngineLock:{exclusiveLocks='[f5914df0-f46c-4cc0-b666-c929aa0225ae=STORAGE]', 
sharedLocks=''}'
2018-05-02 09:16:02,385+01 INFO  
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] ActivateStorage Domain. Before Connect 
all hosts to pool. Time: Wed May 02 09:16:02 BST 2018
2018-05-02 09:16:02,407+01 INFO  
[org.ovirt.engine.core.bll.storage.connection.ConnectStorageToVdsCommand] 
(EE-ManagedThreadFactory-engine-Thread-33456) [40a82b47] Running command: 
ConnectStorageToVdsCommand internal: true. Entities affected :  ID: 
aaa0--000

Re: [ovirt-users] Re-attaching ISOs and moving ISOs storage

2018-05-02 Thread Callum Smith
.core.vdsbroker.vdsbroker.ConnectStorageServerVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-33456) [40a82b47] FINISH, 
ConnectStorageServerVDSCommand, return: 
{da392861-aedc-4f1e-97f4-6919fb01f1e9=0}, log id: 23ce648f
2018-05-02 09:16:02,450+01 INFO  
[org.ovirt.engine.core.vdsbroker.irsbroker.ActivateStorageDomainVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] START, ActivateStorageDomainVDSCommand( 
ActivateStorageDomainVDSCommandParameters:{storagePoolId='5a54bf81-0228-02bc-0358-0304',
 ignoreFailoverLimit='false', stor
ageDomainId='f5914df0-f46c-4cc0-b666-c929aa0225ae'}), log id: 5c864594
2018-05-02 09:16:02,635+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] EVENT_ID: 
IRS_BROKER_COMMAND_FAILURE(10,803), VDSM command ActivateStorageDomainVDS 
failed: Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, pool=5a5
4bf81-0228-02bc-0358-0304'
2018-05-02 09:16:02,635+01 ERROR 
[org.ovirt.engine.core.vdsbroker.irsbroker.ActivateStorageDomainVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] Command 
'ActivateStorageDomainVDSCommand( 
ActivateStorageDomainVDSCommandParameters:{storagePoolId='5a54bf81-0228-02bc-0358-0304',
 ignoreFailoverLimit='false', st
orageDomainId='f5914df0-f46c-4cc0-b666-c929aa0225ae'})' execution failed: 
IRSGenericException: IRSErrorException: Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304'
2018-05-02 09:16:02,635+01 INFO  
[org.ovirt.engine.core.vdsbroker.irsbroker.ActivateStorageDomainVDSCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] FINISH, ActivateStorageDomainVDSCommand, 
log id: 5c864594
2018-05-02 09:16:02,635+01 ERROR 
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] Command 
'org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand' failed: 
EngineException: 
org.ovirt.engine.core.vdsbroker.irsbroker.IrsOperationFailedNoFailove
rException: IRSGenericException: IRSErrorException: Storage domain not in pool: 
u'domain=f5914df0-f46c-4cc0-b666-c929aa0225ae, 
pool=5a54bf81-0228-02bc-0358-0304' (Failed with error 
StorageDomainNotInPool and code 353)
2018-05-02 09:16:02,636+01 INFO  
[org.ovirt.engine.core.bll.storage.domain.ActivateStorageDomainCommand] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] Command 
[id=22b0f3c1-9a09-4e26-8096-d83465c8f4ee]: Compensating CHANGED_STATUS_ONLY of 
org.ovirt.engine.core.common.businessentities.StoragePoolIsoMap; snapshot: 
EntityStatus
Snapshot:{id='StoragePoolIsoMapId:{storagePoolId='5a54bf81-0228-02bc-0358-0304',
 storageId='f5914df0-f46c-4cc0-b666-c929aa0225ae'}', status='Maintenance'}.
2018-05-02 09:16:02,660+01 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engine-Thread-33455) 
[93433989-8e26-48a9-bd3a-2ab95f296c08] EVENT_ID: 
USER_ACTIVATE_STORAGE_DOMAIN_FAILED(967), Failed to activate Storage Domain 
VMISOs (Data Center Default) by admin@internal-authz

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

On 2 May 2018, at 08:44, Fred Rolland 
<froll...@redhat.com<mailto:froll...@redhat.com>> wrote:

Hi,

Can you provide logs from engine and Vdsm(SPM)?
What is the state now?

Thanks,
Fred

On Tue, May 1, 2018 at 4:11 PM, Callum Smith 
<cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>> wrote:
Dear All,

It appears that clicking "detach" on the ISO storage domain is a really bad 
idea. This has gotten half way through the procedure and now can't be recovered 
from. Is there any advice for re-attaching the ISO storage domain manually? An 
NFS mount didn't add it back to the "pool" unfortunately.

On a separate note, is it possible to migrate this storage to a new location? 
And if so how.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>


___
Users mailing list
Users@ovirt.org<mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Re-attaching ISOs and moving ISOs storage

2018-05-01 Thread Callum Smith
Dear All,

It appears that clicking "detach" on the ISO storage domain is a really bad 
idea. This has gotten half way through the procedure and now can't be recovered 
from. Is there any advice for re-attaching the ISO storage domain manually? An 
NFS mount didn't add it back to the "pool" unfortunately.

On a separate note, is it possible to migrate this storage to a new location? 
And if so how.

Regards,
Callum

--

Callum Smith
Research Computing Core
Wellcome Trust Centre for Human Genetics
University of Oxford
e. cal...@well.ox.ac.uk<mailto:cal...@well.ox.ac.uk>

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users