[ovirt-users] Re: HPE Oneview KVM appliance 8.8.0 / 8.7.0

[Gianluca Cecchi]

On Wed, Apr 10, 2024 at 12:29 PM Angus Clarke  wrote:

> Hi Gianluca
>
> The software is free from HPE but requires a login, I've shared a link
> separately.
>
> Thanks for taking an interest
>
> Regards
> Angus
>

Apart from other considerations we are privately sharing, in my env that is
based on Cascade Lake cpu on the host, with local storage domain on
filesystem, the appliance is able to boot and complete the initial
configuration phase using your settings: Chipset i440FX w/Bios for the IDE
disk type, OS: RHEL7 x86_64. In my env graphics protocol=VNC, video type=VGA
The constraint for your tweaks is caused by the appliance's operating
system where all the virtio modules are compiled as modules and they are
not included into the initramfs.
So the system doesn't find the boot disk if you set it as virtio or
virtio-scsi.
The layout is of bios type with one partition for /boot and other
filesystems on LVM, / included.
To modify the qcow2 image you can use some tools out there, or use manual
steps this way:

. connect the disk to an existing rhel 7 / CentOS 7 helper VM where you
have lvm2 package installed
In my case my VM has one disk named /dev/sda and the HPE qcow2 disk when
added is then seen as /dev/sdb and its partitions as /dev/sdb1, ...
IMPORTANT: change the disk names below as it appears the appliance disk in
your env, otherwise you risk to compromise your existing data!!!
IMPORTANT: inside the appliance disk there is a volume group named vg01.
Verify there is no vg01 volume group already defined in your helper VM
otherwise you get into troubles

. connect to the helper VM as root user

. the LVM structure of the added disk (PV/VG/LV) should be automatically
detected
run the command "vgs" and you should see vg01 volume group listed
run the command "lvs vg01" and you should see some logical volumes listed

. mount the root filesystem of the appliance disk on a directory in your
helper VM (on /media directory in my case)
# mount /dev/vg01/lv_root /media/

. mount the /boot filesystem of the appliance disk under /media/boot
# mount /dev/sdb1 /media/boot/

. mount the /var filesystem of the appliance disk under /media/var
# mount /dev/vg01/lv_var /media/var/

. chroot into the appliance disk env
# chroot /media

. create a file with new kernel driver modules you want to include in the
new initramfs
# vi /etc/dracut.conf.d/virtio.conf

its contents have to be this one line below (similar to the already present
platform.conf):
# cat /etc/dracut.conf.d/virtio.conf
add_drivers+="virtio virtio_blk virtio_scsi"

. backup the original initramfs
# cp -p /boot/initramfs-3.10.0-1062.1.2.el7.x86_64.img
/boot/initramfs-3.10.0-1062.1.2.el7.x86_64.bak

. replace the initramfs
# dracut -fv /boot/initramfs-3.10.0-1062.1.2.el7.x86_64.img
3.10.0-1062.1.2.el7.x86_64
...
*** Creating image file done ***
*** Creating initramfs image file
'/boot/initramfs-3.10.0-1062.1.2.el7.x86_64.img' done ***
#

. verify the new contents include virtio modules

# lsinitrd /boot/initramfs-3.10.0-1062.1.2.el7.x86_64.img | grep virtio
-rw-r--r--   1 root root 7876 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/block/virtio_blk.ko.xz
-rw-r--r--   1 root root12972 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/char/virtio_console.ko.xz
-rw-r--r--   1 root root14304 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/net/virtio_net.ko.xz
-rw-r--r--   1 root root 8188 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/scsi/virtio_scsi.ko.xz
drwxr-xr-x   2 root root0 Apr 10 21:14
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/virtio
-rw-r--r--   1 root root 4552 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/virtio/virtio.ko.xz
-rw-r--r--   1 root root 9904 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/virtio/virtio_pci.ko.xz
-rw-r--r--   1 root root 8332 Sep 30  2019
usr/lib/modules/3.10.0-1062.1.2.el7.x86_64/kernel/drivers/virtio/virtio_ring.ko.xz

. exit the chroot environment
# exit

. Now you exited from the chroot env, umount the appliance disk filesystems
# umount /media/var /media/boot
# umount /media

. disconnect the disk from the helper VM

. create a Red Hat 7.x VM in your oVirt/OLVM env as Q35 / Bios VM with the
appliance disk configured as virtio or virtio-scsi disk

. boot the VM and it should work, apart from the current problem of the
display in your env

Eventually if it boots ok and at the end it works, push HPE to add virtio
modules that are quite the standard for disk in Qemu/KVM based env.
The virtio network starts already ok because it is activated after boot as
a module and it is not needed in the initrd phase but only after it.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org

[ovirt-users] Re: HPE Oneview KVM appliance 8.8.0 / 8.7.0

[Gianluca Cecchi]

On Wed, Apr 10, 2024 at 11:47 AM Angus Clarke  wrote:

> Hello folks
>
> I realise this probably isn't the place for this but someone might be
> interested or have some knowledge.
>
> I deployed the KVM version of HPE Oneview 8.8 to oVirt 4.5 (OLVM 4.5) It
> came as a single QCOW2 disk image.
>
>
Is the image download publicly available? Or does it need any form of
subscription ?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YXYGVCRH6QURQPOVTOSZTEY7ZT2AYMGQ/

[ovirt-users] Re: Singe host installation

[Gianluca Cecchi]

On Fri, Apr 5, 2024 at 12:50 PM Jakov Sosic  wrote:

> Hi guys,
>
> I want to run oVirt on a single host, is that possible?
>
>
> Running external engine is a possibility.
>
>
> Thanks,
>
> Jakov
>
>
It is possible to have an environment with an external engine (physical one
or as a virtual machine in an external env) and then use a host as the only
hypervisor

If the storage component has to be provided by that host itself you have to
use local storage based datacenter and storage domains as well:
https://www.ovirt.org/documentation/administration_guide/index.html#sect-Preparing_and_Adding_Local_Storage
If you want to retain the default datacenter created during installation,
you have to edit it and set it as "Local" in "Storage Type" section.
Or you could create  a new DC with that setting

There is also the option to install with Self Hosted Engine and use shared
storage (NFS, SAN, iSCSI,...) if you have one available:
https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_command_line/index.html#Installing_the_self-hosted_engine_deployment_host_SHE_cli_deploy
Or with the same guide use the host storage itself, but as GlusterFS and
eventually extend it later if/when available with other hosts
Of course in that case you loose all the HA functions available at host
level

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EHVIFXW2U4VW7H4T4L243PCWCXWRYZQ6/

[ovirt-users] Re: Server 2008R2 UEFI ISO Boot Problerm

[Gianluca Cecchi]

On Wed, Apr 3, 2024 at 5:17 PM Clint Boggio  wrote:

> Greetings oVirt team
>
> I'm using "Version 4.5.7-0.master.20240327074810.git14bca0502d.el8 on
> CentOS Stream 9"
>
> I have occasion to restore a windows backup image for the purpose of data
> extraction. To accomplish this I need to boot off a Server 2008R2 ISO. The
> machine to be restored was UEFI based originally and so it is required to
> be UEFI for the restoration process.
>
> I seem to be having a problem with booting off of the ISO image in the
> required UEFI-based system. In pursuit of a solution I've read on some of
> the other forums about this same problem on other KVM-based platforms.
>
> Booting that same ISO after changing the VM to BIOS works flawlessly. In
> the articles and threads I've read there is mention of hyper-v services
> that load during the guest boot process that are causing the ISO boot to
> hang.
>
> Is it possible to disable (or is it even necessary to disable)
> "hv_time,hv_relaxed,hv_spinlocks=0x2000" in the "Custom Properties" section
> of the VM config ?
>
> If any of you have some insight into this  problem and a possible solution
> I'd appreciate the feedback.
>
>
Never tried but just a guess, as in the past I had the opposite problem
importing from vSphere.
What does it happen if you change the VM operating System in oVirt to
"Other OS", or even to Linux?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZN22T4Z6CFDISBKGDZ2LDYVLG3F6R3OI/

[ovirt-users] Re: Issue with Accessing oVirt Manager Console

[Gianluca Cecchi]

On Fri, Mar 29, 2024 at 11:59 AM Sachendra Shukla <
sachendra.shu...@yagnaiq.com> wrote:

> Hi Gianluca,
>
> I hope this email finds you well. I wanted to bring to your attention an
> issue regarding the status of ovirt-engine and httpd. While httpd is
> showing as active, unfortunately, the ovirt-engine status is indicating a
> failure. I have attached the engine logs for your reference to provide more
> insight into this matter. I do not want any impact on running VMs. Please
> check and provide me  the resolution if possible.
>

It could be related to the ovirt-ovn-provider and/or its certificates, as
we get thousands of errors related to it inside engine.log

  $ grep ERROR /tmp/engine.log | awk '{print $4}' | sort | uniq -c
   2532
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]

the last being:

2024-03-28 22:15:33,484+05 ERROR
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-53)
[260c120a] Command
'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand'
failed: EngineException: (Failed with error NotAfter: Fri Dec 30 19:27:18
IST 2022 and code 5050)

Which version of oVirt are you using?

You could try to run this and see if it recreates certificates if this is
the problem (or if it asks to regenerate them, say yes). You should not get
downtime for VMs. The "--offline" option makes the command only refresh its
configuration without going through actual updates or modifications

engine-setup --offline

It restarts also the needed services (ovirt-provider-ovn too) in the
correct order, that could help sometimes

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4RL6T6ZXGCEJ5JGV3IANABY4B4GTEM3E/

[ovirt-users] Re: Issue with Accessing oVirt Manager Console

[Gianluca Cecchi]

On the engine host
. check contents of /var/log/ovirt-engine/engine.log

. check the output of the commands:
systemctl status ovirt-engine
systemctl status httpd

. check contents of JBoss instance related logs
/var/log/ovirt-engine/server.log
In 4.5.x you should see something like this (see the deployed engine.ear
and ovirt-web-ui.war lines for example):

2024-03-26 17:26:29,515+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 47) WFLYUT0021: Registered web context:
'/ovirt-engine/docs' for server 'default-server'
2024-03-26 17:26:29,530+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 46) WFLYUT0021: Registered web context: '/'
for server 'default-server'
2024-03-26 17:26:29,575+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 46) WFLYUT0021: Registered web context:
'/ovirt-engine/services' for server 'default-server'
2024-03-26 17:26:29,588+01 WARN
 [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool]
(ServerService Thread Pool -- 46) IJ000407: No lazy enlistment available
for ENGINEDataSource
2024-03-26 17:26:29,633+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 51) WFLYUT0021: Registered web context:
'/ovirt-engine' for server 'default-server'
2024-03-26 17:26:29,648+01 WARN
 [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool]
(ServerService Thread Pool -- 46) IJ000407: No lazy enlistment available
for DWHDataSource
2024-03-26 17:26:29,666+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 46) WFLYUT0021: Registered web context:
'/ovirt-engine/webadmin' for server 'default-server'
2024-03-26 17:26:29,843+01 INFO  [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 49) WFLYUT0021: Registered web context:
'/ovirt-engine/sso' for server 'default-server'
2024-03-26 17:26:30,097+01 INFO  [org.jboss.as.clustering.infinispan]
(ServerService Thread Pool -- 50) WFLYCLINF0002: Started timeout-base cache
from ovirt-engine container
2024-03-26 17:26:31,880+01 INFO  [org.jboss.as.server] (ServerService
Thread Pool -- 27) WFLYSRV0010: Deployed "restapi.war" (runtime-name :
"restapi.war")
2024-03-26 17:26:31,880+01 INFO  [org.jboss.as.server] (ServerService
Thread Pool -- 27) WFLYSRV0010: Deployed "ovirt-web-ui.war" (runtime-name :
"ovirt-web-ui.war")
2024-03-26 17:26:31,880+01 INFO  [org.jboss.as.server] (ServerService
Thread Pool -- 27) WFLYSRV0010: Deployed "apidoc.war" (runtime-name :
"apidoc.war")
2024-03-26 17:26:31,880+01 INFO  [org.jboss.as.server] (ServerService
Thread Pool -- 27) WFLYSRV0010: Deployed "engine.ear" (runtime-name :
"engine.ear")
2024-03-26 17:26:31,930+01 INFO  [org.jboss.as.server] (Controller Boot
Thread) WFLYSRV0212: Resuming server
2024-03-26 17:26:31,933+01 INFO  [org.jboss.as] (Controller Boot Thread)
WFLYSRV0025: WildFly Full 24.0.1.Final (WildFly Core 16.0.1.Final) started
in 16651ms - Started 1676 of 1890 services (393 services are lazy, passive
or on-demand)
2024-03-26 17:26:31,940+01 INFO  [org.jboss.as] (Controller Boot Thread)
WFLYSRV0060: Http management interface listening on
http://127.0.0.1:8706/management
2024-03-26 17:26:31,940+01 INFO  [org.jboss.as] (Controller Boot Thread)
WFLYSRV0051: Admin console listening on http://127.0.0.1:8706
2024-03-26 17:41:31,872+01 INFO
 [org.apache.sshd.common.util.security.eddsa.EdDSASecurityProviderRegistrar]
(EE-ManagedExecutorService-hostUpdatesChecker-Thread-1)
getOrCreateProvider(EdDSA) created instance of
net.i2p.crypto.eddsa.EdDSASecurityProvider

eventually if in error try to restart ovirt-engine service
systemctl restart ovirt-engine

HIH,
Gianluca



On Fri, Mar 29, 2024 at 9:59 AM Sachendra Shukla <
sachendra.shu...@yagnaiq.com> wrote:

> Hi Alex,
>
> After conducting a thorough check, we have confirmed that all virtual
> machines are operating smoothly, and the network is functioning without any
> issues (we can successfully SSH into both the VMs and the manager).
> Additionally, there is available storage on both the node and the manager.
> However, we are encountering difficulty accessing the oVirt manager
> console, as we are consistently receiving a "503 Service Unavailable" error.
>
> Thanks,
> Sachendra
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VY5WXOUAQJMFLUY5GH6HEAGZSDHFZLWF/

[ovirt-users] Re: Storage Domain Limitations

[Gianluca Cecchi]

On Wed, Mar 13, 2024 at 6:07 AM Erhan T via Users  wrote:

> Hi,
>
> We have oVirt v4.4.9 environment on our organizitaion. There are 2TB
> storage domains which have one LUN each and the storage type is Fibre
> Channel.
> I would like to add 10TB or more sized LUNs and reduce the number of
> storage domain. Is it possible?
>
> Is there any limitation for storage domain size in this version of oVirt?
> I’m looking for documentation about this subject but I couldn't find any
> information.
>
> I would be so glad if you could help me.
>
>
I would say that you can refer to this article for the downstream RHV
product:
https://access.redhat.com/articles/906543
for sure it refers to something tested.

>From what I see in section "RHV Manager Logical Entity Maximums:"

Maximum disk size: 500 TiB (limited to 8 TiB by default)

not so clear if it refers to the LUN to attach to the hosts or to virtual
disk size or what.
And it is not clear the "limited to 8 TiB" part: if configurable at vdsm
host side or what.
Possibly the sample vdsm.conf file at /usr/share/doc/vdsm/vdsm.conf.sample
on your host could help investigating the available parameters

See also here for backgrounds related to having too many LVMs (that map to
virtual disks) in a single volume group (that maps to storage domain), in
case of block storage over FCP for example.
https://access.redhat.com/solutions/441203
>From the documentation it seems that the trade-off is something around
300-350 virtual disks: depending on your planned virtual disks' size you
can estimate the optimal size for your single storage domain.

HIH a bit

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DZJU4FPYJDP2APXEEPUL2J5KK7ZJC47/

[ovirt-users] Re: importing local storage domain problem

[Gianluca Cecchi]

On Wed, Feb 21, 2024 at 6:24 PM Gianluca Cecchi 
wrote:

> Hello,
> I had a lab environment in 4.4.10, composed of only one host and local
> storage DC and with an external engine.
> I had 3 disks on this system, with OS in the first one and local storage
> domains in the second and third one.
> I detached the storage domains (I forgot to remove them afterwards) from
> the original env
> Afterwards I created a completely new engine on 4.5 (not using any backup)
> and then I reutilized the host installing the OS in the first disk
> overwriting the previous env.
> I have mounted the filesystems for the storage domains on the second and
> third disk as before, but I see that if I try to execute "import storage
> domain", the local type is not there.
> And if I select "new storage domain" I receive the error
>
> operation canceled
> Error while executing action New Local Storage Domain: Error in creating a
> Storage Domain. The selected storage path is not empty (probably contains
> another Storage Domain). Either remove the existing Storage Domain from
> this path, or change the Storage path).
>
> Is there any file I can delete from the directory tree that reproduces the
> "removal" action I forgot?
> Or any workarounds?
>
> Thanks in advance,
> Gianluca
>


Could it work importing the local filesystem as a Posix FS one?
just trying with a not critical one, with these parameters (the same ones
used before in /etc/fstab):

path: /dev/mapper/vgdata-data
VFS Type: ext4
Mount Options: defaults,discard

I get error related to sanlock daemon:

open error -13 EACCES: no permission to open
/rhev/data-center/mnt/_dev_mapper_vgdata-data/13dc30ad-6e14-4c7a-9b0f-68ebb2da8af4/dom_md/ids
check that daemon user sanlock 179 group sanlock 179 has access to disk or
file.
s1 open_disk
/rhev/data-center/mnt/_dev_mapper_vgdata-data/13dc30ad-6e14-4c7a-9b0f-68ebb2da8af4/dom_md/ids
error -13
s1 add_lockspace fail result -19

Currently I have:

# id sanlock
uid=179(sanlock) gid=179(sanlock)
groups=179(sanlock),6(disk),36(kvm),107(qemu)

# ll -d
/rhev/data-center/mnt/_dev_mapper_vgdata-data/13dc30ad-6e14-4c7a-9b0f-68ebb2da8af4/dom_md/ids
-rw-rw. 1 vdsm kvm 0 Mar 12  2021
/rhev/data-center/mnt/_dev_mapper_vgdata-data/13dc30ad-6e14-4c7a-9b0f-68ebb2da8af4/dom_md/ids

Thanks
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6SGUCD43DPIJRO2IS4CYEY5KSXU3PZXF/

[ovirt-users] importing local storage domain problem

[Gianluca Cecchi]

Hello,
I had a lab environment in 4.4.10, composed of only one host and local
storage DC and with an external engine.
I had 3 disks on this system, with OS in the first one and local storage
domains in the second and third one.
I detached the storage domains (I forgot to remove them afterwards) from
the original env
Afterwards I created a completely new engine on 4.5 (not using any backup)
and then I reutilized the host installing the OS in the first disk
overwriting the previous env.
I have mounted the filesystems for the storage domains on the second and
third disk as before, but I see that if I try to execute "import storage
domain", the local type is not there.
And if I select "new storage domain" I receive the error

operation canceled
Error while executing action New Local Storage Domain: Error in creating a
Storage Domain. The selected storage path is not empty (probably contains
another Storage Domain). Either remove the existing Storage Domain from
this path, or change the Storage path).

Is there any file I can delete from the directory tree that reproduces the
"removal" action I forgot?
Or any workarounds?

Thanks in advance,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZAD2FOIFV65SCZV6BRMZ42MKKQSD5JQ7/

[ovirt-users] Re: Need to renew ovirt engine certificate

[Gianluca Cecchi]

On Tue, Jan 16, 2024 at 7:51 AM Cyril VINH-TUNG  wrote:

> Hello
> Just launch engine-setup --offline
> It will detect the certificate expiration and ask you to renew
>
>
> [snip]

>
> Le lun. 15 janv. 2024, 20:00, Sachendra Shukla <
> sachendra.shu...@yagnaiq.com> a écrit :
>
>> Hi Team,
>>
>> The oVirt Engine certificate is scheduled to expire on February 1, 2024.
>> Consequently, we need to initiate the certificate upgrade process. Could
>> you please share the steps and process for the certificate upgrade? I have
>> attached a snapshot below for your reference.
>>
> [snip]

Keep in mind that you have to renew certificates not only for the engine
host, but also for the hypervisors. Possible they have aligned expiration
dates
See here for instructions:
https://www.ovirt.org/documentation/administration_guide/index.html#chap-Renewing_certificates_RHV_backup_restore
Section 3.4. Renewing certificates before they expire
HIH
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4Z7MMQJCSMBYH6RLMEGJEA2YVQ432LCM/

[ovirt-users] Re: Oracle Virtualization Manager 4.5 anyone?

[Gianluca Cecchi]

Thomas, your e-mail created too much food for thought... as usual I would
say, remembering the past ;-)
I try to reply to some of them online below, putting my own personal
considerations on the table

On Thu, Dec 21, 2023 at 11:44 AM Thomas Hoberg  wrote:

> Redhat's decision to shut down RHV caught Oracle pretty unprepared, I'd
> guess, who had just shut down their own vSphere clone in favor of a RHV
> clone a couple of years ago.
>

I don't think so. I tried for quite some time their previous solution,
based on Xen, and simply it didn't work as expected in terms of many
enterprise class needed functionalities. Then I switched to oVirt and/or
RHV, depending on customer needs. And I think Oracle did the same. If I
remember correctly there was also a migration path.


>
> Oracle is even less vocal about their "Oracle Virtualization" strategy,
> they don't even seem to have a proper naming convention or branding.
>

I don't agree. Even if not crystal clear and somehow confusing for
newcomers, they called it Oracle Linux Virtualization Manager (OLVM) since
the beginning, making it clear that in their regard they see it as an
extension of the operating system (Oracle Linux). In fact if you buy the
Premier Support level of the OS, you automatically get also support for
OLVM. if you use it.
Their previous solution branding was Oracle VM (or sometimes Oracle VM
Server)
Here you can still find all the solutions described, including VirtualBox
(and recently Kata Containers):
https://www.oracle.com/virtualization/


> But they have been pushing out OV releases without a publicly announced
> EOL almost a year behind Redhat for the last years.
>

In the past I asked and they told me that they planned to continue with
OLVM and its support even after RHV EOL.
And the 12th December announcement seems to confirm that.
Their product is a fork of oVirt.


>
> And after a 4.4 release in September 22, a few days ago on December 12th
> actually a release 4.5 was made public.
>

Great news, in my opinion
I didn't spot it yet, but you are right and here you can find the announce
page:
https://blogs.oracle.com/virtualization/post/oracle-linux-virtualization-manager-delivers-enhanced-monitoring-and-reporting


> I've operated oVirt 4.3 with significant quality issues for some years and
> failed to make oVirt 4.4 work with any degree of acceptable stability but
> Oracle's variant of 4.4 proved to be rather better than 4.3 on CentOS7 with
> no noticable bugs, especially in the Hyperconverged setup that I am using
> with GlusterFS.
>

The whole point here is that in my opinion GlusterFS is totally not ready
for enterprise use, based on my past tests in oVirt context.
In other terms, possibly the problems you are describing was more dependant
on GlusterFS configuration/tuning/bugs than on oVirt/OLVM versions
themselves
Just my opinion


> I assumed that this was because Oracle based their 4.4 in fact on RHV 4.4
> and not oVirt, but since they're not telling, who knows?
>

I don't think that. Based on licensing they have to let their sources
publicly available.
And in fact here you find all you need in case you want to crosscheck:
https://yum.oracle.com/oracle-linux-8.html

In the link above you can find both 4.4 and 4.5 sources, together with the
OS and UEK kernels ones, because as said above, they consider OLVM an
extension of the operating system functionalities


> One issue with 4.4 was that Oracle is pushing their UE-Kernel and that
> created immediate issues e.g. with VDO missing modules for UEK and other
> stuff, but that was solved easily enough by using the RHEL kernel.
>

They support both Red Hat Compatible kernels and UEK ones. In case of
problems I think you can submit bugs.
The correct entry point for that for not paying customers should be this
one if I'm not wrong:
https://github.com/oracle/oracle-linux/issues


>
> With 4.5 Oracle obviously can't use RHV 4.5 as a base, because there is no
> such thing with RHV declared EOL and according to Oracle their 4.5 is based
> on oVirt 4.5.4, which made the quality of that release somewhat
> questionable, but perhaps they have spent the year that has passed since
> productively killing bugs... only to be caught by surprise again, I
> presume, by an oVirt release 4.5.5 on December 1st, that no one saw coming!
>

I think you well understand that sw developer processing is not an easy
one, and that it comprises feature freezes and such...
If Oracle well before planned to come out with a 4.5 release based on a
fork of a well established 4.5.4 release, it is not so important to rebase
all the work on the just released oVirt 4.5.5. They had better release it
anyway after their quality testing and then update inside the normal
maintenance phase. And based on what oVirt 4.5.5 contains, it could be that
some of oVirt 4.5.5 features/fixes are already there in OLVM 4.5
At the moment, from release notes we know that:
"
Release 4.5 of Oracle Linux Virtualization Manager is based on oVirt

[ovirt-users] Re: Hosted-engine restore failing when migrating to new storage domain

[Gianluca Cecchi]

On Wed, Oct 25, 2023 at 5:50 PM Devin A. Bougie 
wrote:

> I've had a chance to try this restore again, and this time login to the
> local (new) hosted-engine VM to verify that
> /root/DisableFenceAtStartupInSec.txt just contains:
> to
>
> And if I try the "engine-config -g DisableFenceAtStartupInSec" from the
> new hosted-engine VM, my connection closes.
> [root@lnxvirt-engine ~]# cat /root/DisableFenceAtStartupInSec.txt
> to
> [root@lnxvirt-engine ~]# set -euo pipefail && engine-config -g
> DisableFenceAtStartupInSec
> Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
> Connection to the Database failed. Please check that the hostname and port
> number are correct and that the Database service is up and running.
> Connection to 192.168.222.25 closed.
>
> Any new suggestions or more tests I can run would be greatly appreciated.
>
> Thanks,
> Devin
>
>
The key thing here is that for some reason it seems it is not able to
connect to the database and so when "engine-config" command tries to get
the second field of the output (the " | cut -d' ' -f2" part) it gets the
"to" string here:

Connection to the Database failed
and anyway it returns error with failure of the overall playbook
It should be investigated if there is a problem with the database itself on
the new engine or if for some reason the "engine-config" command is not
able to implicitly connect to the database
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FR7KU3LAMEDTAZYBWJM4JO22M3FUVO65/

[ovirt-users] Re: moving engine VM outside one ovirt environment

[Gianluca Cecchi]

On Sat, Oct 21, 2023 at 9:20 PM  wrote:

> What is the best way and steps to move engine VM outside the Ovirt
> environment. As of now the engine VM is controlling the host but running
> also on the same Ovirt host. VM must run on a different Ovirt environment.
> Want to move/migrate engine from hosted engine to stand alone VM
>
>
Latest post on this topic was from David one year ago:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YQWLGVB7NUALLGJ47QYWFTXD25UJX57Q/

There are some steps both inline in the mail and in the github link.
The github link seems to not work anymore and the correct link now to the
doc seems to be this one:
https://github.com/dmwhite823/ovirt-site/blob/migrating_from_self-hosted/source/documentation/migrating_from_a_self-hosted_engine_to_a_standalone_manager/master.adoc

Eventually David can give more insights on his tests. I never tried that
path
HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IKQ4UYT62Y2F3F5FFR5SWVC6QY7BW56H/

[ovirt-users] Re: Hosted-engine restore failing when migrating to new storage domain

[Gianluca Cecchi]

On Sat, Oct 14, 2023 at 7:05 PM Devin A. Bougie 
wrote:
[snip]

> Any additional questions or suggestions would be greatly appreciated.
>
> Thanks again,
> Devin
>
>
There is another FATAL line regarding restore itself, before the message I
pointed out in my previous message.
Can you analyze and/or share the contents of
/var/log/ovirt-engine/setup/restore-backup-20231014150412.log?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4AWQKUBFC2V5CKHYSQ3VWAU2LFROT7ZF/

[ovirt-users] Re: Hosted-engine restore failing when migrating to new storage domain

[Gianluca Cecchi]

On Sat, Oct 14, 2023 at 5:53 PM Devin A. Bougie 
wrote:

> Hello,
>
> We have a functioning oVirt 4.5.4 cluster running on fully-updated EL9.2
> hosts.  We are trying to migrate the self-hosted engine to a new iSCSI
> storage domain using the existing hosts, following the documented procedure:
> - set the cluster into global maintenance mode
> - backup the engine using "engine-backup --scope=all --mode=backup
> --file=backup.bck --log=backuplog.log"
> - shutdown the engine
> - restore the engine using "hosted-engine --deploy --4
> --restore-from-file=backup.bck"
>
> This almost works, but fails with the attached log file.  Any help or
> suggestions would be greatly appreciated, including alternate procedures
> for migrating a self-hosted engine from one domain to another.
>
> Many thanks,
> Devin



If I'm right, the starting error seems to be this one:

 2023-10-14 11:06:16,529-0400 ERROR
otopi.ovirt_hosted_engine_setup.ansible_utils
ansible_utils._process_output:113 fatal: [local
host -> 192.168.1.25]: FAILED! => {"changed": true, "cmd": "set -euo
pipefail && engine-config -g DisableFenceAtStartupInSec | c
ut -d' ' -f2 > /root/DisableFenceAtStartupInSec.txt", "delta":
"0:00:01.495195", "end": "2023-10-14 11:06:16.184479", "msg": "no
n-zero return code", "rc": 1, "start": "2023-10-14 11:06:14.689284",
"stderr": "Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=f
alse", "stderr_lines": ["Picked up JAVA_TOOL_OPTIONS:
-Dcom.redhat.fips=false"], "stdout": "", "stdout_lines": []}

As the return code is 1 ("rc": 1,) and determines the failure of the
playbook, possibly the old environment doesn't have
DisableFenceAtStartupInSec engine config property correctly set and/or the
"cut" command fails... Or some other problem with that config parameter.
Can you verify what it put into /root/DisableFenceAtStartupInSec.txt?

I have only a 4.4.10 env at hand and on it:

[root@ovengine01 ~]# engine-config -g DisableFenceAtStartupInSec
Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
DisableFenceAtStartupInSec: 300 version: general
[root@ovengine01 ~]#

[root@ovengine01 ~]# set -euo pipefail && engine-config -g
DisableFenceAtStartupInSec | cut -d' ' -f 2
Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
300
[root@ovengine01 ~]#

what is the output of this command on your old env:

engine-config -g DisableFenceAtStartupInSec
?
Are the source and target environments the same version?

If you have access to your old env could you also run this query on engine
database:

select * from vdc_options where option_name='DisableFenceAtStartupInSec';

eg this way
[root@ovengine01 ~]# su - postgres
[postgres@ovengine01 ~]$ psql engine
psql (12.9)
Type "help" for help.

engine=# select * from vdc_options where
option_name='DisableFenceAtStartupInSec';
 option_id |option_name | option_value | version |
default_value
---++--+-+---
40 | DisableFenceAtStartupInSec | 300  | general | 300
(1 row)

engine=#

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PC3HGYPF2J3FPSF4CAZQCQ6PHESL64N7/

[ovirt-users] Re: Separate NFS Domain Storage for each Domain Storage

[Gianluca Cecchi]

On Tue, Aug 29, 2023 at 7:22 AM Mikhail Po  wrote:

> For the initial installation of the operating system in a virtual machine,
> you need to mount an ISO image that is located in the storage domain of the
> NFS type (ISO function). If the NFS server is located within a high-speed
> LAN (one data center), then there are no problems, if you need to connect
> an image to a remote site (second data center) with slow channels, then
> difficulties arise.
>

oVirt 4.3 is quite old.
Anyway since 4.2 you could put iso files on your ordinary data domains,
where performance access should be acceptable for any host.
In 4.2.x there were some problems when swapping CDs in a running VM with
iso being on block based data domains, but I think this had been fixed in
4.3
You can also put your iso in different data domains and use then the one
that is better for you when you need to install an OS in a VM from iso
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4F4TTXUQJGPPNIIGU2DGU57EV66TZKB6/

[ovirt-users] Re: Active Active Stretched Node cluster not working as expected.

[Gianluca Cecchi]

On Tue, Aug 22, 2023 at 8:52 AM Gaurang Patel 
wrote:

> Suggest any other solution if any.
>
>
>

Your subject says "not working as expected" and you refer to the RHV DR
guides.
My comment is that in my opinion HCI architecture is not expected to work /
be supported for active active DR scenarios as described there.
But you can follow general GlusterFS indications for solving split brain
scenarios, like this one:
https://docs.gluster.org/en/main/Troubleshooting/resolving-splitbrain/
and / or submit your question also to GlusterFS mailing lists
or see if here you find useful information for supported configurations,
quorum setup to prevent split brain conditions, ecc:
https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.5/html/configuring_red_hat_virtualization_with_red_hat_gluster_storage/index
https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.5/html/administration_guide/sect-managing_split-brain#sect-Preventing_Split-brain

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FOMMIWHGCPKZYC5TKU5SNXVQK2DHJLW6/

[ovirt-users] Re: Active Active Stretched Node cluster not working as expected.

[Gianluca Cecchi]

On Sat, Aug 19, 2023 at 7:03 PM  wrote:

> Hi,
>
> i have a Six node Stretched HCI cluster with 2 x 3 =6 distributed
> Replicated bricks, want to achieve Active - Active Disaster Recovery , if
> my three hosts in DC power Down or Failed my DR Site Three node should take
> care of running virtual machines.
>
> During Split-brain scenario Ovirt-Hosted-Engine VM goes in PAUSE mode and
> not restarting on DR hosts and waited for long time, due to this my all
> production VMs are not restarting on DR Site.
>
>
Hi,
even if the guide mentions GlusterFS as supported storage domain for
Active-Active DR scenario and Self Hosted Engine configuration as a
supported one for Active-Active DR scenario, and it doesn't explicitly
mention that HCI configurations are not supported, I have always
interpreted that the storage replication mentioned inside the docs refers
to "external" replication, provided by the storage array hw architecture,
not by RHV HCI sw solution itself. In that sense your architecture should
not be a supported one for Active-Active DR scenario.
Some wordings inside the docs:
"
...
This configuration requires replicated storage that is writeable on both
sites...
...
The sites require synchronously replicated storage that is writeable on
both sites with shared layer 2 (L2) network connectivity...
...
pre-requisites
Real-time storage replication service to duplicate the storage.
"

Anyway you can open a bugzilla request to ask for confirmation.

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SOWQJ2OZF2OOZCJ2DQDK2LNGP2YW44PH/

[ovirt-users] Re: Extended ovirt image disk and now virtual size is < 1 GiB and actual size i +1TB

[Gianluca Cecchi]

On Tue, May 23, 2023 at 2:27 PM  wrote:

> title should have said "actual size is +10TB" not 1TB.
>
>
What kind of posix compliant fs? What are its capabilities and limits?
Because for example max size of a single file is 16Tb on ext4... and after
extension your VM disk file size would go near or after this limit
https://access.redhat.com/solutions/1532

Just to be sure you are not hitting a side effect caused by fs instead...
HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PUBSBRNWKNJWVMSH7MP6ADLW7RIURLII/

[ovirt-users] Re: hosted-engine to standalone

[Gianluca Cecchi]

On Thu, Apr 20, 2023 at 4:52 PM Gianluca Cecchi 
wrote:

>
> On Thu, Apr 20, 2023 at 2:15 PM carl langlois 
> wrote:
>
>> Hi,
>>
>> I plan to transform my hosted_engine setup to a standalone engine.
>> Currently I have 3 hosts that can run the engine. The engine domain is
>> located on a glusterfs. I want to simplify this setup by taking 1 of the 3
>> hosts and setting it as a standalone engine and re-installing the other
>> host as a standard hypervisor. Also i want to remove the glusterfs.  I am
>> on 4.3 for now but the plan is to upgrade after this simplification. The
>> step i plan to do is:
>>
>>1. global maintenance
>>2. stop engine
>>3. backup engine
>>4. shutdown engine
>>5. install fresh standalone engine and restore from the backup
>>6. boot the standalone engine.
>>7. after not sure what the step to clean the old engine domain..
>>
>> Any suggestion?
>>
>> Regards,
>> Carl
>>
>
> There was a post from David 2 years ago regarding this same scenario:
>
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQWLGVB7NUALLGJ47QYWFTXD25UJX57Q/
> Inline in the message you can find high level steps and also a link to a
> github repo (I don't know if and how current)
> To be verified how much it does apply to your current version of oVirt.
> I think there is not yet official documentation for it (at least for oVirt
> as the upstream project)
>
> HIH,
> Gianluca
>
>
Actually the post is from 6 months ago, not 2 years I forgot to disable
the time machine before replying... ;-)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KR6I5RSRLXPY6EVLAHMEZAY326LJ47KR/

[ovirt-users] Re: hosted-engine to standalone

[Gianluca Cecchi]

On Thu, Apr 20, 2023 at 2:15 PM carl langlois 
wrote:

> Hi,
>
> I plan to transform my hosted_engine setup to a standalone engine.
> Currently I have 3 hosts that can run the engine. The engine domain is
> located on a glusterfs. I want to simplify this setup by taking 1 of the 3
> hosts and setting it as a standalone engine and re-installing the other
> host as a standard hypervisor. Also i want to remove the glusterfs.  I am
> on 4.3 for now but the plan is to upgrade after this simplification. The
> step i plan to do is:
>
>1. global maintenance
>2. stop engine
>3. backup engine
>4. shutdown engine
>5. install fresh standalone engine and restore from the backup
>6. boot the standalone engine.
>7. after not sure what the step to clean the old engine domain..
>
> Any suggestion?
>
> Regards,
> Carl
>

There was a post from David 2 years ago regarding this same scenario:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQWLGVB7NUALLGJ47QYWFTXD25UJX57Q/
Inline in the message you can find high level steps and also a link to a
github repo (I don't know if and how current)
To be verified how much it does apply to your current version of oVirt.
I think there is not yet official documentation for it (at least for oVirt
as the upstream project)

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3ECFK4SJ234YEIUSJVKYW3QAIAYDDRPT/

[ovirt-users] Re: Disable "balancing" and authomatic migration

[Gianluca Cecchi]

On Tue, Mar 28, 2023 at 3:30 PM Diego Ercolani 
wrote:

> No, now seem "stable" awaiting for next event
>
>
I mean logs around the time of arising problems... It engine has not
shutdown it will contain logs generated on it during the problematic
timeframe...
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZSEHUGX5JYKGZGHPGP3UZQWUIAAB5BPW/

[ovirt-users] Re: Disable "balancing" and authomatic migration

[Gianluca Cecchi]

On Tue, Mar 28, 2023 at 12:34 PM Diego Ercolani 
wrote:

> I record entry like this in the journal of everynode:
> Mar 28 10:26:58 ovirt-node3.ovirt sanlock[1660]: 2023-03-28 10:26:58
> 1191247 [4105511]: s9 delta_renew read timeout 10 sec offset 0
> /rhev/data-center/mnt/glusterSD/ovirt-node3.ovirt:_gv0/4745320f-bfc3-46c4-8849-b4fe8f1b2de6/dom_md/ids
> Mar 28 10:26:58 ovirt-node3.ovirt sanlock[1660]: 2023-03-28 10:26:58
> 1191247 [4105511]: s9 renewal error -202 delta_length 10 last_success
> 1191216
> Mar 28 10:26:58 ovirt-node3.ovirt sanlock[1660]: 2023-03-28 10:26:58
> 1191247 [2750073]: s11 delta_renew read timeout 10 sec offset 0
> /rhev/data-center/mnt/ovirt-nfsha.ovirt:_dati_drbd0/2527ed0f-e91a-4748-995c-e644362e8408/dom_md/ids
> Mar 28 10:26:58 ovirt-node3.ovirt sanlock[1660]: 2023-03-28 10:26:58
> 1191247 [2750073]: s11 renewal error -202 delta_length 10 last_success
> 1191217
>
> as You see its complaining about a gluster volume (hosting vms and mapped
> on three node with the terrible SATA SSD: Samsung_SSD_870_EVO_4TB
>
>
> And inside the engine.log file of the engine, when it becomes reachable
again?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/STTDIP67ESL3ALJK4EW7Q2NGEBLH4RF4/

[ovirt-users] Re: Disable "balancing" and authomatic migration

[Gianluca Cecchi]

On Tue, Mar 28, 2023 at 11:50 AM Diego Ercolani 
wrote:

> Hello,
> in my installation I have to use poor storage... the oVirt installation
> doesn't manage such a case and begin to "balance" and move VMs around...
> taking too many snapshots stressing a poor performance all the cluster mess
> up
> Why the vms don't go in "Pause" state but the cluster prefer to migrate
> things around messing up everything?
> This is a reference I found and for notice I'm disabling the
> auto-migration on every VM, hoping this help
>
>
> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/24KQZFP2PCW462UZXKNAAJKDL44WU5OV/#24KQZFP2PCW462UZXKNAAJKDL44WU5OV
>
>
What is your current scheduling policy for the related oVirt cluster?
What is the event/error you see in engine.log of the engine and vdsm.log of
the host previously carrying on the VM when it happens?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4A35FL5J4QHRAKM24NBYJ3HFUIDIBLTZ/

[ovirt-users] Re: How to delete/detach a disk from online VM ?

[Gianluca Cecchi]

On Wed, Mar 22, 2023 at 12:00 PM morgan cox  wrote:

> Hello.
>
> Is it possible to remove a (unmounted, unused) disk from a VM when online?
>
> I tried via the UI and I get 'Error while executing action: Cannot remove
> Virtual Disk. At least one of the VMs is not down.'
>
> I know you can with standard KVM/Libvirt/virt-manager - is there any way I
> can remove a disk from a VM whilst it is online in Ovirt ?
>
> Thanks


Preliminary task is to remove the device from VM OS point of view. This way
you don't get error messages when you unplug it from oVirt UI
If not used, not mounted, you can simply run
echo 1 >  /sys/block/device-name/device/delete

Pay attention to device-name, that should match your intended one!

Then I think you should go under the disks subtab of the running vm, select
the disk and deactivate it. Then you can remove it.
In case you already went through this, what is your oVirt version and which
type of virtual disk (virtio/virtio-scsi, ecc..)?

See also here the documentation for other details:
https://www.ovirt.org/documentation/virtual_machine_management_guide/index.html#Removing_Virtual_Disks_From_Virtual_Machines

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RLY6CVNPTA7AIWJIRK4GTXPKHMNYK67N/

[ovirt-users] Re: ovirt and network outages

[Gianluca Cecchi]

On Mon, Mar 20, 2023 at 7:59 PM Fedele Stabile 
wrote:

> Ok i will prepare all to the next outage
>

If the latest outage was not long ago, you could still find some
preliminary and useful information inside /var/log/ovirt-engine/engine.log
of the engine
In general, for all oVirt related log files you can refer to this url:
https://www.ovirt.org/documentation/administration_guide/#chap-Log_Files
some of them are also rotated

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TH42G2HPL4WBZDF3MX6CPQIIJSSQ3BSG/

[ovirt-users] Re: ovirt and network outages

[Gianluca Cecchi]

Il Lun 20 Mar 2023, 17:32 Fedele Stabile  ha
scritto:

> Thank you Gianluca for your answer.
> Population of /etc/hosts as a backup with host and ovirt engine ip:
> this has already been done.
>
> Fedele
>
> __
>

Fedele, I think you should define better what "misaligned" means in your
case, give some details on versions in play, architecture (self hosted vs
standalone engine) and provide some logs from the engine and hosts
(preferably through a link to a file sharing service if big), so that you
can get better help.

Gianluca

>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UKQ3DYXU5NDC6XSFRMQJ56ENWBLSHU6U/

[ovirt-users] Re: ovirt and network outages

[Gianluca Cecchi]

Il Lun 20 Mar 2023, 16:53 Fedele Stabile  ha
scritto:

> Hi,
> I would like to know if it is possible to configure oVirt so as not to be
> affected by internet connection loss.
> I have three ovirt hosts and together with the switch that connects them
> they are powered by a UPS.
> Currently, when I have an internet outage, the oVirt hosts get misaligned
> and the VMs shut down.
>
> Fedele Stabile
> 
>

Possibly the ovirt hosts "know" each other only through a DNS server that
is not local to your infrastructure, but external on the internet?
If this is the case you can populate also their /etc/hosts as a backup
strategy, orconfigure an internal DNS server...
Just a guess

>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QN72FKX6LCMUDJWBMYYA6J62Q6OLM2FB/

[ovirt-users] Re: Ovirt cinderlib integration docs

[Gianluca Cecchi]

On Wed, Feb 22, 2023 at 1:46 PM  wrote:

> Hello:
>
> I am following Sandro's blog post to configure oVirt with Ceph as
> storage domain
> (
> https://blogs.ovirt.org/2021/07/using-ceph-only-storage-for-ovirt-datacenter/
> ).
>

That blog was focused on Hosted Engine setup where one wanted to leverage a
pre-existing Ceph installation for storage (both for the dedicated storage
domain to assign to the hosted engine VM and for other storage domains to
be used for "regular" VMs).
Cinderlib was not supported for the initial hosted engine setup (where you
create the hosted engine dedicated storage domain) and the blog describes
how to overcome the limitation and configure your existing Ceph cluster
iSCSI gateway functionality, so that you make the initial install of oVirt
specifying iSCSi storage type
Then the blog describes how to use cinderlib for new storage domains after
install, to be used for "regular" VMs.


> I need to setup cinderlib but the referenced link is dead:
>
> https://ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/index.html#Set_up_Cinderlib
>
> The web interface has been desupported in 4.5, so you cannot find it
anymore in official oVirt docs.
I don't know if there is a copy of the old 4.4 ones anywhere
you have to use this one (command line based):
https://ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_command_line/index.html
and there the section 3.2 Preparing iSCSI Storage
https://ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_command_line/index.html#Preparing_iSCSI_Storage_SHE_cli_deploy
is managed by you using the blog info above for iSCSI Gateway, and
eventually further modifications due to possible new releases of Ceph...

I can't find any instructions about cinder/ceph in ovirt docs.
>

This is because it is not supported, neither in RHV nor in oVirt. I don't
know where you can find the cinderlib part for oVirt now.
But you can refer to this Red Hat solution
https://access.redhat.com/solutions/5605141
(possibly you need a subscription, perhaps the free developer one is
sufficient)
You have to adapt the repos part for oVirt/CentOS Stream, though

Sandro, any added information here for oVirt repos to configure cinderlib
on oVirt 4.5?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SFJFW3PEWMHR5RUB4RPC3YXBGIDMTUZE/

[ovirt-users] Re: 4.5.4 no virtualization?

[Gianluca Cecchi]

On Mon, Feb 13, 2023 at 2:00 PM  wrote:

> install 4.5.4 from the iso, in the web page with  9090 port under
> applications there is not virtualization for deploying the engine, is like
> a standalone host with nothing on it . i download 4.5.0 and there is it
>

If you plan to configure using self hosted engine (engine itself is a VM
inside the cluster that it manages) follow this:
https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_command_line/index.html

If you plan to configure using a standalone engine (that will be an
external system, eg a bare metal node or a VM inside another environment)
follow this:
https://www.ovirt.org/documentation/installing_ovirt_as_a_standalone_manager_with_local_databases/index.html

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DKLA22FNFVKROUBJ7WBTAXK7QLURHIX7/

[ovirt-users] user unlocked but remains locked on 4.4.10

[Gianluca Cecchi]

Hello,
I have a user that had validity until end of last year.
He tried to access but now it gets locked.
I tried to password reset and/or unlock but he continues to get the message
that the account is locked.
And in fact I see
# ovirt-aaa-jdbc-tool user show myuser
Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false
-- User vale(485fc2a3-3faa-4e75-9965-b5a3067433e0) --
Namespace: *
Name: myuser
ID: 485fc2a3-3faa-4e75-9965-b5a3067433e0
Display Name: myuser
Email:
First Name: My
Last Name: User
Department:
Title:
Description:
Account Disabled: false
Account Locked: true
Account Unlocked At: 2023-01-12 10:30:00Z
Account Valid From: 2021-03-12 09:47:15Z
Account Valid To: 2221-03-12 09:47:15Z
Account Without Password: false
Last successful Login At: 2022-12-31 23:06:06Z
Last unsuccessful Login At: 2023-01-12 09:30:00Z
Password Valid To: 2023-12-31 23:59:59Z
#

How to get "Account Locked: false"? Any other method?

Tried sequence of commands:
# ovirt-aaa-jdbc-tool user password-reset myuser
--password-valid-to='2023-12-31 23:59:59Z' --force
# ovirt-aaa-jdbc-tool user unlock myuser

tried also to restart ovirt-engine service without luck
Thanks in advance,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XFHPLBV4ICINW7VEYS2PWFYXUGCMYEKC/

[ovirt-users] Re: Max network performance on w2019 guest

[Gianluca Cecchi]

On Thu, Dec 1, 2022 at 7:38 AM Yedidyah Bar David  wrote:

>
> If the fault is on the "legacy" application, how can it achieve 5Gbs on
> vSphere?
>
> Best regards,
> --
> Didi
>
>
Yes, your considerations do make sense, Didi.
My main concern at the beginning was that there could be some limitation
"at the wire" with the virtio drivers in Windows.
But I think that the iperf2 test has removed this doubt, correct?
Possibly there are other "inefficiencies" in the virtio driver, like what
experimented with the iperf3, so that the application works better with
vSphere than with oVirt.
Do you or other ones have any suggestions to dig into that eventually?
Does it make sense to set the VM as a high performance one and test the
application again?
One thing I noticed is that at source the VM was configured as 4 vcpus with
4 sockets, besides the hypervisors (both vSphere and oVirt) having 2
sockets. Do you think it can have any performance impact? What could be the
best vcpu configuration: 2 sockets and 2 cores each or 1 socket and 4
cores? I can try to tweak also this config parameters and see

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7KLRMHMNIGKXH5HOGXBXHC4YNHLPOXSO/

[ovirt-users] Re: Max network performance on w2019 guest

[Gianluca Cecchi]

On Wed, Nov 30, 2022 at 11:52 AM Volenbovskyi, Konstantin <
konstantin.volenbovs...@haufe.com> wrote:

> Hi,
>
> Not a direct answer – but I think something to consider:
>
>
>
> -I am not sure what virtio is there ‘out of box’, but I imagine that you
> need to check what is latest virtio-win package
>
> containing NetKVM driver.
>
> (
> https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/archive-virtio/
> ?)
>
> -I would imagine that main driver of higher virtio-net performance is
> support and use of multiqueue.
>
> I don’t know about Windows 2019 , maybe it is matter of configuration.
>
>
>
> Check out https://access.redhat.com/solutions/6638561 and
> https://github.com/virtio-win/kvm-guest-drivers-windows/issues/237
>
>
>
> BR,
>
> Konstantin
>
>
>

Thanks for your input, Konstantin.
Some more context.
Vm was migrated from vSphere (using an external provider via network).
The VM has an application that communicates with an Oracle System on a
second server (VM) running Linux.
With the Windows VM on vSphere, with vmxnet3 driver, the network
performance of the application was about 5Gbs.
The Linux server is a VM on oVirt infra.
The reason to move the Windows VM to oVirt is to investigate if it can get
better performance.
But after the migration test it seems that the application network
performance is about 2Gbs, so far worse than on vSphere.

After these application results above, some bare tests with iperf3 were
done.
On oVirt Linux -> Linux with VMs on two different hypervisors network
performance is more than 9Gbs
Windows -> Linux on same hypervisor 2Gbs
Windows -> Linux on different hypervisor 1.5Gbs
Linux -> Windows almost 10Gbs

As suggested from the links you provided I tried iperf2, using EPEL iperf
rpm for Linux VM and sourceforge iperf-2.1.8-win.exe for Windows.
With VMs on different hosts and transferring from Windows to Linux I got
9.3Gbs
So the problem is not the driver itself or VM configuration but probably
the "legacy" application doesn't support multiqueue or any network
performance optimizations that are available in the driver.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2WKQLLPXAQN3NPTT2XCFSRM3OBLVRATF/

[ovirt-users] Max network performance on w2019 guest

[Gianluca Cecchi]

One customer sees 2,5gbs on 10gbs adapters for w2019 VM with virtio using
iperf3.
Instead with Oracle linux 8 VMS of the same infra sees 9gbs.
What is the expected maximum on windows with virtio based on experience?
Thanks
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K5ABXLAXD77AR7IYW4EEWVR3V65UIB6L/

[ovirt-users] Re: Wrong engine version grts installed

[Gianluca Cecchi]

On Thu, Oct 27, 2022 at 2:05 PM ada per  wrote:

> i did that aswell  still:
>
> dnf downgrade ansible-core
> Last metadata expiration check: 0:44:39 ago on Thu 27 Oct 2022 14:20:00
> EEST.
> Packages for argument ansible-core available, but not installed.
> Error: No packages marked for downgrade.
>
>
Strange
This message should be printed when you don't have the package installed.
For example on my Fedora 36 system I have pcp-conf package that is not
installed

 $ sudo dnf downgrade pcp-conf
Last metadata expiration check: 0:07:36 ago on Thu 27 Oct 2022 02:19:55 PM
CEST.
Packages for argument pcp-conf available, but not installed.
Error: No packages marked for downgrade.

While I can install it and I will have it at the latest version:
$ sudo dnf install pcp-conf



 PackageArchitecture Version
 Repository Size

Installing:
 pcp-conf   x86_64   6.0.0-1.fc36
updates28 k

And then I can downgrade it, even if the lower version was not ever
installed before on my system

$ sudo dnf downgrade pcp-conf
Last metadata expiration check: 0:01:24 ago on Thu 27 Oct 2022 02:19:55 PM
CEST.
Dependencies resolved.

 PackageArchitecture Version
RepositorySize

Downgrading:
 pcp-conf   x86_64   5.3.6-2.fc36
 fedora28 k

what you get with the command

rpm -qa | grep ansible
?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IJFL7D6GTX5XFGSHB5HHAU46B2PZKDXU/

[ovirt-users] Re: Wrong engine version grts installed

[Gianluca Cecchi]

On Thu, Oct 27, 2022 at 1:49 PM ada per  wrote:

>
> # dnf downgrade ansible-core-2.13.3-1.el8.x86_64
> Packages for argument ansible-core-2.13.3-1.el8.x86_64 available, but not
> installed.
> Error: No packages marked for downgrade.
>
>
The package version should be the target one
https://dnf.readthedocs.io/en/latest/command_ref.html#downgrade-command-label

"Downgrades the specified packages to the highest installable package of
all known lower versions if possible. When version is given and is lower
than version of installed package then it downgrades to target version. "

dnf downgrade ansible-core

should be the correct command
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RB7V5KMIUGD2BLZJET5UDUJQVGEE4K67/

[ovirt-users] Re: How to configure HA virtual machine on hosts without IPMI

[Gianluca Cecchi]

On Wed, Oct 12, 2022 at 9:14 AM Martin Perina  wrote:

>
>
> On Tue, Oct 11, 2022 at 1:42 PM Klaas Demter 
> wrote:
>
>> Don't storage leases solve that problem?
>>
>
> Not entirely, you are not able to kill a VM via storage lease, you can
> only detect that even though we lost connection from engine to host (and
> this means also VMs), then we can check if host/VM leases are refresh and
> if so, we are not trying to restart VM on a different host
>
>> I seem to recall a HA VM also works when (gets restarted on other node) a
>> hypervisor completely loses power, ie there is no response on the fencing
>> device. I'd expect it to work the same without a fencing device.
>>
>
> So if that happens, it's not a completely correct setup. If you want
> reliable power management, then your power management network should be
> independent on your data network, so if there is an issue with data
> network, you should be able to use power management network to check power
> status and perform reboot if needed. Of course if both networks are down,
> then you have a problem, but that should be a rare case.
>
>
>> Greetings
>>
>> Klaas
>>
>>
>
On September 2021 I simulated some Active-Active DR tests on one
environment based on RHV 4.4.x with 1 host in Site A and 1 host in Site B.
See also here:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/disaster_recovery_guide/active_active

Cluster configuration:
. enable fencing --> yes
. skip fencing if host has live lease --> yes
. skip fencing on cluster connectivity issues --> yes with threshold 50%

I simulated (through iptables rules) unreachability of host and IPMI device
of host in Site B.
One HA VM ha-vm and one not HA VM no-ha-vm running on host in Site B
Generate kernel panic on host in Site B (so that it doesn't renew leases)
(host in Site B based on RHEL8 will make automatic reboot after crash dump
and I stop it in BIOS boot phase so that the server doesn't come up again)
The VM ha-vm has been correctly restarted on host in Site A after the
defined timeout

Sep 10, 2021, 6:09:51 PM Host rhvh1 is not responding. It will stay in
Connecting state for a grace period of 81 seconds and after that an attempt
to fence the host will be issued.
Sep 10, 2021, 6:09:51 PM VDSM rhvh1 command Get Host Statistics failed:
Connection timeout for host 'rhvh1', last response arrived 22501 ms ago.
...
Sep 10, 2021, 6:11:25 PM VM ha-vm was set to the Unknown status.
Sep 10, 2021, 6:11:25 PM VM non-ha-vm was set to the Unknown status.
Sep 10, 2021, 6:11:25 PM Host rhvh1 became non responsive and was not
restarted due to Fencing Policy: 50 percents of the Hosts in the Cluster
have connectivity issues.
...
Sep 10, 2021, 6:13:43 PM Trying to restart VM ha-vm on Host rhvh2

And the VM ha-vm becomes active and operational.
Note that non-HA VM non-ha-vm will remain in unknown status
If I remove iptables rules and let rhvh1 boot it correctly joins the
cluster without trying to restart the VM.

The only limitation is that if the Site with the isolation problems is the
one where the SPM host is running, you will have HA for VMs, but you cannot
elect new SPM.
So you cannot for example add new disks or change the size of existing ones.
But this is an acceptable temporary situation in case of DR action, that I
was simulating.

If you try to force rhvh2 to become SPM you get:
Error while executing action: Cannot force select SPM. Unknown Data Center
status.

To have the new SPM (on rhvh2 in my case), in a real scenario (that I
simulated before having rhvh1 boot into the OS) you have to verify the real
state of Site B and that all has been powered off (to prevent a future data
corruption if SIte B comes up again) and then go and select

"confirm host has been rebooted" on rhvh1

you get a window with "Are you sure?"

Please make sure the Host 'rhvh1' has been manually shut down or rebooted.
This Host is the SPM. Executing this operation on a Host that was not
properly manually rebooted could lead to Storage corruption condition!
If the host has not been manually rebooted hit 'Cancel'.
Confirm Operation --> check the box

at this point rhvh2 becomes the new SPM and the non-HA VM non-ha-vm
transitions from unknown status to down and the DC becomes up
>From an events point of view you get:

Sep 10, 2021, 6:23:40 PM Vm non-ha-vm was shut down due to rhvh1 host
reboot or manual fence
Sep 10, 2021, 6:23:41 PM All VMs' status on Non Responsive Host rhvh1 were
changed to 'Down' by user@internal
Sep 10, 2021, 6:23:41 PM Manual fence for host rhvh1 was started.
Sep 10, 2021, 6:23:43 PM Storage Pool Manager runs on Host rhvh2 (Address:
rhvh2), Data Center MYDC.

At this point you can start the non-ha-vm VM
Sep 10, 2021, 6:24:44 PM VM non-ha-vm was started by user@internal (Host:
rhvh2).

During these tests I opened a case because the SPM related limitation was
not documented inside the DR guide and I got it added (see paragraph 2.3
Storage Considerations)

What described above should 

[ovirt-users] Re: ovirtmgmt Bridge - Which NIC? - Advice Please

[Gianluca Cecchi]

On Tue, Sep 27, 2022 at 5:22 PM Matthew J Black 
wrote:

> I need a quick piece of advice, please.
>
> I'm at setting up the oVirt Engine VM (ie doing a "hosted-engine
> --deploy") stage.
>
> The Host has 3 NICs.
>
> NIC_1 and NIC_2 are bonded (bond1) and run 2 VLANs (on bond1.1 and
> bond1.2).
>
> VLAN_1 is to be used as the "everyday connection VLAN for the VMs"
> (including the oVirt Engine VM - I think).
>
> VLAN_2 is *only* to be used for data traffic to-and-from our Ceph Cluster
> (ie via the Ceph iSCSI Gateway Nodes).
>
> NIC_3 (running VLAN_3) is to be used for oVirt-host-to-oVirt-host comms
> (including "local" Gluster traffic - yes, the (oVirt) hosts are running a
> couple of Gluster drives).
>
> My question is: Which interface should we use for the "ovirtmgmt" Bridge?
>
> I suspect it should be NIC_3 (VLAN_3), and I'm 99.999% sure it *shouldn't*
> be bond1.2 (VLAN_2), but it might be bond1.1 (VLAN_1), so I thought I'd
> better get peoples' input.
>
> You see, I'm not sure what the purpose of the "ovirtmgmt" bridge is. Is it
> for humans to talk to the oVirt Engine, or is it for the oVirt Engine to
> talk to the VMs (and hosts), or is it for some other purpose, or is it for
> some combination of the these? (I have read the doco on the ovirtmgmt
> bridge, and I'm still somewhat confused.)
>
> So, if someone wouldn't mind getting back to me about this, I'd appreciate
> it.
>
> Cheers
>
> Dulux-Oz
>
>
In general the IP on the ovirtmgmt bridge is the one used to connect to the
engine server (eg for web admin gui access and ssh access to the server to
check logs and so on) and it is also used for mgmt communication between
engine and hosts.
So the choice of the adapter/bond should take this into consideration.
No VMs involved and no need to use that logical network (the ovirtmgmt one)
also for VMs virtual nics, but you can do it if needed/practical (eg lab or
small environments).
The must in general is that the network where you decide to put the engine
IP has to be routable with the networks where you decide to put the IPs of
your hosts (eg host1 could be on network1 and host2 in network2, with both
network1 and network2 routable with the network where the engine IP lives).
In the case of a Self Hosted Engine environment (engine as a VM inside the
oVirt infra that it manages), you start the deployment process using a
command on one server that will become at the end one of the managed hosts
(hypervisors). So in general for the ovirtmgmt bridge you will use the
network and so the adapter/bond that you use when you connect from your
client to the host through ssh to start the whole process with the
"hosted-engine --deploy" command.

See also this for temporary IP allocation for the self hosted engine
appliance (downstream RHV links provided, but quite the same for oVirt):
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/planning_and_prerequisites_guide/rhv_requirements#general_requirements

Also these:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/planning_and_prerequisites_guide/considerations#networking-considerations
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/planning_and_prerequisites_guide/recommendations#networking-recommendations

and review the deploy process flow:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/installing_red_hat_virtualization_as_a_self-hosted_engine_using_the_command_line/installing_the_red_hat_virtualization_manager_she_cli_deploy#Deploying_the_Self-Hosted_Engine_Using_the_CLI_install_RHVM

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EWRAKMFEZHGD4TSSQZPECNJWWFIV7BMQ/

[ovirt-users] Re: Upgrade 4.4 to 4.5 node package issue

[Gianluca Cecchi]

On Fri, Aug 12, 2022 at 6:17 AM Jason Beard  wrote:

> I'm updating my environment from 4.4 to 4.5. The Hosted Engine upgrade
> completed with no errors. On both nodes it fails at step 1. My nodes are
> CentOS Stream 8. Is there a release package I can download somewhere? Or is
> something else going on?
>
> # dnf install -y centos-release-ovirt45
> Last metadata expiration check: 0:08:42 ago on Thu 11 Aug 2022 10:43:28 PM
> CDT.
> No match for argument: centos-release-ovirt45
> Error: Unable to find a match: centos-release-ovirt45
>
> # cat /etc/os-release
> NAME="CentOS Stream"
> VERSION="8"
> ID="centos"
> ID_LIKE="rhel fedora"
> VERSION_ID="8.6.2109.0"
> VARIANT="oVirt Node 4.4.10.2"
> VARIANT_ID="ovirt-node"
> PRETTY_NAME="oVirt Node 4.4.10"
> ANSI_COLOR="0;31"
> CPE_NAME="cpe:/o:centos:centos:8"
> HOME_URL="https://www.ovirt.org/;
> BUG_REPORT_URL="https://bugzilla.redhat.com/;
> PLATFORM_ID="platform:el8"


I don't know the reason of not finding the package, but I found it here on
CentOS Stream mirrors:
http://mirror.centos.org/centos/8-stream/extras/x86_64/os/Packages/centos-release-ovirt45-8.6-1.el8.noarch.rpm

Is extras repo enabled on your system?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G5GRZ32DZO6NHRR6WBC47W4VR4P4QAI4/

[ovirt-users] Re: RHV/oVirt and Ansible Tower/awx

[Gianluca Cecchi]

On Fri, Aug 12, 2022 at 3:57 AM Colin Coe  wrote:
[snip]

>
> The workflow on Ansible Tower server is failing with "ovirtsdk4 version
> 4.4.0 or higher is required for this module".
>
> So how can I wedge the v4.4 ovirt SDK onto this RHEL7 Ansible Tower node?
>
> Thanks
>

Possibly latest sdk4 for EL7 is here:
https://resources.ovirt.org/pub/ovirt-4.3/rpm/el7Server/x86_64/python-ovirt-engine-sdk4-4.3.4-2.el7.x86_64.rpm
But it has been released mid 2020 and for 4.3. I think it should work in
terms of API but perhaps it is missing some latest functionality
Not tried against 4.4 or 4.5

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/74VDS5BTJFLBGDPM7IRKKNAOXBMRHYE7/

[ovirt-users] Re: Nested Virtualization, please, help-me

[Gianluca Cecchi]

On Thu, Aug 11, 2022 at 10:59 PM Jorge Visentini 
wrote:

> Hi folks.
>
> So... I read the documentation in many sites and this forum too, buuut the
> nested feature do not worked yet.
>
>
> *My host oVirt so far:*
> cat /sys/module/kvm_intel/parameters/nested
> 1
>
> Kernel parameters edited by Engine on *Edit Host -> Kernel*.
> Reinstall the host and reboot.
>
> *cat /proc/cmdline*
> BOOT_IMAGE=(hd0,msdos1)//ovirt-node-ng-4.4.10.2-0.20220303.0+1/vmlinuz-4.18.0-365.el8.x86_64
> crashkernel=auto resume=/dev/mapper/onn-swap 
> rd.lvm.lv=onn/ovirt-node-ng-4.4.10.2-0.20220303.0+1
> rd.lvm.lv=onn/swap rhgb quiet
> root=/dev/onn/ovirt-node-ng-4.4.10.2-0.20220303.0+1
> boot=UUID=07e688ed-8d46-4932-b070-378c75ba1921 rootflags=discard
> img.bootid=ovirt-node-ng-4.4.10.2-0.20220303.0+1 kvm-intel.nested=1
>
>
> *On VM guest:*
> Host set to "Specific Host" and "Pass-Through Host CPU"
>
> vmx is ok
>
> *root@kceve01:~# kvm-ok*
> INFO: /dev/kvm exists
> KVM acceleration can be used
>
>
> *Result:*
> I am trying to virtualize the EVE-NG. I can start the guest of the EVE-NG,
> but I don't know why I can't access it. It's like blocking any package...
>
> I don't know yet if it is a virtualization problem or network problem...
> If you have other tips for me, I glad, very glad.
>
> All the best!
> --
> Att,
> Jorge Visentini
> +55 55 98432-9868
>
>
Probably you have to modify the logical network of the vnic of your VM, or
create a vnic profile and assign to the VM vnic, where you set the network
filter field from the default value of vdsm-no-mac-spoofing to "no network
filter"
See also here:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/chap-logical_networks#sect-Virtual_Network_Interface_Cards

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LIFHXY7623XWZYRD732NHHUBK76SI6PG/

[ovirt-users] Re: Template import in 4.5

[Gianluca Cecchi]

On Wed, Jul 20, 2022 at 11:22 AM Gianluca Cecchi 
wrote:

> On Wed, Jul 20, 2022 at 11:14 AM Benny Zlotnik 
> wrote:
>
>> you may have hit this bug
>> https://bugzilla.redhat.com/show_bug.cgi?id=2104597
>>
>>
>>
> Thanks. I confirm I get the same error in RHV.
> I asked inside the bugzilla to create a cloned one for RHV if not already
> there
> Gianluca
>

Just to add 2 things that could be important in general for oVirt 4.5 users:

1. in oVirt (not tried yet in RHV) the import error happens also if the
export is done in the same version (4.5.x), not only previous ones
2. in both oVirt and RHV the import error happens also if you try the
recommended way: export as OVA (instead of "Export to Export Domain) and
then import of the OVA.

BTW: the export domain object is deprecated, but still in RHV 4.4-SP1 (and
I think in oVirt 4.5.x too) when you select
Compute -> Templates
Import button at top right
the window you are then proposed contains as default the option where
"Source" field is "Export Domain", while I think that to be consistent, the
drop-down option button should contain as default the other possible
choice: "Virtual Appliance (OVA)"

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/STZIZXKL7P4WXHF5ZWY7GUDC3PBQJKGT/

[ovirt-users] Re: Template import in 4.5

[Gianluca Cecchi]

On Wed, Jul 20, 2022 at 11:14 AM Benny Zlotnik  wrote:

> you may have hit this bug
> https://bugzilla.redhat.com/show_bug.cgi?id=2104597
>
>
>
Thanks. I confirm I get the same error in RHV.
I asked inside the bugzilla to create a cloned one for RHV if not already
there
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2L7JH4DVYV4QP3L3QA56I4CQYSRYXUKN/

[ovirt-users] Template import in 4.5

[Gianluca Cecchi]

Hello,
I have a problem importing templates in downstream product 4.4-SP1 that
should match in some way oVirt 4.5.x.
I get a ui exception preventing me from importing the template.
I have already opened a case for it (03270063).
Just wondering if it can be a general problem and in particular an oVirt
problem too. I have not at hand an oVirt 4.5 env.
Can anyone in oVirt 4.5.x confirm that Template Import through export
domains work as expected in that environment?
In my case the template has been exported from a 4.4.x environment, so the
perfect match would be to export a template in 4.4 and then import it in 4.5
Thanks in advance
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XVNDQCV6RL2BPOXIODNS7AXIBI553MME/

[ovirt-users] Re: extract qcow2 or raw disks from ovirt OVA

[Gianluca Cecchi]

On Tue, Jul 19, 2022 at 5:29 PM dhanaraj.ramesh--- via Users <
users@ovirt.org> wrote:

> Hi Team
>
> May I know how do I extract qcow2 or raw disks out of ovirt OVA file
> please. Basically I want to move some of the vms to Nutanix AHV or Vmware
> cluster, for that I need either qcow2 or raw disks of each of the running
> vms.
>
>
If you export as OVA from oVirt you will get a tar file, so that if you
untar it you will also find the disks' files.

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DFBXRIR5SVXAEH3DBK3DOW5Z4TPYMKGD/

[ovirt-users] Re: HCI Deployment oVirt 4.5

[Gianluca Cecchi]

On Tue, Jun 28, 2022 at 5:50 PM Clint Boggio  wrote:

> "No valid network interface has been found
> If you are using Bonds or VLANs Use the following naming conventions: "
>
> However I am using a supported naming convention. I've searched the forums
> and the general WWW and read the articles that match my errors. i've tried
> some of the options that are referenced in the articles but still no
> forward motion.
>
> Is this a common problem that somebody else has already solved and I just
> am not finding it on the web ?
>
>
Did you use classic bonding and not teaming, correct?
What output from the "ip a" command? And "nmcli con show" command?
Also, if I remember correctly, the graphical workflow is not supported, at
least in the downstream product, RHV, for HCI deployment; possibly not so
tested in upstream oVirt too?
In fact at the landing page for RHV 4.4 (comprising 4.4-SP1, that matches
somehow oVirt 4.5.x):
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4
there is only the command line based document for self-hosted engine
deployment

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BAJ4CSL2HIIFDADHBP4KWFNNK7ZUZNT3/

[ovirt-users] Re: [External]: Re: Need to transfer a VM from oVirt to vSphere

[Gianluca Cecchi]

On Fri, Jun 24, 2022 at 4:38 PM David M. Hornsby 
wrote:

> I have done this before quite a few times. What I did was:
>
>
>1. Export the qcow2 or raw file and convert it: qemu-img convert -f
>qcow2 -O vmdk
>2. Import the vmdk into vsphere storage and convert it to thin with
>vmkfstools
>3. Then create the vm definition.
>4. There will be some minor driver and ethernet type stuff to fix.
>
> This process has worked everytime. You probably could use a tool like virt
> v2v or veeam to accomplish this as well.
>
> David
>
>
Thanks David, I didn't see your e-mail while I was writing my answer.
I confirm I went a similar way (but passing anyway from OVA and then
extracting the disk...)

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/26DBI7PJTXNY4UVOF3INAZGW2TTRBUFT/

[ovirt-users] Re: Need to transfer a VM from oVirt to vSphere

[Gianluca Cecchi]

On Fri, Jun 24, 2022 at 4:33 PM Michal Skrivanek 
wrote:

>
>
> > On 24. 6. 2022, at 11:58, Gianluca Cecchi 
> wrote:
> >
> > Hello,
> > I need to transfer a VM from oVirt 4.4 to vSphere.
> > I see that the "Export as OVA" in the GUI exports in a format compatible
> with oVirt but not vSphere.
> > Any hint?
> > Any way to easily convert the oVirt generated OVA to a vSPhere
> compatible one?
>
> not that i know of. it depends on how resilient is vmware's ova import ...
> but if it is a single or a few vms then you can give up on settings and
> just import raw disks?
>
>
>
Ok, in fact I went sort of that way. Simple VM with RH EL 8.5 and only one
10Gb boot disk that worked as the quorum device host of a rhel 8 cluster.
More in detail, if it can be of any help for others:

. Creation on vSphere of a rhel7 VM (no choice of rhel8 because it is
currently on 6.5) without disks and with paravirtual controller

. On the source rhel8 oVirt VM, update of initramfs, adding the vmw_pvscsi
kernel driver
cd /boot
cp -p initramfs-$(uname -r).img initramfs-$(uname -r).img.orig
dracut --force --kver $(uname -r) --add-drivers vmw_pvscsi
/boot/initramfs-$(uname -r).img

. export VM as OVA on oVirt

. extract virtual disk from OVA (tar -xf qdevice.ova)

. convert virtual disk into vmdk format (done on a Fedora36 workstation
with qemu-img-6.2.0-12.fc36.x86_64)
qemu-img convert -O vmdk 3750043c-100c-42e6-8bd5-2cff2f81ee79 qdevice1.vmdk

. upload of qdevice1.vmdk to the ESXi server from vSphere Web Client,
inside the target VM directory of the related datastore

. connect via ssh to ESXi server and further convert the file to a more
"acceptable" vmdk format
cd /vmfs/volumes/vmfslocal-myesxi-2TB/qdevice
vmkfstools -i qdevice1.vmdk qdevice.vmdk
see here: https://kb.vmware.com/s/article/1028943
I got "Unsupported and/or invalid disk type 2" when booting, without this
further conversion step

. removal of qdevice1.vmdk from vSphere Web Client interface

. From vSphere Web Client Add existing disk to the VM, using the newly
converted disk (qdevice.vmdk)

. boot VM (with cluster related services disabled)

. customizations such as network reconfiguration (due to network hw change)
and VMware Tools guest managed install
dnf install open-vm-tools
systemctl enable vmtoolsd --now
In my case I didn't have qemu-guest-agent service enabled in the VM,
otherwise I should have disabled it too
Enablement of cluster related services
systemctl enable corosync-qnetd
systemctl enable pcsd
reboot

. At the end the 2-nodes rhel8 cluster automatically reconnects without
problems to the quorum device host

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E2XZWOW4NULHPMCBBS3CIUDVPKXELYVF/

[ovirt-users] Need to transfer a VM from oVirt to vSphere

[Gianluca Cecchi]

Hello,
I need to transfer a VM from oVirt 4.4 to vSphere.
I see that the "Export as OVA" in the GUI exports in a format compatible
with oVirt but not vSphere.
Any hint?
Any way to easily convert the oVirt generated OVA to a vSPhere compatible
one?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PPRS47O346Q3THFPEWYOJFPWEXN6P2R2/

[ovirt-users] Re: local on host storage domain full, how to clean up

[Gianluca Cecchi]

On Sun, Jun 5, 2022 at 7:00 PM Patrick Hibbs  wrote:

> You can use the all_disks_for_vms view, instead of all_disks. Then add the
> vm_id and / or vm_names columns.
>
> For example:
>
> /usr/share/ovirt-engine/dbscripts/engine-psql.sh -c "select
> disk_id,image_guid,disk_alias,disk_profile_name,vm_id,vm_names from
> all_disks_for_vms where disk_content_type='0' order by disk_alias" >
> /root/disk_ids-to_vms.txt
>
> -Patrick Hibbs
>
>
>

Thas seems indeed better, thanks!

 engine=# select
disk_id,image_guid,disk_alias,disk_profile_name,vm_id,vm_names from
all_disks_for_vms where disk_content_type='0' and
disk_alias='ostack-ceph1_Disk3';
   disk_id|  image_guid
 | disk_alias |
disk_profile_name |vm_id |   vm_names
--+--++-
--+--+--
 1093ada3-65b2-407a-a6b8-fd9529f4a0db |
ded7c7c7-477f-44e3-8ac5-8908bde6340c | ostack-ceph1_Disk3 |
2t_1  | 711e5dc6-04a1-42a4-b52c-96685bc19b1f | ostack-ceph1
(1 row)

so that I can link the directory and disk file under
/2t_1/images/caa6fd69-e371-4476-89eb-cbbae82c2add/images

1093ada3-65b2-407a-a6b8-fd9529f4a0db/ded7c7c7-477f-44e3-8ac5-8908bde6340c

with the disk alias ostack-ceph1_Disk3

and with the corresponding vm id as seen from GUI
711e5dc6-04a1-42a4-b52c-96685bc19b1f and its name ostack-ceph1

I'm going to crosscheck in a SAN based configuration if any sort
of"translation" is to be done, due to the layout based on LVM and not on
filesystem

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZZY7DOYGCDVEIKM4Y2OXEVQFIQXRKOKO/

[ovirt-users] Re: how to force engine certificate renewal

[Gianluca Cecchi]

On Mon, Jun 6, 2022 at 3:08 PM Maton, Brett 
wrote:

> Hi Gianluca,
>
>   My issue is I'm getting the alert, but 'engine-setup --offline' is not
> offering to update the certificates.
>   At the moment I'm hoping it's simply that engine is reporting that
> certificates need to be renewed before engine-setup is configured to offer
> the option to upgrade.
>
> Cheers,
> Brett
>
>
Yes, I understood it and I also subscribed to your bugzilla.
My post was to give a sample of an expiry offset sufficient to get the
prompt...
My suspicion is that the web admin portal has hardcoded a 6 months notice,
while the "engine-setup" command has a 3 months one.
It should be easy to verify for someone who knows the code (not me... ;-).

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2MC2HPIFCZMDU34D3FHAONG6FIKYLCJC/

[ovirt-users] Re: how to force engine certificate renewal

[Gianluca Cecchi]

On Mon, Jun 6, 2022 at 2:54 PM Maton, Brett 
wrote:

> Opened a bug report:  2093954 – Engine certificate alert, no option to
> update offered by engine-setup (redhat.com)
> 
>
>
A the beginning of last week I had to apply a certificate renewal on a RHV
4.4.7 environment.
It is the commercial product but I think pretty similar in behaviour to the
corresponding oVirt release. The engine certificate would have expired on
17th of August, so in between 2 and 3 months later.

The command "engine-setup --offline" automatically proposed to renew them.
It gave:
"
  --== PKI CONFIGURATION ==--

  One or more of the certificates should be renewed, because they
expire soon, or include an invalid expiry date, or they were created with
validity period longer than 398 days, or do not include the subjectAltName
extension, which can cause them to be rejected by recent browsers and up to
date hosts.
  See https://access.redhat.com/solutions/1572983 for more details.
  Renew certificates? (Yes, No) [No]: Yes
"
and then going ahead:

"
. . .
[ INFO  ] Upgrading CA
[ INFO  ] Renewing engine certificate
[ INFO  ] Renewing jboss certificate
[ INFO  ] Renewing websocket-proxy certificate
[ INFO  ] Renewing apache certificate
[ INFO  ] Renewing reports certificate
[ INFO  ] Updating OVN SSL configuration
[ INFO  ] Updating OVN timeout configuration
. . .
[ INFO  ] Restarting httpd
  Web access is enabled at:
  http://my_engine:80/ovirt-engine
  https://my_egine:443/ovirt-engine
. . .
  --== END OF SUMMARY ==--
"

But I don't know the exact number of days under which to get the prompt and
if this number is in any way configurable...
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/USQEBUUR3V7LCWDIJ5YRTSMLFHTLJZDF/

[ovirt-users] Re: local on host storage domain full, how to clean up

[Gianluca Cecchi]

On Mon, May 30, 2022 at 4:44 PM _isi _  wrote:

> Do you mean something like this ?
>
> /usr/share/ovirt-engine/dbscripts/engine-psql.sh -c "select
> disk_id,image_guid,disk_alias,disk_profile_name from all_disks where
> disk_content_type='0' order by disk_alias" > /root/disk_ids-to_vms.txt
>
> isi
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3FBFDABUYYTMVWQGJWRKAXESO3S67JWO/


partially, because in my case if I take a VM with VM ID
711e5dc6-04a1-42a4-b52c-96685bc19b1f

It has 3 disks, one of which has the alias ostack-ceph1_Disk3

the query for this disk gives
 select disk_id,image_guid,disk_alias,disk_profile_name from all_disks
where disk_content_type='0' order by disk_alias;
. . .
 1093ada3-65b2-407a-a6b8-fd9529f4a0db |
ded7c7c7-477f-44e3-8ac5-8908bde6340c | ostack-ceph1_Disk3   | 2t_1

And I get under /2t_1

/2t_1/images/caa6fd69-e371-4476-89eb-cbbae82c2add/images

# ll | grep 1093
drwxr-xr-x. 2 vdsm kvm 4096 Apr 20  2021
1093ada3-65b2-407a-a6b8-fd9529f4a0db
#

# cd 1093ada3-65b2-407a-a6b8-fd9529f4a0db/
# ll
total 156872396
-rw-rw. 1 vdsm kvm 161061273600 Apr 30  2021
ded7c7c7-477f-44e3-8ac5-8908bde6340c
-rw-r--r--. 1 vdsm kvm  289 Apr 20  2021
ded7c7c7-477f-44e3-8ac5-8908bde6340c.meta
#

but I miss the link between the id of the VM and the disk, that is what I
would like to get
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BJ5J4KNMMZ4PNWAYHAC36AW7T4W4ICZU/

[ovirt-users] Re: local on host storage domain full, how to clean up

[Gianluca Cecchi]

On Mon, May 30, 2022 at 7:56 AM Yedidyah Bar David  wrote:

> On Fri, May 27, 2022 at 11:04 AM Gianluca Cecchi
>  wrote:
> >
> > Hello,
> > I have a local based storage domain that has got full, so that it is now
> inactive and virtual machines that are on it are paused (vm paused due to
> lack of storage space).
> > Any advice on how to clean up, eventually deleting some of them?
> >
> > # df -h /2t_2
> > FilesystemSize  Used Avail Use% Mounted on
> > /dev/mapper/vg_2t_2-2t_2  1.8T  1.7T 0 100% /2t_2
>
> Why is the size (1.8T) different from Used (1.7T) despite Use%=100%?
>
> If this is because it's an ext4 filesystem, you can try reducing the
> amount reserved to root ('tune2fs -m 1' or so). I think the fs should
> be unmounted for this.
>
>
Yes, I think the reserved default space.
In the meantime I selected a not important VM where I had a 100Gb data disk
(it was the only one of this type of disk size, so it was easy to find it
on filesystem) and executed

cat /dev/null > disk_file

so that I didn't have any logical inconsistency from oVirt point of view
and 100Gb of space immediately released.
Then I was able to activate the storage domain and delete the VM and go on
with further analysis on disk usage.

Anyway it would be useful to have a way to search through the engine
database to have an easier mapping between disk files and VMs.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/44V4KIVXG4RPRAKUCZH4DN2VV3KLUXSB/

[ovirt-users] local on host storage domain full, how to clean up

[Gianluca Cecchi]

Hello,
I have a local based storage domain that has got full, so that it is now
inactive and virtual machines that are on it are paused (vm paused due to
lack of storage space).
Any advice on how to clean up, eventually deleting some of them?

# df -h /2t_2
FilesystemSize  Used Avail Use% Mounted on
/dev/mapper/vg_2t_2-2t_2  1.8T  1.7T 0 100% /2t_2
[root@ovirt01 fdf9546c-68fa-42c9-8a10-78ef3ee534b8]#

Is there any easy way to map disk-to-vm of directories inside
/2t_2/images/dbf9611d-9090-42d6-81e0-58105bc20011/images/ so that I can
"sacrifice" some VMs deleting the corresponding disks' directories, to be
able at least to activate the storage domain again and make a cleaner check?
Or any other suggestions? I'm not able to expand it.
It is not directly managed by me and I suppose too much storage
over-provisioning has been done.

Thanks in advance.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NHFMESDL672LL7NLM2SIAYQG6M4PX2M4/

[ovirt-users] how to force engine certificate renewal

[Gianluca Cecchi]

Hello,
I'm currently still on 4.4.x.
Suppose I have an engine certificate expiring on mid August and I want to
force renew it now using "engine-setup --offline" command.
How can I do it if possible?
How many days before expiration I get the message that it is expiring soon
with a proposal of renewing it when running "engine-setup"?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4BZ724AJQ3OWJRZLCSR2Y3PPCBKG7QNC/

[ovirt-users] Re: Ovirt-engine , certificate issue

[Gianluca Cecchi]

On Tue, May 17, 2022 at 7:36 PM Sharon Gratch  wrote:

> Hi,
>
> On Tue, May 17, 2022 at 7:33 PM Angel R. Gonzalez 
> wrote:
>
>> Hello,
>>
>> I've a issue when I try log in ovirt-engine manager with a browser. The
>> error message is:
>>
>>  PKIX path validation failed:
>> java.security.cert.CertPathValidatorException: validity check failed
>>
>> The ovirt version is 4.4.5.11-1.
>>
>> I follow the next commands for try resolve it.
>>
>>
>> > # cp -a /etc/pki/ovirt-engine "/etc/pki/ovirt-engine.$(date "+%Y%m%d")"
>> > # SUBJECT="$(openssl x509 -subject -noout -in
>> > /etc/pki/ovirt-engine/certs/apache.cer | sed 's/subject= //')"
>> > # /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name=apache
>> > --password="PASSWORD" --subject="${SUBJECT}"
>> > # openssl pkcs12 -passin "pass:PASSWORD" -nokeys -in
>> > /etc/pki/ovirt-engine/keys/apache.p12 >
>> > /etc/pki/ovirt-engine/certs/apache.cer
>> > # openssl pkcs12 -passin "pass:PASSWORD" -nocerts -nodes -in
>> > /etc/pki/ovirt-engine/keys/apache.p12 >
>> > /etc/pki/ovirt-engine/keys/apache.key.nopass
>> > # chmod 0600 /etc/pki/ovirt-engine/keys/apache.key.nopass
>> > # systemctl restart ovirt-engine.service
>> But after restarting the issue is the same.
>>
>> Any idea?
>>
>
> Maybe try to restart the apache HTTP Server as well:
> *systemctl restart httpd*
>
> If it still doesn't work then please share the errors within the engine
> log /var/log/ovirt-engine/engine.log
>
> Thanks,
> Sharon
>
>
>
Otherwise you can run
engine-setup --offline
(it will not change anything on current config and will not try to update
any package)
between the answers to give it will notice that your certificate is expired
and you have to answer yes to the question to renew it
After that you should be able to access the engine again

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MHQNQRN4B7KRNTJ6XGRT4P5RVATV6UJ2/

[ovirt-users] Re: Problem patching & upgrading a RHEL oVirt host

[Gianluca Cecchi]

On Thu, May 12, 2022 at 1:10 PM Sandro Bonazzola 
wrote:
[snip]

>
> you can:
>
> rpm -e --justdb centos-stream-release
> dnf update redhat-release -y
> rpm -i --justdb --nodeps --force "
> http://mirror.centos.org/centos/8-stream/BaseOS/$(rpm --eval
> '%_arch')/os/Packages/centos-stream-release-8.6-1.el8.noarch.rpm"
>
> Alma, Rocky and others are providing centos-release in their own release
> rpm so this step is not needed there.
>
>

I don't like the "--nodeps" part... ;-(
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WNFQPH4VTEXFFBH4VBYJ4YAX2OVOJV3P/

[ovirt-users] oVirt and cluster level 4.7

[Gianluca Cecchi]

Hello,
I've not had the chance to try 4.5 yet, but in a thread I saw reference to
a supposed cluster level 4.7.
I didn't find anything special in release notes about it, its features and
matrix of compatibility levels usable in 4.5 (only 4.7 up or what?)
I found this bugzilla, now closed, where in some part it was asked to file
a doc part
https://bugzilla.redhat.com/show_bug.cgi?id=2021545

Any further information?

BTW: what are the versions of libvirt and qemu-kvm used in latest 4.5.x?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V6W3BNX7GHG66X2NOWTV6PVZNP2TF3R3/

[ovirt-users] Re: vnc certificate renew

[Gianluca Cecchi]

On Fri, May 6, 2022 at 10:59 AM Gianluca Cecchi 
wrote:

> On Fri, May 6, 2022 at 10:44 AM Gianluca Cecchi 
> wrote:
>
>> On Mon, May 2, 2022 at 6:02 PM  wrote:
>>
>>> Hi,
>>>
>>> LAst month a renewed our hosts certificates by the "Enroll certificates"
>>> method.
>>> The "/etc/pki/vdsm/libvirt-vnc/server-cert.pem" certificate wasn't
>>> renewed on my nodes (other certificates were).
>>>
>>> How can i renew this certificate too?
>>>
>>> thanks
>>> csabany
>>>
>>>
>> Actually I think this could be a bug in enrolling certificate job on
>> hosts from web admin gui.
>> I'm having the same problem updating from downstream RHV 4.4.10-6 to
>> 4.4.10-7 with RHV-H hosts and the enrolling of certificates takes in
>> consideration these directories
>>
>
>
In my Red Hat case confirmed that bug is already opened for this problem:
https://bugzilla.redhat.com/show_bug.cgi?id=2043146
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2OV43X2DMAFDZHYTIC6G5WTSMM3XB2BH/

[ovirt-users] Re: vnc certificate renew

[Gianluca Cecchi]

On Fri, May 6, 2022 at 10:44 AM Gianluca Cecchi 
wrote:

> On Mon, May 2, 2022 at 6:02 PM  wrote:
>
>> Hi,
>>
>> LAst month a renewed our hosts certificates by the "Enroll certificates"
>> method.
>> The "/etc/pki/vdsm/libvirt-vnc/server-cert.pem" certificate wasn't
>> renewed on my nodes (other certificates were).
>>
>> How can i renew this certificate too?
>>
>> thanks
>> csabany
>>
>>
> Actually I think this could be a bug in enrolling certificate job on hosts
> from web admin gui.
> I'm having the same problem updating from downstream RHV 4.4.10-6 to
> 4.4.10-7 with RHV-H hosts and the enrolling of certificates takes in
> consideration these directories
>
> /etc/pki/libvirt
> /etc/pki/vdsm/certs
> /etc/pki/vdsm/libvirt-migrate
> /etc/pki/vdsm/libvirt-spice
>
> But not:
> /etc/pki/vdsm/libvirt-vnc
>
> I think it could impact oVirt too.
>
> In case Red Hat guys want to see logs of my RHV environment, I've opened
> the case 03212406 for this problem.
>
> Gianluca
>

I forgot to say that the impact in my case is that due to this problem I
can't live migrate VMs between the updated hosts, because the libvirt-vnc
certificate of destination host is now expired...
and in logs of source host I get:

libvirt.libvirtError: internal error: process exited while connecting to
monitor: 2022-05-05T07:31:25.922766Z qemu-kvm: The server certificate
/etc/pki/vdsm/libvirt-vnc/server-cert.pem has expired

Perhaps is due to having graphics protocol: Spice+VNC in VM console
configuration, so both certificates (spice and vnc) are checked before
migration. Not sure

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LPNL26PR632UXMWBC7ARXXR255B44WM3/

[ovirt-users] Re: vnc certificate renew

[Gianluca Cecchi]

On Mon, May 2, 2022 at 6:02 PM  wrote:

> Hi,
>
> LAst month a renewed our hosts certificates by the "Enroll certificates"
> method.
> The "/etc/pki/vdsm/libvirt-vnc/server-cert.pem" certificate wasn't renewed
> on my nodes (other certificates were).
>
> How can i renew this certificate too?
>
> thanks
> csabany
>
>
Actually I think this could be a bug in enrolling certificate job on hosts
from web admin gui.
I'm having the same problem updating from downstream RHV 4.4.10-6 to
4.4.10-7 with RHV-H hosts and the enrolling of certificates takes in
consideration these directories

/etc/pki/libvirt
/etc/pki/vdsm/certs
/etc/pki/vdsm/libvirt-migrate
/etc/pki/vdsm/libvirt-spice

But not:
/etc/pki/vdsm/libvirt-vnc

I think it could impact oVirt too.

In case Red Hat guys want to see logs of my RHV environment, I've opened
the case 03212406 for this problem.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MDQNKYM3QLOKZZJDQZ5YAPZSDTPHMV4Y/

[ovirt-users] Re: renewal of certificates

[Gianluca Cecchi]

On Wed, Apr 20, 2022 at 2:03 PM Gianluca Cecchi 
wrote:

> Hello,
> I see that my 4.4 engine has certificate that expired on mid August.
>

has a certificate that will expire in mid August 2022 ;-)

If I'm not wrong, you can run "engine-setup --offline" to have them
> automatically renewed when you are near their expiration date...
> Is this true? What is the number of days offset I need to get them renewed?
> Are there any warnings I can set to have a reminder of engine and hosts
> certificates expiration, so that an admin can proactively renew them, and
> avoid VMs going in unknown state with needed downtime in that case?
>
> Thanks,
> Gianluca
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2P4IPOMGSKS7PIIZC35GBUYZV4EORHCX/

[ovirt-users] renewal of certificates

[Gianluca Cecchi]

Hello,
I see that my 4.4 engine has certificate that expired on mid August.
If I'm not wrong, you can run "engine-setup --offline" to have them
automatically renewed when you are near their expiration date...
Is this true? What is the number of days offset I need to get them renewed?
Are there any warnings I can set to have a reminder of engine and hosts
certificates expiration, so that an admin can proactively renew them, and
avoid VMs going in unknown state with needed downtime in that case?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FU4NKBCCNMF7QC3EDYTSMNWNXHJ7NDUI/

[ovirt-users] Re: New ovirt 4.4.10 user unable to login

[Gianluca Cecchi]

On Sat, Apr 16, 2022 at 3:24 AM  wrote:

> I just create an new user in ovirt 4.4.10 using the tool
> "ovirt-aaa-jdbc-tool".  I'm unable to log into ovirt using the newly
> created user.  I'm getting the error message: The user
> xyzabcs@internal-authz with profile [internal] is not authorized to
> perform login.
>

After configuring user authentication, you have to configure user
authorization through the web admin gui.
By default the user is not authorized to access neither the administration
portal, nor the VM portal
See here for details:
https://www.ovirt.org/documentation/administration_guide/#sect-User_Authorization

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JIIGZDYOQ5JL3WA262VZ2XDQQ3TIQDUT/

[ovirt-users] Re: info about removal of LVM structures before removing LUNs

[Gianluca Cecchi]

On Thu, Mar 31, 2022 at 4:45 PM Nir Soffer  wrote:

>
>
> Regarding removing the vg on other nodes - you don't need to do anything.
> On the host, the vg is hidden since you use lvm filter. Vdsm can see the
> vg since vdsm uses lvm filter with all the luns on the system. Vdsm will
> see the change the next time it runs pvs, vgs, or lvs.
>
> Nir
>
> Ok, thank you very much
So I will:
. remove LVM structures on one node (probably I'll use the SPM host, but as
you said it shouldn't matter)
. remove multipath devices and paths on both hosts (hope the second host
doesn't complain about LVM presence, because actually it is hidden by
filter...)
. have the SAN mgmt guys unpresent LUN from both hosts
. rescan SAN from inside oVirt (to verify LUN not detected any more and at
the same time all expected LUNs/paths ok)

I should have also the second host updated in regard of LVM structures...
correct?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQHCKQ26NSPZQB3XRCBXQHBJIXBN6PWC/

[ovirt-users] Re: info about removal of LVM structures before removing LUNs

[Gianluca Cecchi]

On Thu, Mar 31, 2022 at 1:30 PM Nir Soffer  wrote:

>
>
> Removing a storage domain requires moving the storage domain to
> maintainance
> and detaching it. In this state oVirt does not use the domain so it is
> safe to remove
> the lvs and vg on any host in the cluster.
>
> But if you remove the storage domain in engine with:
>
> [x] Format Domain, i.e. Storage Content will be lost!
>
> vdsm will remove all the lvs and the vg for you.
>
> If you forgot to format the domain when removing it, removing manually
> is fine.
>
> Nir
>
>
Thanks for answering, Nir.
In fact I think I didn't select to format the domain and so the LVM
structure remained in place (I did it some time ago...)
When you write "vdsm will remove all the lvs and the vg for you", how does
vdsm act and work in this case and how does it coordinate the nodes' view
of LVM structures so that they are consistent, with no cluster LVM in place?
I presume it is lvmlockd using sanlock as external lock manager, but how
can I run LVM commands mimicking what vdsm probably does? Or is it
automagic and I need only to run the LVM commands above without worrying
about it?
When I manually remove LVs, VG and PV on the first node, what to do on
other nodes? Simply a
vgscan --config 'devices { filter = ["a|.*|" ] }'
or what?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GL727R3JWKZF5VO2NDJIWYXN5AVZDRVA/

[ovirt-users] info about removal of LVM structures before removing LUNs

[Gianluca Cecchi]

Hello,
I'm going to hot remove some LUNS that were used as storage domains from a
4.4.7 environment.
I have already removed them for oVirt.
I think I would use the remove_mpath_device.yml playbook if I find it... it
seems it should be in examples dir inside ovirt ansible collections, but
there is not...
Anyway I'm aware of the corresponding manual steps of (I think version 8
doesn't differ from 7 in this):

. get disks name comprising the multipath device to remove

. remove multipath device
multipath -f "{{ lun }}"

. flush I/O
blockdev --flushbufs {{ item }}
for every disk that was comprised in the multipath device

. remove disks
echo 1 > /sys/block/{{ item }}/device/delete
for every disk that was comprised in the multipath device

My main doubt is related to the LVM structure that I can see is yet present
on the multipath devices.

Eg for a multipath device 360002ac0013e0001894c:
# pvs --config 'devices { filter = ["a|.*|" ] }' | grep
360002ac0013e0001894c
  /dev/mapper/360002ac0013e0001894c
a7f5cf77-5640-4d2d-8f6d-abf663431d01 lvm2 a--<4.00t <675.88g

# lvs --config 'devices { filter = ["a|.*|" ] }'
a7f5cf77-5640-4d2d-8f6d-abf663431d01
  LV   VG
Attr   LSize   Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert
  067dd3d0-db3b-4fd0-9130-c616c699dbb4 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 900.00g
  1682612b-fcbb-4226-a821-3d90621c0dc3 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---  55.00g
  3b863da5-2492-4c07-b4f8-0e8ac943803b a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  47586b40-b5c0-4a65-a7dc-23ddffbc64c7 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---  35.00g
  7a5878fb-d70d-4bb5-b637-53934d234ba9 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 570.00g
  94852fc8-5208-4da1-a429-b97b0c82a538 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---  55.00g
  a2edcd76-b9d7-4559-9c4f-a6941aaab956 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  de08d92d-611f-445c-b2d4-836e33935fcf a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 300.00g
  de54928d-2727-46fc-81de-9de2ce002bee a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---   1.17t
  f9f4d24d-5f2b-4ec3-b7e3-1c50a7c45525 a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 300.00g
  ids  a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  inboxa7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  leases   a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---   2.00g
  master   a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---   1.00g
  metadata a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  outbox   a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi--- 128.00m
  xleases  a7f5cf77-5640-4d2d-8f6d-abf663431d01
-wi---   1.00g

So the question is:
would it be better to execute something like
lvremove for every LV lv_name
lvremove --config 'devices { filter = ["a|.*|" ] }'
a7f5cf77-5640-4d2d-8f6d-abf663431d01/lv_name

vgremove
vgremove --config 'devices { filter = ["a|.*|" ] }'
a7f5cf77-5640-4d2d-8f6d-abf663431d01

pvremove
pvremove --config 'devices { filter = ["a|.*|" ] }'
/dev/mapper/360002ac0013e0001894c

and then proceed with the steps above or nothing at all as the OS itself
doesn't "see" the LVMs and it is only an oVirt view that is already "clean"?
Also because LVM is not cluster aware, so after doing that on one node, I
would have the problem about LVM rescan on other nodes

Thanks in advance,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/APXCYLSEXNQ7YHX22UIQ7IXDLCIZT26P/

[ovirt-users] Re: Correct way to search VM by mac

[Gianluca Cecchi]

On Fri, Mar 25, 2022 at 3:54 PM  wrote:

> Hi,
>
> We have a Python-SDK script to find MAC dupes in our infrastructure.
>
> Thanks for it, Nicolas.
But does it work if you have separate engines and in a scenario like mine?
Even if you have a mac pool, you could import a VM and have it retain its
original mac, that could be out of the mac pools normally admitted in that
environment.
It seems that your script has the variable below to adapt:
# Replace this with your active MAC address pools, WITHOUT the last octet
MACPOOLS = ['00:11:22:33:44', '00:55:66:77:88']

I will dig into your script, anyway.
In the meantime, querying the engine db I used something like this to find
the last two characters when the first ones are of type aa:bb:cc:dd:ee (or
in general to match what I need):

select substring(mac_addr from 16 for 2) as value from vm_interface where
mac_addr like 'aa:bb:cc:dd:ee%' order by value;

and then if I find anything in common in env1 and env2 (such as ff for last
two characters) and want to see which VMs are involved I can use

select vm_name from vm_interface,vm_static where
vm_interface.vm_guid=vm_static.vm_guid and mac_addr='aa:bb:cc:dd:ee:ff'

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ON4RQJQF6GKXHCNPI6NIDEXIIZTRAYGI/

[ovirt-users] Re: Correct way to search VM by mac

[Gianluca Cecchi]

Sorry, incomplete message sent...
today I had a problem about conflicting MAC between two different VMs.
The source of the problem was a VM created on env1 managed by engine1 and
then transferred some weeks ago to env2 managed by engine2.
The two envs share some networks and during migration I didn't change the
mac of the vnic after completing it.
So the mac was left free from env1 and used in env2.
The default mac pools are different ones between env1 and env2.
So today in env1 I created a new vm on the same vlan as the previous one
and oVirt assigned the previous one mac, now freed on it, originating big
problems...
I found an article (https://access.redhat.com/solutions/695383) to search
in the engine web admin by mac, but it was for version 3.2 and it seems it
doesn't work in 4.4.10.
In VMs page I search filling the query with

mac = my_mac
or

Vms: mac = my_mac

but it keeps thinking with 3 squares blinking in the page. I have not
so many VMs to justify time elapsing... (less then 50)

Can I search for mac? How?

Thanks,

Gianluca



On Fri, Mar 25, 2022 at 3:27 PM Gianluca Cecchi 
wrote:

> Hello,
> today I had a problem about conflicting MAC.
> The source of problem was a VM transferred from an engine environment
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2UN4APDMFAJEWXKAIEKREIFERH2WHAS4/

[ovirt-users] Correct way to search VM by mac

[Gianluca Cecchi]

Hello,
today I had a problem about conflicting MAC.
The source of problem was a VM transferred from an engine environment
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2KRK4V62C5MDPVX4TXMJNO4J6AYPZHY5/

[ovirt-users] Cloning VM selecting part of the disks

[Gianluca Cecchi]

Hello,
in recent versions of oVirt (eg my last 4.4.10) there is the feature to
make a clone of a running  VM.
This operation passes through a temporary VM snapshot (then automatically
deleted) and cloning of this snapshot.
Sometimes there is a need to clone a VM but only a subset of its disks is
required (eg in my case I want to retain boot disk, 20Gb, and dedicated sw
disk, 20Gb, but not data disk, that usually is big... in my case 200Gb).
In this scenario I have to go the old path where I explicitly create a
snapshot of the VM, where I can select a subset of the disks, then I clone
the snapshot and last I delete the snapshot.
Do you think it is interesting to have the option of selecting disks when
you clone a running VM and go automatic..?
If I want to open a bugzilla as RFE, what components and options I have to
select?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CO34RAB2EOA3IYA4LDSLTZYY4MR4UQJA/

[ovirt-users] Re: OVIRT INSTALLATION IN SAS RAID

[Gianluca Cecchi]

On Tue, Mar 8, 2022 at 2:57 PM  wrote:

> I am unable to run lspci command since i am not able to boot the server
> with live cd or install Linux.
>
> anyhow I get some more information about the SAS Driver after installing
> windows server 2012,  here is the information
>
> Device Descprition: DELL PERC 6/i Integrated
>
> Devive Instance path:
>  PCI\VEN_1000_0060_1F0C1028_04\4&254D1C7F&0&0020
>
> hardware ids :
> PCI\VEN_1000_0060_1F0C1028_04
>
>
So, based on the link I already provided, you are here:
"
. . .
 The following adapters from the megaraid_sas driver have been removed:
. . .
SAS1078R, PCI ID 0x1000:0x0060
. . .
"
and the links from elrepo I gave are ok. Kernel module driver to use:
megaraid_sas
Follow also the other link with instructions on how to use the
corresponding dud to install oVirt node.
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJT6C6ETOLXYFEPPHUW7PZVGER5I6ZVX/

[ovirt-users] Re: OVIRT INSTALLATION IN SAS RAID

[Gianluca Cecchi]

On Sat, Mar 5, 2022 at 9:48 AM  wrote:

> how can I identify the correct DUD package? My server is Dell PowerEdge
> 710 server with SAS RAID 1  PERC 6/i
>

For both RAID controllers and Network adapters (it happened to me for an
old HP blade) you can check here, comparing the lists and your pci ids, eg
booting with a live distro or a CentOS 7 one
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/considerations_in_adopting_rhel_8/hardware-enablement_considerations-in-adopting-rhel-8

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7BDMB3RQHYOT3WJL2TUI2WGCQPN3SP3H/

[ovirt-users] Re: Unable to install on a bonded NIC

[Gianluca Cecchi]

On Tue, Feb 8, 2022 at 10:41 PM Tim W. via Users  wrote:

> I think I found the problem.  The regex in
> 001_validate_network_interfaces.yml really wants there to be a number after
> the 'bond' identifier, i.e. bond0.  However, the regex is as follows:
>
>   bond_valid_name="{{ iface_item | regex_search('(^bond[0-9]+)') }}"
>
> which will not return a good value if just 'bond' is passed to it (the
> output of nmcli -g GENERAL.TYPE device show).
>
> However, I am not an ansible expert, nor am I an expert on how these
> scripts are called.  I humbly request someone else's expert opinion on this.
>
> Thanks again.
>


I think the main failure reason is about the current bonding mode:
balance-rr that is not supported:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/sect-network_bonding#Bonding_Modes

Actually here below in hosted engine installation guide:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/installing_red_hat_virtualization_as_a_self-hosted_engine_using_the_command_line/installing_hosts_for_rhv_she_cli_deploy#Recommended_practices_for_configuring_host_networks_SHE_cli_deploy

is stated:
"
If the ovirtmgmt network is not used by virtual machines, the network may
use any supported bonding mode.
"

But in 001_validate_network_interfaces.yml there is:

  - name: Set variable for supported bond modes
set_fact:
  acceptable_bond_modes: ['active-backup', 'balance-xor', 'broadcast',
'802.3ad']

and then a when condition with

hostvars[inventory_hostname]['ansible_' + iface_item]['mode'] in
acceptable_bond_modes

so that the balance-rr interface is filtered out.
Not digged about the "false" positive regarding messages about only team
devices detected...

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SG227ZIDUQR2CBTZ4UKAKJYMFSODHXDU/

[ovirt-users] Re: how to search event not matching a user

[Gianluca Cecchi]

On Thu, Feb 3, 2022 at 10:04 AM Eli Mesika  wrote:

>
>
> On Mon, Jan 31, 2022 at 7:51 PM Martin Perina  wrote:
>
>>
>>
>> On Mon, Jan 31, 2022 at 2:00 PM Gianluca Cecchi <
>> gianluca.cec...@gmail.com> wrote:
>>
>>> Hello,
>>> every event in Advanced view has a field "User".
>>> I'm trying to compose a search in web admin of events with user
>>> different from myuser@internal
>>> It seems I'm not able to get what I want.
>>>
>>
> Verified , please open a BZ on that and assign to me
>

Done. It is
https://bugzilla.redhat.com/show_bug.cgi?id=2051462


>>> I also tried to base attempts on an old 2019 thread (on 4.3.6) where
>>> this queries worked:
>>>
>>> Disks: name=engine* or name=host*
>>>
>>
>
>

>
>
>
>> Disks: alias=engine* or alias=host*
>>>
>>>
>>>
> This is working as expected for me
>

You are correct. The search using alias is working as expected.
I agree to remove search by name, that seems resolved by the automation,
but doesn't make any sense there.

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QVGXYCVRITJIJE5K7UJSH53ERGCPP3T2/

[ovirt-users] Re: Unclear how to add local (POSIX) storage

[Gianluca Cecchi]

On Thu, Feb 3, 2022 at 1:30 PM Richard W.M. Jones  wrote:

>
> I'm following the instructions here:
>
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html/administration_guide/sect-preparing_and_adding_posix_compliant_file_system_storage
>
> I've also added an extra virtual disk to my host node which appears as
> /dev/sdb.  Although the disk is partitioned, /dev/sdb1 is not created.
> Is udev broken in oVirt node?
>
>
As you write the term "local", if you plan to have only one host and not
add any other in the future for this environment, you had better creating a
DC/Cluster of type "Local" (versus "Shared") and then a storage domain of
type "Local on Host", where you give it the path where you mounted your
additional disk (with correct permissions).
I've been using it for many months on one environment with only one very
big server (1,5Tb of ram and 2 NVME disks, each 2Tb in size), currently
with 36 VMs running without problem. Now at 4.4.10 async 2.
The host is now based on Rocky Linux 8.5 (previously CentOS 8.4) with a
standalone engine, also that one now based on Rocky Linux 8.5) that is a VM
on an external vSphere environment.
This same environment previously was based on a single host gluster
configuration and I converted it to this configuration without loss of
VMs/data (I detached and then imported the previously gluster based fs).
HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y62VI36WEFNJR57JAZPCMD66PI6VWDVD/

[ovirt-users] Re: no snaphot but engines complains there is one when trying to remove disk

[Gianluca Cecchi]

On Mon, Jan 31, 2022 at 2:29 PM Nathanaël Blanchet  wrote:

> Hi all,
>
> A colleague launched this morning a snapshot creation, there was no error
> message but he wasn't able to start the vm anymore, with this issue : VM
> PSI-SYB-DEV is down with error. Exit message: Unable to get volume size for
> domain a5be6cae-f0c8-452f-b7cd-70d0e5eed710 volume
> 109fac1e-c2e3-4ba6-9867-5d1c94d3a447..
>
>
No direct help, but you had better specify the exact version of components
and if the snapshot was directly executed inside web admin gui or via
rest/API or with any kind of external sw.
Possibly anything could have had different effects depending on versions

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6Q6ZVZWVTI75K2IER5QRITHK44IQMH7Y/

[ovirt-users] how to search event not matching a user

[Gianluca Cecchi]

Hello,
every event in Advanced view has a field "User".
I'm trying to compose a search in web admin of events with user different
from myuser@internal
It seems I'm not able to get what I want.

I also tried to base attempts on an old 2019 thread (on 4.3.6) where this
queries worked:

Disks: name=engine* or name=host*
Disks: alias=engine* or alias=host*

but now on 4.4.8 gives nothing even if matched.
Any hint and also documentation reference about the correct syntax to use
in 4.4.x?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HIEPT4HR7AUP5TKBUPOVLI6IPAZIECS2/

[ovirt-users] Re: New oVirt setup with OVN : Hypervisor with LACP bond : queries

[Gianluca Cecchi]

On Sat, Jan 22, 2022 at 11:41 PM ravi k  wrote:

> Hello team,
>
Hi,

Thank you for all the wonderful work you've been doing. I'm starting out
> new with oVirt and OVN. So please excuse me if the questions are too naive.
> We intend to do a POC to check if we can migrate VMs off our current
> VMware to oVirt. The intention is to migrate the VMs with the same IP into
> oVirt. We've setup oVirt with three hypervisors. All of them have four
> ethernet adapters. We have SDN implemented in our network and LACP bonds
> are created at the switch level. So we've created two bonds, bond0 and
> bond1 in each hypervisor. bond0 has the logical networks with vlan tagging
> created like bond0.101, bond0.102 etc.
>

Can you give some more details about your current vSphere infrastructure?
What about the level of downtime you could give when migrating?
Have you already planned the strategy to transfer your VMs from vSphere to
oVirt?
Take care that probably on your VMware side your VMs have virtual hw for
nics defined as vmxnet, so when you migrate to oVirt, it will change and so
depending on your OS type (Windows based or Linux based) and in case of
Linux, depending on your distro and version, some manual operations could
be required to remap vnic assignments and definitions.

One possible first way to proceed could be to make a clone of one running
VM into one disconnected from the vSphere infra and then test on it the
steps to port to oVirt and so analyze times and impacts


> As a part of the POC we also want to explore OVN as well to check if we
> can implement a zero trust security policy. Here are the questions now :)
>
> 1. We would like to migrate VMs with the current IP into oVirt. Is it
> possible to achieve this? I've been reading notes and pages that mention
> about extending the physical network into OVN. But it's a bit confusing on
> how to implement it.
> How do we connect OVN to the physical network? Does the fact that we have
> a SDN make it easier to get this done?
>

The downstream (RHV) documentation to do it is here:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/sect-adding_external_providers#Connecting_an_OVN_Network_to_a_Physical_Network

the upstream one is here:
https://www.ovirt.org/documentation/administration_guide/#Adding_OVN_as_an_External_Network_Provider

Take care that in RHV this feature is still considered Technology Preview,
so not recommended for production. It could apply to oVirt even more, so...
BTW, what do you mean with "... the fact that we have a SDN..."? Do you
mean standard virtual networking in contrast with physical one or do you
have any kind of special networking in vSphere now (NSX or such...)?



>
>
> 2. We have the IP for the hypervisor assigned on a logical
> network(ovirtmgmt) in bond0. I read in
> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/CIE6MZ47GRCEX4Z6GWRLFSERCEODADJY/
> that oVirt does not care about how the IP is configured when creating the
> tunnels.
>

That was a thread originated by me... ;-)
But please consider that it is 5 years old now! At that time we were at 4.1
stage, while now we are at very different 4.4, so refer in case to recent
threads and better recent upstream (oVirt) and downstream (RHV) official
documentation pointed above
Also, at that time ansible was not very much in place, while now in many
configuration tasks it is deeply involved.
The main concern in that thread was the impact of having OVN tunneling on
the ovirtmgmt management network, that is the default choice when you
configure OVN, in contrast with creating a dedicated network for it.


> 3. Once we have OVN setup, ovn logical networks created and VMs
> created/migrated, how do we establish the zero trust policy? From what I've
> read there are ACLs and security groups. Any pointers on where to explore
> more about implementing it.
>

The downstream documentation and notes for this is here:
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/sect-external_provider_networks#Assigning_Security_Groups_to_Logical_Networks

and upstream here:
https://www.ovirt.org/documentation/administration_guide/#Assigning_Security_Groups_to_Logical_Networks

some manual undocumented steps through OpenStack Networking API or Ansible
could be required depending on your needs

BTW: both upstream and downstream docs refer here to 4.2.7 :
"
In oVirt 4.2.7, security groups are disabled by default.
"
and
"
In Red Hat Virtualization 4.2.7, security groups are disabled by default.
"

They should be changed with the corresponding version, or into something
like "in 4.2.7 and above..." if that applies and is intended



> If you've read till here, thank you for your patience.
>

no problem ;-)

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: 

[ovirt-users] CentOS 8.4 Linux hosts from 4.4.8 to Rocky Linux 4.4.10

[Gianluca Cecchi]

Hello,
after updating the external engine from CentOS 8.4 and 4.4.8 to Rocky Linux
8.5 and 4.4.9 as outlined here:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YUDJRC22SQPAPAIURQIVSEMGITDRQOOM/
I went further and updated also the hosts.
Environment is with an external engine and 3 CentOS Linux 8.4 hosts in
4.4.8 with iSCSI storage domain.

Preliminarily I upgraded the engine to 4.4.10 (not yet the just released
async) without problems.
Then, one host at a time:

. put host into maintenance from web admin UI
Management --> Maintenance

. In a terminal f host set proxy for my environment needs
export https_proxy=http://my_proxy:my_proxy_port
export http_proxy=http://my_proxy:my_proxy_port (not sure if this
necessary...)

. in the same terminal execute migration script
./migrate2rocky.sh -r

. executed Management --> SSH Management --> SSH Restart from web admin ui
the host comes on in maintenance mode

. selected Installation --> Check for Upgrade but the host is detected as
already update

. for further security and to be sure that all upgrade steps are applied I
executed
Installation --> Reinstall
I deselected
- activate host after install
- reboot host after install
It went ok so

. executed Management --> SSH Management --> SSH Restart from web admin ui
the host comes on in maintenance mode

. Management --> Activate

. Empty another host moving its VMs to the just updated host and continue
in the same way, also electing as new SPM the updated host

All went smoothly and without VMs disruption.
Let's see how it goes next days with the light workload I have on this
testing environment.
Currently the async 1 of 4.4.10 is not catched up by engine-upgrade-check
command.. I'm going to retry applying again during the next few days.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MNOD5FQUL2OBV7PANMWKUCPT2P7LXRGN/

[ovirt-users] Re: oVirt 4.4.10 is now generally available

[Gianluca Cecchi]

On Wed, Jan 19, 2022 at 8:28 AM Sandro Bonazzola 
wrote:

> oVirt 4.4.10 is now generally available
>

thanks, Sandro!


>-
>
>CentOS Stream 8 latest updates
>-
>
>Full list of changes:
>
> --- ovirt-node-ng-image-4.4.9.3.manifest-rpm 2021-12-15
> 15:40:13.501764699 +0100
>
> +++ ovirt-node-ng-image-4.4.10.manifest-rpm 2022-01-19 08:09:36.668868583
> +0100
>
> @@ -2,7 +2,6 @@
>
>
>
I don't see any qemu related change in ovirt-node-ng packages' list. Does
this mean that the expected version to be used is still 6.0, in particulare
what shipped in 4.4.9-2 such as qemu-kvm-6.0.0-33.el8s.x86_64?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R6UDRF3ZA7IDHYALQPN3YQZX4SO25KLS/

[ovirt-users] External engine CentOS 8.4 and 4.4.8 to Rocky Linux 8.5 and 4.4.9

[Gianluca Cecchi]

Just wanted to share what in subject and feedback/comments welcome.
Starting env is an external engine on CentOS 8.4, updated up to late
September, with 4.4.8 async 2 (ovirt-engine-4.4.8.6-1.el8.noarch.rpm) and
kernel 4.18.0-305.19.1.el8_4

[g.cecchi@ovmgr1 ~]$ cat /etc/centos-release
CentOS Linux release 8.4.2105

I migrated to Rocky Linux 8.5 and then run engine-setup to take it to
current 4.4.9 level.
The system is a VM on a vSphere environment.
Currently there are 3 hosts with CentOS 8.4, that I'm going then to migrate
to Rocky Linux too.

Downloaded the current migration script from

https://raw.githubusercontent.com/rocky-linux/rocky-tools/main/migrate2rocky/migrate2rocky.sh
chmod +x migrate2rocky.sh

My engine needs a proxy to exit on the internet and the script doesn't
check my /etc/yum.conf configuration

so I set
export https_proxy=http://my_proxy:my_proxy_port
export http_proxy=http://my_proxy:my_proxy_port (not sure if this
necessary...)

otherwise when you run the script you get
curl: (7) Failed to connect to dl.rockylinux.org port 443: Connection timed
out
Error downloading the Rocky Linux signing key.

then as root

./migrate2rocky.sh -r

notable things observed:

. some packages from ovirt repos are gathered too... I don't know if
correct in this stage...

Running dnf update before we attempt the migration.
Last metadata expiration check: 0:00:47 ago on Thu Jan 13 11:56:21 2022.
Dependencies resolved.

. . .
 otopi-common   noarch  1.9.6-1.el8
 ovirt-4.4   94 k
 ovirt-ansible-collection   noarch  1.6.5-1.el8
 ovirt-4.4  289 k
 ovirt-engine-dwh-grafana-integration-setup noarch  4.4.9.1-1.el8
 ovirt-4.4   88 k
 ovirt-engine-dwh-setup noarch  4.4.9.1-1.el8
 ovirt-4.4   95 k
 ovirt-engine-extension-aaa-ldapnoarch  1.4.5-1.el8
 ovirt-4.4  130 k
 ovirt-engine-metrics   noarch  1.4.4-1.el8
 ovirt-4.4   92 k
 ovirt-engine-setup noarch  4.4.9.5-1.el8
 ovirt-4.4   18 k
 ovirt-engine-setup-basenoarch  4.4.9.5-1.el8
 ovirt-4.4  116 k
 ovirt-engine-setup-plugin-cinderlibnoarch  4.4.9.5-1.el8
 ovirt-4.4   39 k
 ovirt-engine-setup-plugin-imageio  noarch  4.4.9.5-1.el8
 ovirt-4.4   27 k
 ovirt-engine-setup-plugin-ovirt-engine noarch  4.4.9.5-1.el8
 ovirt-4.4  203 k
 ovirt-engine-setup-plugin-ovirt-engine-common  noarch  4.4.9.5-1.el8
 ovirt-4.4  122 k
 ovirt-engine-setup-plugin-vmconsole-proxy-helper   noarch  4.4.9.5-1.el8
 ovirt-4.4   38 k
 ovirt-engine-setup-plugin-websocket-proxy  noarch  4.4.9.5-1.el8
 ovirt-4.4   39 k
 ovirt-engine-vmconsole-proxy-helpernoarch  4.4.9.5-1.el8
 ovirt-4.4   26 k
 ovirt-engine-websocket-proxy   noarch  4.4.9.5-1.el8
 ovirt-4.4   33 k
 ovirt-imageio-client   x86_64  2.3.0-1.el8
 ovirt-4.4   21 k
 ovirt-imageio-common   x86_64  2.3.0-1.el8
 ovirt-4.4  158 k
 ovirt-imageio-daemon   x86_64  2.3.0-1.el8
 ovirt-4.4   15 k
 ovirt-release44noarch  4.4.9.3-1.el8
 ovirt-4.4   20 k
 ovirt-web-ui   noarch  1.7.2-1.el8
 ovirt-4.4   11 M
. . .
 qemu-img   x86_64  15:6.0.0-33.el8
 ovirt-4.4-advanced-virtualization  1.9 M
. . .
Transaction Summary
=

Install5 Packages
Upgrade  393 Packages
Remove 3 Packages

Total download size: 689 M
. . .
Generating grub configuration file ...
File descriptor 3 (/dev/pts/1) leaked on vgs invocation. Parent PID
4056644: /usr/sbin/grub2-probe
File descriptor 4 (/dev/pts/1) leaked on vgs 

[ovirt-users] Re: possible actions on host remaining as nonresponsive

[Gianluca Cecchi]

On Thu, Dec 23, 2021 at 7:44 PM Darrell Budic 
wrote:

> Try restarting libvirtd. It will also restart vdsmd, sometimes that fixes
> things for me when there has been a storage hiccup.
>

Thanks for the suggestion, but with the "ssh host restart" action actually
the server has restarted completely, so I doubt it can be that


> If it’s a HA Engine host, I’ve also had to restart the ha-agent/ha-broker
> combo is some situations as well.
>
> No, it's an external engine

On the host:
[root@ov300 vdsm]# nodectl check
Status: OK
Bootloader ... OK
  Layer boot entries ... OK
  Valid boot entries ... OK
Mount points ... OK
  Separate /var ... OK
  Discard is used ... OK
Basic storage ... OK
  Initialized VG ... OK
  Initialized Thin Pool ... OK
  Initialized LVs ... OK
Thin storage ... OK
  Checking available space in thinpool ... OK
  Checking thinpool auto-extend ... OK
vdsmd ... OK
[root@rhvh300 vdsm]#

I already had the idea to try restarting the engine server, and then I
found this similar bugzilla (even if for an older release):
https://access.redhat.com/solutions/4222911
RHV host in "not responding" state until ovirt-engine service restarted

I rebooted the engine server (that is a VM inside a vSphere environment)
and all came back good with the host set as up, together with the other
ones.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F4XG3ZJK6PXHOH5CVTWBWU3BYAMEYMOH/

[ovirt-users] possible actions on host remaining as nonresponsive

[Gianluca Cecchi]

Hello,
I have a 4.4.8 host that results as nonresponsive.
The DC is FC based
Tried to restart some daemons without effect (vdsmd, mom-vdsmd wdmd)
Then I executed a ssh host reboot but it seems it continues this way after
rebooting

>From storage and network point of view it seems all ok on the host.

In vdsm.log of the host I see every 5 seconds:

2021-12-23 18:54:53,053+0100 INFO  (vmrecovery) [vdsm.api] START
getConnectedStoragePoolsList() from=internal,
task_id=916bc455-ce37-4b50-9f38-b69e3b03807f (api:48)
2021-12-23 18:54:53,053+0100 INFO  (vmrecovery) [vdsm.api] FINISH
getConnectedStoragePoolsList return={'poollist': []} from=internal,
task_id=916bc455-ce37-4b50-9f38-b69e3b03807f (api:54)
2021-12-23 18:54:53,053+0100 INFO  (vmrecovery) [vds] recovery: waiting for
storage pool to go up (clientIF:735)
2021-12-23 18:54:53,444+0100 INFO  (periodic/0) [vdsm.api] START
repoStats(domains=()) from=internal,
task_id=eb5540e0-0f90-4996-bc9a-7c73949f390f (api:48)
2021-12-23 18:54:53,445+0100 INFO  (periodic/0) [vdsm.api] FINISH repoStats
return={} from=internal, task_id=eb5540e0-0f90-4996-bc9a-7c73949f390f
(api:54)

In engine.log

2021-12-23 18:54:38,745+01 INFO
 [org.ovirt.engine.core.bll.utils.ThreadPoolMonitoringService]
(EE-ManagedScheduledExecutorService-engineThreadMonitoringThreadPool-Thread-1)
[] Thread pool 'hostUpdatesChecker' is using 0 threads out of 5, 5 threads
waiting for tasks.
2021-12-23 18:55:27,479+01 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-73) []
EVENT_ID: VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ov300 command Get Host
Capabilities failed: Message timeout which can be caused by communication
issues
2021-12-23 18:55:27,479+01 ERROR
[org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-73) []
Unable to RefreshCapabilities: VDSNetworkException: VDSGenericException:
VDSNetworkException: Message timeout which can be caused by communication
issues

I would like to try to put into maintenance the host and then activate, or
reinstall, but there is a power action still in place since 1 hour ago
(when I executed ssh host reboot attempt that got host rebooted but not
connected apparently) that prevents it... what is its timeout?

WHat can I check to understand the source of these supposed communication
problems?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUUP2VEHKSJB7XDAUZZ2UUGG3UMFU6AC/

[ovirt-users] Re: Help installing oVirt on single machine, without cockpit

[Gianluca Cecchi]

On Fri, Dec 17, 2021 at 5:08 AM  wrote:

>
>
> > One problem I see is that now the update of a host is driven by the
> engine through playbooks and is not manually doable from the host itself as
> some time ago. And to have a container going through making modifications
> to the host where it is running doesn't seem a good idea
>
> For an hosted-engine setup, does the engine VM modify the host it's
> running on then? And you need the VM abstraction to update the host safely?
> If so, I'm guessing running the engine directly on the node isn't safe
> either then.
> Also, if the host/node itself gets updates though `dnf upgrade`, would it
> be possible to let dnf handle upgrades for it? and then rebuild/pull the
> latest container for engine updates? Or could the updates get out of sync
> of one another?


> Thanks!
> Cameron
>

I think this thread (even if the title is not so clear about the
discussions born inside) could be a good read regarding single host
limitations in terms of updating the environment, after the initial
deployment:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/2E6IOFCH5MJSPZ6MNSB5GIW7BGUZNXDS/#PI2LS3NCULH3FXQKBSB4IGXLKUBXE6UL

We were at 4.4.2 time and I think the point now is the same. See in
particular the last 9-10 comments, starting from Sandro one at "Sunday, 4
October 11:30 p.m."
They were related to single host and update questions.
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y3NCKS4J57ZXUHSUZ4FUU66WBCMTJ266/

[ovirt-users] Re: Help installing oVirt on single machine, without cockpit

[Gianluca Cecchi]

On Thu, Dec 16, 2021 at 9:05 AM Yedidyah Bar David  wrote:

>
>
>
>>
>> # With the engine inside a container
>> Finally got engine-setup to run inside a container! I need to figure out
>> the networking next, along with how to best hook up a postgresql db to it.
>> This part is going smoothly so far, I just wanted to update you all.
>>
>
> Thanks for the update, sounds promising!
>
> Just in case you want to have a look at the very old project I mentioned,
> it's here:
>
> https://github.com/mgoldboi/oVirt-Dockerized
>
> Best regards,
> --
> Didi
>
>
One problem I see is that now the update of a host is driven by the engine
through playbooks and is not manually doable from the host itself as some
time ago.
And to have a container going through making modifications to the host
where it is running doesn't seem a good idea.

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TALKTR6AGMYDOT2AS4PB6DVFLE54UAP5/

[ovirt-users] Re: oVirt and log4j vulnerability

[Gianluca Cecchi]

On Mon, Dec 13, 2021 at 2:37 PM Derek Atkins  wrote:

>
> On Mon, December 13, 2021 8:04 am, Gianluca Cecchi wrote:
> >>
> > If I understood correctly reading here:
> >
> https://blog.qualys.com/vulnerabilities-threat-research/2021/12/10/apache-log4j2-zero-day-exploited-in-the-wild-log4shell
> >
> > you are protected by the RCE if java is 1.8 and greater than 1.8.121
> > (released on 2017)
>
> Do you mean 1.8.0.121?  For example, my system has:
>
> java-1.8.0-openjdk-headless-1.8.0.252.b09-2.el7_8.x86_64
>
> -derek
>
>
Yes, what the link refers to as 8u121:
https://www.oracle.com/java/technologies/javase/8u121-relnotes.html

Your version: 8u252 (or anyway based on it).
On my 4.4.8 engine I have
java-1.8.0-openjdk-headless-1.8.0.302.b08-0.el8_4.x86_64 but I have also
java-11-openjdk-headless-11.0.12.0.7-0.el8_4.x86_64 that is what
ovirt-engine uses, based on:

[root@ovmgr1 ovirt-engine]# ll /proc/$(pidof ovirt-engine)/fd | grep jvm
lr-x--. 1 ovirt ovirt 64 Sep 24 09:02 3 ->
/usr/lib/jvm/java-11-openjdk-11.0.12.0.7-0.el8_4.x86_64/lib/modules
[root@ovmgr1 ovirt-engine]#

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HMHHRWIIEPX2HPQKUBL6UO2YJPT4ANFE/

[ovirt-users] Re: oVirt and log4j vulnerability

[Gianluca Cecchi]

On Mon, Dec 13, 2021 at 1:38 PM Sandro Bonazzola 
wrote:

> So far we can't confirm whether oVirt engine systems are affected or not:
> the oVirt infra team is digging into this.
> I can confirm that ovirt-engine-wildfly is shipping a log4j version which
> is affected by the vulnerability and we are monitoring Wildfly project so
> we'll be able to ship an update as soon as a fix will be available (we are
> just repackaging the binary build they provide).
> But I got no report so far confirming if the way we run Wildfly exposes
> the vulnerable system to potential attackers yet.
>
>
>
If I understood correctly reading here:
https://blog.qualys.com/vulnerabilities-threat-research/2021/12/10/apache-log4j2-zero-day-exploited-in-the-wild-log4shell

you are protected by the RCE if java is 1.8 and greater than 1.8.121
(released on 2017)

"
If the server has Java runtimes later than 8u121, then it is protected
against remote code execution by defaulting
“com.sun.jndi.rmi.object.trustURLCodebase” and
“com.sun.jndi.cosnaming.object.trustURLCodebase” to “false”(see
https://www.oracle.com/java/technologies/javase/8u121-relnotes.html).
"

It is not clear to me if it means that Java 11 (and 17) also maintained
that setting.
In one of my oVirt with 4.4.8 it seems that engine is using
java-11-openjdk-headless-11.0.12.0.7-0.el8_4.x86_64 package

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WH3WZLRM6NYC7MJVWSTA4LY5YWDF57VW/

[ovirt-users] Re: Creating VMs from templates with their own disks

[Gianluca Cecchi]

On Sun, Nov 28, 2021 at 3:44 AM Sina Owolabi  wrote:

>
> - name: Print vm attributes
>   ovirt.ovirt.ovirt_vm_info:
> auth: "{{ ovirt_auth }}"
> pattern: name="{{ vm_fqdn }}"
>   register: vm_info
> - debug:
> msg: "{{ vm_info.ovirt_vms[0] }}"
>
>
here above you get an empty disk_attachments field.
You have to add fetch_nested: true to traverse and get the disk attachments
values

Eg:
- name: Print vm attributes
  ovirt.ovirt.ovirt_vm_info:
auth: "{{ ovirt_auth }}"
pattern: name="{{ vm_fqdn }}"
fetch_nested: true
  register: vm_info
- debug:
msg: "{{ vm_info.ovirt_vms[0] }}"


> - name: Rename disk
>   ovirt.ovirt.ovirt_disk:
> auth: "{{ ovirt_auth }}"
> id: "{{ vm_info.ovirt_vms[0].id }}"
> storage_domain: lrg0-ovirt-mydom-internal-Local
> name: "{{ vm_fqdn }}-osdisk0"
> vm_name: "{{ vm_fqdn }}"
>
>
Here, supposing from pattern filter above you get only 1 VM so you can use
index 0 and you get only 1 disk inside the VM and you can use index 0 also
for disk, you can use:
See also "ansible-doc ovirt_vm_info" help page, where you can filter the
nested_attributes...
Then the rename disk task would become

- name: Rename disk
  ovirt.ovirt.ovirt_disk:
auth: "{{ ovirt_auth }}"
id: "{{ vm_info.ovirt_vms[0].disk_attachments[0].id }}"
storage_domain: lrg0-ovirt-mydom-internal-Local
name: "{{ vm_fqdn }}-osdisk0"
vm_name: "{{ vm_fqdn }}"

This works for me in a 4.4.7 test environment

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KAS7RHBOSQ2YQ37DU3KHWNPH6XCSELML/

[ovirt-users] Suggested upgrading path from CentOS based 4.4.8 to 4.4.9

[Gianluca Cecchi]

I have a lab with an environment based on 4.4.8.6-1, with 3 CentOS Linux
8.4 hosts and a CentOS 8.4 external engine system (that is a VM on vSphere,
so that I can leverage a snapshot methodology for the process...).
I would like to pass to 4.4.9 and retain a full plain OS on hosts for the
moment, without going through oVirt nodes, but standing the repo problems
and CentOS 8.x going through EOL this is what I'm planning to do:

1. stop engine service on engine system

2. convert engine to CentOS Stream
This step needs some confirmation.
Could you provide an official link about the process?
I'm not able to find it again. Is it a problem of mine or all (CentOS
website, RHEL website) seem to point only to conversion from CentOS Linux
to RHEL??
Apart external websites provided workflows, I was only able to find a mid
January youtube video, when CentOS was based on 8.3, with these steps:
yum install centos-release-stream
yum swap centos-{linux,stream}-repos
yum repolist
yum distro-sync
reboot
The video link is here:
https://www.youtube.com/watch?v=Ba2ytp_8x7s

No mention at
https://www.redhat.com/en/blog/faq-centos-stream-updates

And on CentOS page I only found this:
https://centos.org/distro-faq/
with Q7 containing only the two instructions:
dnf swap centos-linux-repos centos-stream-repos
dnf distro-sync

What to use safely?
Is it possible to include some sort of documentation or links on oVirt
page, to migrate from CentOS Linux to CentOS Stream for oVirt upgrade
purposes?

3. After reboot implied, I think, in step 2., use the usual steps to update
engine to 4.4.9

4. update the first out of three hosts from CentOS Linux to CentOS Stream
and to 4.4.9.

4.a follow the same approach of engine (when defined) and pass it to Stream
retaining the 4.4.8.
4.b upgrade from the web admin gui to 4.4.9

5. Do the same for second host and third hosts

Any hints, comments, limitations in having mixed 4.4.8 and 4.4.9 hosts for
a while and such?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/L3CRTNR2IUGNRZNVQMROQABHHBKMEYPP/

[ovirt-users] Re: export to export domain concurrency

[Gianluca Cecchi]

On Thu, Nov 4, 2021 at 12:32 PM Benny Zlotnik  wrote:

>  yes, it should work, did you run into issues?
>
>
No, I was in doubt that it could be a serial task.

I can confirm the parallelism, as I tried with 2 VMS, both with 3 disks:
20Gb+20Gb+90Gb the first VM1 and 20Gb+20Gb+80Gb the second one VM2.
The source storage domain is based on iSCSI Equallogic with 10Gbit/s
connection.
The export domain is a vSphere VM (on 10Gb/s adapter) connected through the
ovirtmgmt channel (that is based on 10Gb/s adapters in LACP)

Going one by one I got
Starting export Vm VM1 to xfer 11/4/21 12:14:49 PM
Vm VM1 was exported successfully to xfer 11/4/21 12:21:54 PM
--> total 7' 5"

Starting export Vm VM2 to xfer 11/4/21 12:25:23 PM
Vm VM2 was exported successfully to xfer 11/4/21 12:32:19 PM
--> total 6' 56"

Going then in parallel (delay of 7 seconds, not using the method of
multi-select and export):
Starting export Vm VM1 to xfer 11/4/21 3:15:29 PM
Starting export Vm VM2 to xfer 11/4/21 3:15:36 PM
Vm VM2 was exported successfully to xfer 11/4/21 3:26:32 PM
Vm VM1 was exported successfully to xfer 11/4/21 3:26:46 PM

---> total 11' 17"

So I got about a 20% gain.
Next week I have to move some VMs with 900Gb of storage each, so I can get
optimizations going in parallel

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OCCHHALG54GTSCT7H7DVIOO2HOER4LR7/

[ovirt-users] export to export domain concurrency

[Gianluca Cecchi]

Hello,
the export to export domain task is managed asynchronously.
Does it support concurrency, so that I can export more VMs at the same time
to the same export domain? If not by default, is there a parameter to
enable it?
The need would be on 4.4.7/4.4.8 based environments

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UWH4QB4DVUUKRFNDUCDZ6CA4AOW3OKZ5/

[ovirt-users] Re: upgrade dependency issues

[Gianluca Cecchi]

On Tue, Oct 26, 2021 at 12:12 PM Sandro Bonazzola 
wrote:

> Thanks for the report, my team is looking into the dedependency failures.
> oVirt 4.4.9 has been developed on CentOS Stream 8 and some dependencies
> are not yet available on RHEL 8.4 and derivatives.
>

Ok, fair enough you only test on CentOS Stream 8, but at least I think you
should change what you are going to write in the next release notes,
putting only what actually tested.

For 4.4.9 there was:

"

This release is available now on x86_64 architecture for:

   -

   Red Hat Enterprise Linux 8.4
   -

   CentOS Linux (or similar) 8.4
   -

   CentOS Stream 8


This release supports Hypervisor Hosts on x86_64 and ppc64le architectures
for:

   -

   Red Hat Enterprise Linux 8.4
   -

   CentOS Linux (or similar) 8.4
   -

   oVirt Node NG (based on CentOS Stream 8)
   -

   CentOS Stream 8


"
So one understands that at least installation/upgrade from 4.4.8 to 4.4.9
has been validated when the hosts are in CentOS 8.4 or in RH EL 8.4, that
currently are the latest 8.4 level released, while it seems both fails
right now, correct?

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MQ7SHH3BK6JLBL7OKYC6DAOUE2J4FET2/

[ovirt-users] Re: HA VM and vm leases usage with site failure

[Gianluca Cecchi]

On Tue, Aug 10, 2021 at 1:02 PM Klaas Demter  wrote:

> Okay, so the SPM is only blocking me if I have thin provisioned block
> storage that needs extending. This is luckily not the case because we
> primarily use NFS. It is something though I have never thought about, in
> my head the storage leases completely solved the "host crashes and power
> management does not answer" until I read your mail :)
>
>
> Thanks for the detailed explanation Nir!
>
>
> Greetings
>
> Klaas
>
>
In the meantime I opened a case (number 03004698 with also logs) regarding
expected behavior and the Disaster Recovery Guide not being so clear in
this scenario.
A documentation bugzilla has been opened so feel free to read and/ or
contribute to it.
https://bugzilla.redhat.com/show_bug.cgi?id=2014790
Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3AXUGHK22TYOWO22F7IINKZE3TSS43YF/

[ovirt-users] Re: How to add a note to a VM

[Gianluca Cecchi]

On Tue, Oct 12, 2021 at 3:29 PM Nir Soffer  wrote:

> On Tue, Oct 12, 2021 at 3:24 PM Gianluca Cecchi
>  wrote:
> >
> > Hello,
> > I know there are the "Comment" and "Description" columns available in
> many areas of the Webadmin Gui.
> > But there are some tasks, like "shutdown VM" or "Management ->
> Maintenance" for a host, where I can specify a "reason" for doing that task
> and then a note icon appears, aside the object, with the mouse over showing
> the note text, like in this image:
> >
> https://drive.google.com/file/d/1v3Yd2t7AtuRFMT6HPFYYZqYUmJLMHYMY/view?usp=sharing
> >
> > Is there a way to do it in general? So for example I have a VM and I
> want to put a note (for some colleague, or to remind me to do an action
> tomorrow, ecc...)
> >
> > And btw: how can I manually remove the note? Eg I shutdown a VM and fill
> in the "Reason" field and then in a second moment I want to remove it
>
> The "comment" field was designed exactly for this purpose.
>
> Maybe this is not documented?
>
> Nir
>
>
Probably yes, but it results less visible than having a tooltip with the
icon of a note...
And also, sometimes the "Comment" column is not one of the first, so you
have to arrange / order it so that it comes to the left...
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ANFKPM53FOCFPZR6AZXXD7VJRTFXNNMK/

[ovirt-users] How to add a note to a VM

[Gianluca Cecchi]

Hello,
I know there are the "Comment" and "Description" columns available in many
areas of the Webadmin Gui.
But there are some tasks, like "shutdown VM" or "Management -> Maintenance"
for a host, where I can specify a "reason" for doing that task and then a
note icon appears, aside the object, with the mouse over showing the note
text, like in this image:
https://drive.google.com/file/d/1v3Yd2t7AtuRFMT6HPFYYZqYUmJLMHYMY/view?usp=sharing

Is there a way to do it in general? So for example I have a VM and I want
to put a note (for some colleague, or to remind me to do an action
tomorrow, ecc...)

And btw: how can I manually remove the note? Eg I shutdown a VM and fill in
the "Reason" field and then in a second moment I want to remove it

Thanks in advance,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ABXZEZBLDF5PYBKTRTFTQQKJLB2RNX32/

[ovirt-users] Re: Upgrading from 4.3 to 4.4.8

[Gianluca Cecchi]

On Mon, Oct 4, 2021 at 12:32 AM Jason Harris  wrote:

> Engine is updated to the latest 4.3 release and rebooted.  Still getting
> this after re-enabling the 4.4 repo:
>
>
oVirt 4.4 requires engine and hosts based on RH EL / CentOS 8, while your
current env in 4.3 has them based on RH EL 7 / CentOS 7. You have to
reinstall the node that you isolated with the engine.
So after taing the engine at its latest 4.3.x level and rebooting the 4.3
engine OS, you have to follow the steps described in 6.5: stop the
ovirt-engine service, take a backup and copy the generated file outside of
the env, scratch the engine and related node and reinstall it with 4.4
ovirt node and then on the host, now in 4.4, run the command

hosted-engine --deploy --restore-from-file=backup.bck

and so on...

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7QHHXUQPNXOZJ5QMLOM3PLFIPMJVVA3U/

[ovirt-users] Re: Upgrading from 4.3 to 4.4.8

[Gianluca Cecchi]

On Sat, Oct 2, 2021 at 4:45 PM  wrote:

> You guys scare me.  Seriously.
>
> I'm trying to update from oVirt 4.3 to 4.4 using a self-hosted engine.
> All VMs on the host are migrated off, other than the hosted engine, from
> the first host I intend to update to EL 8.4, per the documentation.
>
> I installed the RPM from here:
> https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm
>
> I'm configuring the Engine following the upgrade document located here:
>
> https://www.ovirt.org/documentation/upgrade_guide/index.html#SHE_Upgrading_from_4-3
>
> Step 6.4, after installing the oVirt 4.4 RPM on the engine:
> engine-upgrade-check - I get this response:
>
>
Step 6.4 is where you update your self hosted engine to the latest 4.3.x
version available. Not 4.4 yet.
So if you are still in 4.3.7, with step 6.4 you take it at 4.3.10, so that
the backup you take in 4.3.10 (step 6.5) is tested and correctly restorable
in 4.4.8 (better 4.4.8 than 4.4.7 you cited..)
If you are already at 4.3.10 level you can skip step 6.4.

HIH,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K6T5ZDTBAI5KHSOOZPNR5JE5P6IQWZAR/

[ovirt-users] Balancing actions not shown in events list

[Gianluca Cecchi]

Hello,
I have a cluster composed of 4 hosts, with 2 hosts in site A and 2 hosts in
site B.
Version of engine and hosts is latest 4.4.8-6.
Site A is the primary site and its hosts have SPM priority high, while site
B hosts have SPM priority low.
For critical VMs I create a cluster affinity group so that they preferably
run on hosts in site A.
If I migrate a VM from one host in site A to one host in site B, the
migration completes but suddenly, after a few seconds (ranging from 10 to
30) the VM comes back again (live migrates) to one host of the site A pool.

Two considerations:

. when the VM comes back to site A and I'm connected to the web admin gui I
see in bottom right the pop-up message regarding the balancing operation:
https://drive.google.com/file/d/1lfm0AVwYKyyRL1qHh94AySpr3XAtV7lO/view?usp=sharing
But then if I go in the VM, or cluster, or general events pane I don't see
any direct feedback regarding this balancing that took place.
I only see the VM migration events:
Oct 1, 2021, 2:47:01 PM Migration completed (VM: impoldsrvdbpbi, Source:
, Destination: , Duration: 15 seconds, Total: 27 seconds, Actual
downtime: 67ms)
Oct 1, 2021, 2:46:34 PM Migration initiated by system (VM: impoldsrvdbpbi,
Source: , Destination: , Reason: Affinity rules enforcement).
Oct 1, 2021, 2:45:45 PM Migration completed (VM: impoldsrvdbpbi, Source:
, Destination: , Duration: 2 seconds, Total: 14 seconds, Actual
downtime: (N/A))
Oct 1, 2021, 2:45:30 PM Migration started (VM: impoldsrvdbpbi, Source:
, Destination: , User: gian@internal).

That indeed contain some information (Reason: Affinity rules enforcement)
but only in the VM migration line.
Could it be useful to add an independent line regarding the balancing
trigger that implies then a migration?

. In this case could it be useful to give the user a warning that the VM
will be suddenly migrated back so that  he/she can think about it before
having at the end two migrations with a final stage that is the starting
point itself...?

If I leave only one host in site A and put it into maintenance, the VMs are
correctly migrated to hosts in site B and even when the host in site A
comes back available, the coming back operation is not triggered. Is this
something expected or should the live migrate to hosts in site A?

Thanks,
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WFBGV4THNYH27CBWTHUBXTGUW6I6WUWZ/