[ovirt-users] renewing hosts certs when they have expired

2022-04-28 Thread Nathanaël Blanchet

Hello,

I have read some posts about renewing ovirt CA on the engine when it has 
expired with engine-setup --offline, but nothing about renewing hosts 
certificates when they have expired.


In such a case, we can't interact anymore with hosts and vms are in an 
unknown state. The formal solution is to put the concerned host into 
maintenance and enroll certificate, but it implies to stop vms.


Here are some messages we can find

For those who are concerned, I wrote an ansible role following 
https://access.redhat.com/solutions/3532921


https://galaxy.ansible.com/natman/ovirt_renew_certs

Let me know if it fits to your needs.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ARTWFOBUUGCRAPFTDVMWTAFQ3CLFDVI4/


[ovirt-users] Re: certification expires: PKIX path validation failed

2022-04-13 Thread Nathanaël Blanchet

following https://access.redhat.com/solutions/3532921 solved my issue!

(needs redhat registration but it worth)

Le 13/04/2022 à 11:41, Milan Zamazal a écrit :

Nathanaël Blanchet  writes:


Hi,

Some of my hosts came into a non responsive state since there
certicate had expired:

VDSM palomo command Get Host Capabilities failed: PKIX path validation
failed: java.security.cert.CertPathValidatorException: validity check
failed

|openssl x509 -noout -enddate -in /etc/pki/vdsm/certs/vdsmcert.pem
  palomo notAfter=Apr 6 11:09:05 2022 GMT |

The recommanded path to update certificates is to put hosts into
maintenance and enroll certificates.
But I can't anymore live migrate vms since the certificate is expired:

2022-04-13 10:34:12,022+0200 ERROR (migsrc/bf0f7628) [virt.vm]
(vmId='bf0f7628-d70b-47a4-8569-5430e178f429') [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)
(migration:331)


So is there a way to disable tls to migrate these vms so as to put the
host into maintenance?

Do you use encrypted migrations?  I think the client certificate is
verified only with encrypted migrations.  You can disable encrypted
migrations in the web UI among other migration settings in cluster or VM
settings.

If it fails also with non-encrypted migrations, *maybe* removing the
client certificate could help.

If disabling encrypted migrations is not possible, you can try to set
migrate_tls_x509_verify option in /etc/libvirt/qemu.conf on the
destination host to 0 (libvirt restart may be needed to apply the
changed setting).

I guess there could be also a way to run the Ansible role for updating
the certificates manually (not recommended etc. etc. but perhaps still
useful in this case) without putting the host into the maintenance.
Just a speculation, I don’t know whether it’s actually possible and how
to do it if it is.

Regards,
Milan


No possibility of migration would imply to stop production vms, this
is what we absolutely don't want!

Any help much appreciated.

||


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4YKLLQTM4SBKACJKDWIAQR3GTHYVT6NF/


[ovirt-users] certification expires: PKIX path validation failed

2022-04-13 Thread Nathanaël Blanchet

Hi,

Some of my hosts came into a non responsive state since there certicate 
had expired:


VDSM palomo command Get Host Capabilities failed: PKIX path validation 
failed: java.security.cert.CertPathValidatorException: validity check failed


|openssl x509 -noout -enddate -in /etc/pki/vdsm/certs/vdsmcert.pem 
palomo notAfter=Apr 6 11:09:05 2022 GMT |


The recommanded path to update certificates is to put hosts into 
maintenance and enroll certificates.

But I can't anymore live migrate vms since the certificate is expired:

2022-04-13 10:34:12,022+0200 ERROR (migsrc/bf0f7628) [virt.vm] 
(vmId='bf0f7628-d70b-47a4-8569-5430e178f429') [SSL: 
CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) 
(migration:331)



So is there a way to disable tls to migrate these vms so as to put the 
host into maintenance?


No possibility of migration would imply to stop production vms, this is 
what we absolutely don't want!


Any help much appreciated.

||

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IQH53KGMAZZBF6Q6ZXWT3VJQJQ4YRAU6/


[ovirt-users] Re: vdsm hook after node upgrade

2022-04-13 Thread Nathanaël Blanchet


Le 13/04/2022 à 09:18, Martin Perina a écrit :

Hi,

I'm not aware of any changes regarding hooks in 4.4.9. The last 
significant change has been done in 4.4.7, where VDSM hooks are no 
longer included in node by default and if really needed they could be 
installed manually:


https://bugzilla.redhat.com/show_bug.cgi?id=1947450
Nothing to do with embedded hooks, it is about my personnal hook that 
were present on 4.4.9 and disappeared after upgrade on 4.4.10

https://www.ovirt.org/release/4.4.7/

So are your hosts oVirt Node based or standard EL8 based hosts (for 
example CentOS Stream 8)?

No, my hosts are ovirt-node based, so the bug may come from ovirt-node


Regards,
Martin


On Wed, Apr 13, 2022 at 7:58 AM Nathanaël Blanchet  
wrote:


I've opened an issue on GitHub, but is it the new official way to
declare issues against bugzilla?
Le 12 avr. 2022 16:16, Nir Soffer a écrit :


On Tue, Apr 12, 2022 at 5:06 PM Nathanaël Blanchet
 wrote:
> I've upgraded my hosts from 4.4.9 to 4.4.10 and none of my vdsm
hooks
> are present anymore... i believed those additionnal personnal
data were
> persistent across update...

If you think this is a bug, please file a vdsm bug for this:
https://github.com/oVirt/vdsm/issues

Nir

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/UN77CSHAWDL5BS5LKU6MJHCOOUTMMMZZ/



--
Martin Perina
Manager, Software Engineering
Red Hat Czech s.r.o.


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5E6TTYHDAYCUJG5I2WG2CPLNROJNS4KZ/


[ovirt-users] Re: vdsm hook after node upgrade

2022-04-12 Thread Nathanaël Blanchet
I've opened an issue on GitHub, but is it the new official way to declare 
issues against bugzilla? 
Le 12 avr. 2022 16:16, Nir Soffer a écrit :


On Tue, Apr 12, 2022 at 5:06 PM Nathanaël Blanchet  wrote:
> I've upgraded my hosts from 4.4.9 to 4.4.10 and none of my vdsm hooks
> are present anymore... i believed those additionnal personnal data were
> persistent across update...

If you think this is a bug, please file a vdsm bug for this:
https://github.com/oVirt/vdsm/issues

Nir

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UN77CSHAWDL5BS5LKU6MJHCOOUTMMMZZ/


[ovirt-users] vdsm hook after node upgrade

2022-04-12 Thread Nathanaël Blanchet

Hi,

I've upgraded my hosts from 4.4.9 to 4.4.10 and none of my vdsm hooks 
are present anymore... i believed those additionnal personnal data were 
persistent across update...


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XZIF7CRTSE2BAECCZ72M2EH7F4I5FYQ7/


[ovirt-users] Re: Welcome to oVirt 4.5.0 Beta test day!

2022-04-07 Thread Nathanaël Blanchet
Great job, too much stuff for participating but thanks to everyone for making 
ovirt so great !
Le 7 avr. 2022 19:21, Sandro Bonazzola a écrit :


Many thanks to:
- Diego Ercolani
- Jöran Malek
- Nikolai Sednev
- Polina Agranat
- Sharon Gratch

For having joined today's test day and reporting their findings.

And to:
- Yedidyah Bar David
- Shani Leviim
- Martin Perina

For having assisted looking into reported issues.
Test cases covered, see reports:
https://trello.com/c/KNPBi5Fp - Deploy on Ceph storage
https://trello.com/c/3oblVWDs - Upgrade from oVirt 4.4.10 with Gluster 8 to
oVirt 4.5.0 Beta with Gluster 10


Today test day resulted with the opening / hitting the following bugs:
oVirt:
Bug 2072881  - Upgrade
via backup and restore from 4.4 to 4.5 is blocked
Bug 2073005  -
ui-extensions
dialogs are flashing when they are rendered on a chrome browser
Bug 2073120  - The CPU
resources are not properly freed upon dedicated VM hibernation
Bug 2073074  - failing
to set tuned profile on oVirt Node with Gluster Mode
https://github.com/oVirt/ovirt-engine/issues/246 - With engine installed in
Gluster mode only, the compute tab is not listed anymore in the left menu.

oVirt Website / Docs:
https://github.com/oVirt/ovirt-site/issues/2838 - Missing oVirt 4.4 to 4.5
upgrade guide
https://github.com/oVirt/ovirt-site/issues/2837 - Upgrade guide is not
correctly oVirt branded

The dedicated test day is reaching its end but it doesn't mean you can't
continue the testing.
Please continue testing it as most of the test cases in the trello board
have not been touched at all.
A beta refresh / release candidate will be prepared after the upgrade issue
reported in https://trello.com/c/3oblVWDs will be fixed.

We are 7 working days to GA, I can't express how important it is to join
the testing effort of this oVirt beta if you expect your specific use case
to work without issues at GA.

Thanks,

Il giorno gio 7 apr 2022 alle ore 09:32 Sandro Bonazzola <
sbona...@redhat.com> ha scritto:

> Hi, 4.5.0 Beta was released yesterday!
> As for oVirt 4.5 Alpha test day we have a trello board at
> https://trello.com/b/3FZ7gdhM/ovirt-450-test-day .
> If you have troubles accessing the trello board please let me know.
>
> A release management draft page has been created at:
> https://www.ovirt.org/release/4.5.0/
>
> If you're willing to help testing the release during the test days please
> join the oVirt development mailing list at
> https://lists.ovirt.org/archives/list/de...@ovirt.org/ and report your
> feedback there.
> Please join the trello board for sharing what you're going to test so
> others can focus on different areas not covered by your test.
> If you don't want to register to trello, please share on the oVirt
> development mailing list and we'll add it to the board.
> The board is publicly visible also to non-registered users.
> Instructions for installing oVirt 4.5.0 Beta for testing have been added
> to the release page
> https://www.ovirt.org/release/4.5.0/ and to relevant documentation
> sections on the oVirt website.
>
> Professional Services, Integrators and Backup vendors: please run a test
> session against your additional services, integrated solutions,
> downstream rebuilds, backup solution accordingly.
> If you're not listed here:
> https://ovirt.org/community/user-stories/users-and-providers.html
> consider adding your company there.
>
> If you're willing to help updating the localization for oVirt 4.5.0 please
> follow https://ovirt.org/develop/localization.html
>
> If you're willing to help promoting the oVirt 4.5.0 release you can submit
> your banner proposals for the oVirt home page and for the
> social media advertising at https://github.com/oVirt/ovirt-site/issues
> The current banner proposal is here:
> https://github.com/oVirt/ovirt-site/issues/2797#issuecomment-1084842431
> As an alternative please consider submitting a case study as in
> https://ovirt.org/community/user-stories/user-stories.html
>
> Feature owners: please share recordings of the presentation of your
> feature for oVirt Youtube channel: https://www.youtube.com/c/ovirtproject
> If you have some new feature requiring community feedback / testing please
> add your case under the "Test looking for volunteer" section.
>
> Do you want to contribute to getting ready for this release?
> Read more about oVirt community at https://ovirt.org/community/ and join
> the oVirt developers https://ovirt.org/develop/
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA 
>
> sbona...@redhat.com
> 
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.*
>
>
>

-- 

Sandro Bonazzola

MANAGER, 

[ovirt-users] Re: Unable to update self hosted Engine due to missing mirrors

2022-02-21 Thread Nathanaël Blanchet

Le 21/02/2022 à 17:15, Klaas Demter a écrit :
Ansible is now being shipped as part of appstream in rhel8.6/centos 
stream repos. Not sure how this will be solved for ovirt/rhv :) But 
the most likely answer for a workaround is you need to exclude 
ansible-core in appstream repository. Or via cli something along the 
lines of "dnf update -x ansible-core"
Thank you, it is ok now but... we are faced to the first side effects of 
an upstream distribution that continuously ships newer packages and 
finally breaks dependencies (at least repos) into a stable ovirt realease.



Greetings

Klaas


On 2/21/22 16:43, Nathanaël Blanchet wrote:


Le 21/02/2022 à 16:28, Yedidyah Bar David a écrit :

sudo dnf reinstall --disablerepo='*'
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm


It partially solves  the issue:

Error:
 Problem: package ansible-runner-service-1.0.7-1.el8.noarch requires 
ansible, but none of the providers can be installed
  - package ansible-2.9.27-2.el8.noarch conflicts with ansible-core > 
2.11.0 provided by ansible-core-2.12.2-2.el8.x86_64
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 
2.10.0 provided by ansible-2.9.27-2.el8.noarch


It seems that 4.4.10 upgrades ansible from 2.9 branch to 2.12


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OANKECW6C4SM6USKJP7DJIAHUN5RALFI/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PJ5I2OBSKW75RJ5V7IDIZL2PO6KS24EP/


[ovirt-users] Re: Unable to update self hosted Engine due to missing mirrors

2022-02-21 Thread Nathanaël Blanchet

In fact, the repo is (for any reason) not installed at all, so simply do:

sudo dnf install --disablerepo='*' 
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm


Le 21/02/2022 à 16:39, Yannick Barone a écrit :

Please find below the result :

# dnf reinstall --disablerepo='*' 
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm
ovirt-release44.rpm 

   48 kB/s |  21 kB 00:00
Package ovirt-release44-4.4.10.1-1.el8.noarch not installed, cannot reinstall 
it.
No match for argument: 
/var/cache/dnf/commandline-a76fe31ae310b0c7/packages/ovirt-release44.rpm
Error: No packages marked for reinstall.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5C32SPWQ6DNL7MSU44FEVTCF7GFOOHBR/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KTVOGPHLXWCMH6ZVOXUFTV5ICQNGIN5L/


[ovirt-users] Re: Unable to update self hosted Engine due to missing mirrors

2022-02-21 Thread Nathanaël Blanchet


Le 21/02/2022 à 16:28, Yedidyah Bar David a écrit :

sudo dnf reinstall --disablerepo='*'
https://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm


It partially solves  the issue:

Error:
 Problem: package ansible-runner-service-1.0.7-1.el8.noarch requires 
ansible, but none of the providers can be installed
  - package ansible-2.9.27-2.el8.noarch conflicts with ansible-core > 
2.11.0 provided by ansible-core-2.12.2-2.el8.x86_64
  - package ansible-core-2.12.2-2.el8.x86_64 obsoletes ansible < 2.10.0 
provided by ansible-2.9.27-2.el8.noarch


It seems that 4.4.10 upgrades ansible from 2.9 branch to 2.12....

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MY6OOROPEZ2GDDG7WEURJQBYOJPCBP4C/


[ovirt-users] Re: Unable to update self hosted Engine due to missing mirrors

2022-02-21 Thread Nathanaël Blanchet

The same issue for me, on engine and ovirt-node hosts

Le 21/02/2022 à 13:37, yannick.bar...@carandache.com a écrit :

Hi,

I wanted to update my oVirt Engine Host and Hosts servers this morning, but I 
encouter the same error :

engine-upgrade-check or dnf update :

FAIL: Failed to download metadata for repo 'ovirt-4.4-centos-gluster8': Cannot 
prepare internal mirrorlist: No URLs in mirrorlist

The Engine and the Hosts are running Centos Stream with oVirt 4.4.9.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YJLQSYSAUZULKZS7LWWSPWTEEYMHYFW4/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OGOXKVN452PXSRXPO2MXI6V3UFVVG5FS/


[ovirt-users] Re: ansible ovirt_template: follow as replacement of nested_attributes

2022-02-21 Thread Nathanaël Blanchet
Okay, the issue came from ovirt.ovirt 1.6.5 collection, upgrading to 
1.6.6 manage to fetch the cluster name as follow:


    -  ovirt_template_info:
    auth: "{{ ovirt_auth }}"
    pattern: name=centos8-stream.x
        follows: ['cluster']
       # fetch_nested: yes
   # nested_attributes: ['name']

    - debug:
    msg: "{{result.ovirt_templates|map(attribute='cluster.name')}}"

Le 16/02/2022 à 16:35, Nathanaël Blanchet a écrit :

Hello,

I was familiar with the ansible fetch_nested/nested_attributes to get 
additionnal information from API.


Recently it has been deprecated in order to be replaced by the 
"follow(s)" verb.


I understand it will follow the links into the schema definition of 
the object like:


href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/permissions" 
rel="permissions"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/tags" 
rel="tags"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/cdroms" 
rel="cdroms"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/nics" 
rel="nics"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/watchdogs" 
rel="watchdogs"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/diskattachments" 
rel="diskattachments"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/graphicsconsoles" 
rel="graphicsconsoles"/>


but I can't get fetch nested (name of cluster) of :

href="/ovirt-engine/api/clusters/bbeb38a4-79f0-11ec-86cb-00163e6d6a50" 
id="bbeb38a4-79f0-11ec-86cb-00163e6d6a50"/>


I was used to do this query with:

fetch_nested: yes
nested_attribute:
    - name

Is it possible to do the same with "follow(s)"?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DGUAWXYNOA6HGRZKYFDF4D3Z3T5ATACI/


[ovirt-users] Re: oVirt alternatives

2022-02-21 Thread Nathanaël Blanchet
Le 21 févr. 2022 08:31, Sandro Bonazzola  a écrit :Il giorno dom 20 feb 2022 alle ore 22:47 Nathanaël Blanchet <blanc...@abes.fr> ha scritto:Hello, Is okd/openshift virtualization designed to be a full replacement of ovirt/redhat by embedding the same level of advancedoVirt is a very mature project, integrated with most of the Red Hat ecosystem, mostly being maintained without any new big features.It has live-snapshot, live-storage-migration, memory overcommit management, passthrough of a very specific PCI device on a particular host, a VM portal, OpenShift IPI.It lacks integrated container management.OKD Virtualization is being very actively developed quickly closing gaps.It has integrated container management, ability to leverage the k8s distributed architecture/infrastructure and to leverage k8s assets like exclusive CPU placements.It currently lacks live-snapshot, live-storage-migration, memory overcommit management, passthrough of a very specific PCI device on a particular host, VM portal (OKD UI is more similar to Admin portal), thin-provisioning (of VMs on top of templates), hot (un)plug (disk/memory/NIC), high availability with VM leases, incremental backup, VDI features like template versions, sealing (virt-sysprep).So OKD is not feature complete replacement for oVirt yet.So okd virtualization aims to be a replacement in the next years when all ovirt features will be achivied for kubvirt, that's why ovirt continue to be maintained for the moment, great new! Openshift IPI being also maintained is a great new because bare metal okd installation is not as easy as ovirt is (even I know we need bare metal to consume okd virtualization). Can you confirm we can merge bare metal and virtualized core is hosts? Is nested virtualization available?-- Sandro BonazzolaMANAGER, SOFTWARE ENGINEERING, EMEA R RHVRed Hat EMEAsbona...@redhat.com   Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ILMHSVVLZPQIOHDPNONEZOL3ZNX4UVHI/


[ovirt-users] Re: oVirt alternatives

2022-02-20 Thread Nathanaël Blanchet
Hello, Is okd/openshift virtualization designed to be a full replacement of 
ovirt/redhat by embedding the same level of advanced

Il giorno dom 6 feb 2022 alle ore 14:06 Wesley Stewart 
ha scritto:

> Has anyone tried the open shift upstream old?  Looks like they support
> virtualization now.  Which I'm guessing is the upstream for openshift
> virtualization?
>
> https://docs.okd.io/latest/virt/about-virt.html
>

I gave a presentation about it 2 days ago at FOSDEM:
https://fosdem.org/2022/schedule/event/vai_intro_okd/
but looks like recordings are not yet available at
https://video.fosdem.org/2022/
Slides are here:
https://fosdem.org/2022/schedule/event/vai_intro_okd/attachments/slides/4843/export/events/attachments/vai_intro_okd/slides/4843/OKD_Virtualization_Community.pdf




>
>
>
> On Sat, Feb 5, 2022, 10:34 PM Alex McWhirter  wrote:
>
>> Oh i have spent years looking.
>>
>> ProxMox is probably the closest option, but has no multi-clustering
>> support. The clusters are more or less isolated from each other, and
>> would need another layer if you needed the ability to migrate between
>> them.
>>
>> XCP-ng, cool. No spice support. No UI for managing clustered storage
>> that is open source.
>>
>> Harvester, probably the closest / newest contender. Needs a lot more
>> attention / work.
>>
>> OpenNebula, more like a DIY AWS than anything else, but was functional
>> last i played with it.
>>
>>
>>
>> Has anyone actually played with OpenShift virtualization (replaces RHV)?
>> Wonder if OKD supports it with a similar model?
>>
>> On 2022-02-05 07:40, Thomas Hoberg wrote:
>> > There is unfortunately no formal announcement on the fate of oVirt,
>> > but with RHGS and RHV having a known end-of-life, oVirt may well shut
>> > down in Q2.
>> >
>> > So it's time to hunt for an alternative for those of us to came to
>> > oVirt because they had already rejected vSAN or Nutanix.
>> >
>> > Let's post what we find here in this thread.
>> > ___
>> > Users mailing list -- users@ovirt.org
>> > To unsubscribe send an email to users-le...@ovirt.org
>> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> > oVirt Code of Conduct:
>> > https://www.ovirt.org/community/about/community-guidelines/
>> > List Archives:
>> >
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/R4YFNNCTW5VVVRKSV2OORQ2UWZ2MTUDD/
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EYPC6QXF55UCQPMQL5LDU6XMAF2CZOEG/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z6JTGNYABYPZHHZ3F5Y75KF3KYDWV5OC/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.*


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JSNPCQPTN32WIFEDI3LR6X63ELE57GMM/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QZKA2VEMG6B3MOJL2RV6RS5W6XSHNQDB/


[ovirt-users] ansible ovirt_template: follow as replacement of nested_attributes

2022-02-16 Thread Nathanaël Blanchet

Hello,

I was familiar with the ansible fetch_nested/nested_attributes to get 
additionnal information from API.


Recently it has been deprecated in order to be replaced by the 
"follow(s)" verb.


I understand it will follow the links into the schema definition of the 
object like:


href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/permissions" 
rel="permissions"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/tags" 
rel="tags"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/cdroms" 
rel="cdroms"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/nics" 
rel="nics"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/watchdogs" 
rel="watchdogs"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/diskattachments" 
rel="diskattachments"/>
href="/ovirt-engine/api/templates/e020281a-f5f0-4d98-91e3-4f3a9fc069b1/graphicsconsoles" 
rel="graphicsconsoles"/>


but I can't get fetch nested (name of cluster) of :

href="/ovirt-engine/api/clusters/bbeb38a4-79f0-11ec-86cb-00163e6d6a50" 
id="bbeb38a4-79f0-11ec-86cb-00163e6d6a50"/>


I was used to do this query with:

fetch_nested: yes
nested_attribute:
    - name

Is it possible to do the same with "follow(s)"?

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/A2UW7JJUP6P5T7U3NTHXAF2HSSCNAGGZ/


[ovirt-users] Re: vm seal

2022-02-16 Thread Nathanaël Blanchet


Le 15/02/2022 à 15:01, Arik Hadas a écrit :



On Tue, Feb 15, 2022 at 12:26 PM Nathanaël Blanchet  
wrote:



Le 15/02/2022 à 10:32, Arik Hadas a écrit :



On Mon, Feb 14, 2022 at 11:29 PM Nathanaël Blanchet
 wrote:



Le 14 févr. 2022 21:09, Arik Hadas  a écrit :



On Mon, Feb 14, 2022 at 8:44 PM Nathanaël Blanchet
 wrote:


Le 14/02/2022 à 17:45, Arik Hadas a écrit :



On Mon, Feb 14, 2022 at 4:52 PM Nathanaël
Blanchet  wrote:

Hello,

I noticed that a vm created from a "sealed"
template is initially mount
on one host with libguestfs, with a
virt-sysprep process, before getting
ready to be used.

This should be unuseful given that the
template is already sealed. Is
there a reason to that?


Yes, we do this in order to produce different LVM
IDs and machine IDs for the provisioned VMs, see:
https://gerrit.ovirt.org/c/ovirt-engine/+/115009

okay, but, I modified  the
/usr/lib/python3.6/site-packages/vdsm/virtsysprep.py
file like following:

args = ['--hostname', 'localhost',
''--selinux-relabel', '--update', '--network']"

in order to update packages on  template creation.

The template creation still works and the template is
checked as sealed and os is updated, but now the vm
creation never ends up and I have to manually kill
the virt-sysprep process to stop the infinite process
creation.

I believed it was a good workaround to get updated
templates, but I had to rollback to default
virt-sysprep args configuration, unless there is
trick do to so?

If you create the VM from the webadmin, you can uncheck
the 'sealed' option in the new-vm dialog to skip the
second execution of virt-sysprep on the VM
If you create it from REST-API (or the VM portal), you
might want to change the configuration of the template in
the database:
update vm_static set is_template_sealed='f' where
vm_name='';

Thanks for this useful tip, but as you said if second seal
has been designed it is to produce different VM IDs... So
what will happen if I skip this process?


It was that way (i.e., without sysprep-ing the vm volumes) for
years - if that worked well for you, you shouldn't notice a
difference

Secondly I'd like to know if there is a way to skip the
second seal from the template with oVirt VM ansible module(
don't seem to be), it is safer than modifying the DB.


Ansible is in the second category (since it is based on
oVirt's REST-API) so yeah, I don't see a different way you can
achieve this at the moment
And you're right, it's not recommended to modify the DB directly
but the same goes for changing the VDSM source files ;)
Anyway, that is_template_sealed field only affects the UI
(presenting whether the template is sealed) and this
functionality (deciding whether virt-sysprep should be executed
on the vm volumes) - so changing it should be safe.


Thank you it works as expected now.

But giving that my templates are auto-created, is there a way to
set is_template_sealed to false at template creation rather than
manually doing it in a second time?

We change the database via Ansible during the deployment of hosted 
engine [1], maybe you can do it in a similar way..


Filed https://bugzilla.redhat.com/show_bug.cgi?id=2054681 for adding 
the configuration we have at the webadmin to the API

thanks for the bugzilla, ansible module via API is indeed the best practice


[1] 
https://github.com/oVirt/ovirt-ansible-collection/blob/1.6.6-1/roles/hosted_engine_setup/tasks/create_target_vm/02_engine_vm_configuration.yml#L11-L15

- name: Unseal "{{survey_template}}" template at DB level
command: >-
psql -d engine -c
"UPDATE vm_static SET is_template_sealed='f' WHERE
vm_name = '{{survey_template}}'"
become: true
become_user: postgres
become_method: sudo
changed_when: true
register: db_vm_update
delegate_to: "{{server}}"

works like a charm, never done this such a thing before but I keep it in 
mind for future non native module.






    -- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELL

[ovirt-users] Re: vm seal

2022-02-15 Thread Nathanaël Blanchet


Le 15/02/2022 à 10:32, Arik Hadas a écrit :



On Mon, Feb 14, 2022 at 11:29 PM Nathanaël Blanchet  
wrote:




Le 14 févr. 2022 21:09, Arik Hadas  a écrit :



On Mon, Feb 14, 2022 at 8:44 PM Nathanaël Blanchet
 wrote:


Le 14/02/2022 à 17:45, Arik Hadas a écrit :



On Mon, Feb 14, 2022 at 4:52 PM Nathanaël Blanchet
 wrote:

Hello,

I noticed that a vm created from a "sealed"
template is initially mount
on one host with libguestfs, with a virt-sysprep
process, before getting
ready to be used.

This should be unuseful given that the template is
already sealed. Is
there a reason to that?


Yes, we do this in order to produce different LVM IDs
and machine IDs for the provisioned VMs, see:
https://gerrit.ovirt.org/c/ovirt-engine/+/115009

okay, but, I modified  the
/usr/lib/python3.6/site-packages/vdsm/virtsysprep.py file
like following:

args = ['--hostname', 'localhost', ''--selinux-relabel',
'--update', '--network']"

in order to update packages on template creation.

The template creation still works and the template is
checked as sealed and os is updated, but now the vm
creation never ends up and I have to manually kill the
virt-sysprep process to stop the infinite process creation.

I believed it was a good workaround to get updated
templates, but I had to rollback to default virt-sysprep
args configuration, unless there is trick do to so?

If you create the VM from the webadmin, you can uncheck the
'sealed' option in the new-vm dialog to skip the second
execution of virt-sysprep on the VM
If you create it from REST-API (or the VM portal), you might
want to change the configuration of the template in the database:
update vm_static set is_template_sealed='f' where
vm_name='';

Thanks for this useful tip, but as you said if second seal has
been designed it is to produce different VM IDs... So what will
happen if I skip this process?


It was that way (i.e., without sysprep-ing the vm volumes) for years - 
if that worked well for you, you shouldn't notice a difference


Secondly I'd like to know if there is a way to skip the second
seal from the template with oVirt VM ansible module( don't seem to
be), it is safer than modifying the DB.


Ansible is in the second category (since it is based on 
oVirt's REST-API) so yeah, I don't see a different way you can 
achieve this at the moment
And you're right, it's not recommended to modify the DB directly but 
the same goes for changing the VDSM source files ;)
Anyway, that is_template_sealed field only affects the UI (presenting 
whether the template is sealed) and this functionality (deciding 
whether virt-sysprep should be executed on the vm volumes) - so 
changing it should be safe.


Thank you it works as expected now.

But giving that my templates are auto-created, is there a way to set 
is_template_sealed to false at template creation rather than manually 
doing it in a second time?






-- 
    Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/7VSOFV3TFSMKPEZBI2ERRVUCTFGJALQT/

-- 
    Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr



--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Pr

[ovirt-users] Re: Xcp-ng, first impressions as an oVirt HCI alternative

2022-02-14 Thread Nathanaël Blanchet
e able to use it for free.

The current beta release only supports replicated mode and only up to four 
nodes. But it seems to work reliably. Write amplification is 4x, so bandwidth 
drops to 25% and is limited to the network speed, but reads will go to the 
local node at storage hardware bandwidths.

The 2, 3 and 4 node replicated setup works today with the scripts they provide. 
That's not quite as efficient as the 2R+1A setup in oVirt, but seems rock solid 
and just works, which was never that easy in oVirt.

Hyperconverged is very attractive at 3 nodes, because good fault resilience 
can't be done any cheaper. But the industry agrees that it tends to lose 
financial attraction when you grow to dozens of machines and nobody in is right 
mind would operate a real cloud using HCI. But going from 3 to say two dozen 
should be doable and easy: it never was for oVirt.

XCP-ng or rather LINSTOR won't support any number or storage nodes or easy 
linear increases like Gluster could (in theory).
So far it's only much, much better at getting things going.

Forum and community:
The documentation is rather good, but can be lighter on things which are "native 
Xen", as that would repeat a lot of the effort already expended by Citrix. It's good 
that I've been around the block a couple of times already since VM/370, but there are 
holes or missing details when you need to ask questions.

The community isn't giant, but comfortably big enough. The forum's user 
interface is vastly better than this one, but then I've never seen something as 
slow as ovirt.org for a long time.

Technical questions are answered extremely quickly and mostly by the staff from 
the small French company themselves. But mostly it's much easier to find 
answers to questions already asked, which is the most typical case.

The general impression is that there are much fewer moving parts and things 
things that can go wrong. There is no Ansible, not a single daemon on the 
nodes, a management engine that seems very light and with minimal state that 
doesn't need a DBA to hold and manage it. The Xen hypervisor seems much smarter 
than KVM on its own and the Xoa has both a rich API to do things, but also 
offers an API to next-level management.

It may have less overall features than oVirt, but I haven't found anything that 
I really missed. It's much easier and quicker to install and operate with 
nothing but GUI which is a godsent: I want to use the farm, not spend my time 
managing it.

Motivational rant originally at the top... tl;dr

My original priorities for chosing oVirt were:
1. CentOS as RHEL downstream -> stable platform, full vendor vulnerability 
management included, big benefit in compliance
2. Integrated HCI -> Just slap a couple (3/6/9) of leftover servers together 
for something fault resilient, no other components required, quick start out of 
the box solution with a few clicks in a GUI
3. Fully open source (& logs), can always read the source to understand what's 
going on, better than your typical support engineer
4. No support or license contract, unless you want/need it, but the ability to 
switch that on when it paid for itself

The more famous competitors, vSphere and Nutanix didn't offer any of that.

(Citrix) Xen I excluded, because a) Xen seemd "old school+niche" compared to KVM b) Citrix reduced 
"free" to "useless"

I fell in love with Gluster from its design: it felt like a really smart 
solution.
I fell out with Gluster from its operation and performance: I can't count how many times 
I had to restart daemons and issue "gluster heal" commands to resettle things 
after little more than a node update.

I rediscovered Xcp-ng when I discovered that HCI and RHV had ben EOLd.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/H4O4MHM5MVTHKR7ARO3APAT7SMBMYZN6/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SK2V5WI6IK2F5OXHH2YQBOK622KZ4KKU/


[ovirt-users] Re: vm seal

2022-02-14 Thread Nathanaël Blanchet
Le 14 févr. 2022 21:09, Arik Hadas  a écrit :On Mon, Feb 14, 2022 at 8:44 PM Nathanaël Blanchet <blanc...@abes.fr> wrote:
  

  
  


Le 14/02/2022 à 17:45, Arik Hadas a
  écrit :


  
  




  On Mon, Feb 14, 2022 at 4:52
    PM Nathanaël Blanchet <blanc...@abes.fr>
wrote:
  
  Hello,

I noticed that a vm created from a "sealed" template is
initially mount 
on one host with libguestfs, with a virt-sysprep process,
before getting 
ready to be used.

This should be unuseful given that the template is already
sealed. Is 
there a reason to that?
  
  
  
  Yes, we do this in order to produce different LVM IDs and
machine IDs for the provisioned VMs, see: https://gerrit.ovirt.org/c/ovirt-engine/+/115009

  

okay, but, I modified  the
  /usr/lib/python3.6/site-packages/vdsm/virtsysprep.py file like
  following:
args = ['--hostname', 'localhost', ''--selinux-relabel',
  '--update', '--network']"
in order to update packages on  template creation.
The template creation still works and the template is checked as
  sealed and os is updated, but now the vm creation never ends up
  and I have to manually kill the virt-sysprep process to stop the
  infinite process creation.
I believed it was a good workaround to get updated templates, but
  I had to rollback to default virt-sysprep args configuration,
  unless there is trick do to so?If you create the VM from the webadmin, you can uncheck the 'sealed' option in the new-vm dialog to skip the second execution of virt-sysprep on the VMIf you create it from REST-API (or the VM portal), you might want to change the configuration of the template in the database:update vm_static set is_template_sealed='f' where vm_name='';Thanks for this useful tip, but as you said if second seal has been designed it is to produce different VM IDs... So what will happen if I skip this process?Secondly I'd like to know if there is a way to skip the second seal from the template with oVirt VM ansible module( don't seem to be), it is safer than modifying the DB. 


  

  
  
  

    -- 
    Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5       
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/7VSOFV3TFSMKPEZBI2ERRVUCTFGJALQT/
  
    
      

-- 
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 	
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
  


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BDZO7UUPYFDRBR3DNWH7EWKEV5BMYFE/


[ovirt-users] Re: vm seal

2022-02-14 Thread Nathanaël Blanchet


Le 14/02/2022 à 17:45, Arik Hadas a écrit :



On Mon, Feb 14, 2022 at 4:52 PM Nathanaël Blanchet  
wrote:


Hello,

I noticed that a vm created from a "sealed" template is initially
mount
on one host with libguestfs, with a virt-sysprep process, before
getting
ready to be used.

This should be unuseful given that the template is already sealed. Is
there a reason to that?


Yes, we do this in order to produce different LVM IDs and machine IDs 
for the provisioned VMs, see: 
https://gerrit.ovirt.org/c/ovirt-engine/+/115009


okay, but, I modified  the 
/usr/lib/python3.6/site-packages/vdsm/virtsysprep.py file like following:


args = ['--hostname', 'localhost', ''--selinux-relabel', '--update', 
'--network']"


in order to update packages on  template creation.

The template creation still works and the template is checked as sealed 
and os is updated, but now the vm creation never ends up and I have to 
manually kill the virt-sysprep process to stop the infinite process 
creation.


I believed it was a good workaround to get updated templates, but I had 
to rollback to default virt-sysprep args configuration, unless there is 
trick do to so?





-- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/7VSOFV3TFSMKPEZBI2ERRVUCTFGJALQT/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AHM6OCSBE6DYWRJGUT3ZQLKEMXNQE7S2/


[ovirt-users] vm seal

2022-02-14 Thread Nathanaël Blanchet

Hello,

I noticed that a vm created from a "sealed" template is initially mount 
on one host with libguestfs, with a virt-sysprep process, before getting 
ready to be used.


This should be unuseful given that the template is already sealed. Is 
there a reason to that?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7VSOFV3TFSMKPEZBI2ERRVUCTFGJALQT/


[ovirt-users] Re: RHGS and RHV closing down: could you please put that on the home page?

2022-02-05 Thread Nathanaël Blanchet
Can anybody from redhat confirm what is supposed here, all my staff depends on 
the future of ovirt. How can we help to maintain this project alive if redhat 
dev are not implicated anymore? I may donate some hardware or is it unuseful?
Le 5 févr. 2022 11:31, Thomas Hoberg a écrit :


Please have a look here:
https://access.redhat.com/support/policy/updates/rhev/ 

Without a commercial product to pay the vast majority of the developers, there 
is just no chance oVirt can survive (unless you're ready to take over). RHV 4.4 
full support ends this August and that very likely means that oVirt won't 
receive updates past July (judging by how things happened with 4.3).

And those will be CI tested against the Stream Beta not EL8 including RHEL.

Only with a RHV support contract ($) you will receive service until 2024 and 
with extended support ($$$) until 2026.

oVirt is dead already. They have known since October. They should have told us 
last year.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZPQ7DO75CVINFKDWXTSH6D2KM67L5FI4/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DDYD27NS5QB5LIJJ3UQXKVKLLN3MYBYB/


[ovirt-users] Re: no snaphot but engines complains there is one when trying to remove disk

2022-01-31 Thread Nathanaël Blanchet


Le 31/01/2022 à 17:38, Benny Zlotnik a écrit :

does their vm_snapshot_id exists in the snapshots table?

do they exist on the storage? I suggest running
   $ vdsm-tool dump-volume-chain 


it doesn't seem to exist:


   image:    ba2efe1a-8b83-4406-8711-7120b4bd11d0

 - 08966754-0bb6-4c88-9ad6-35d6242fa380
   status: OK, voltype: LEAF, format: RAW, legality: LEGAL, 
type: PREALLOCATED, capacity: 219982856192, truesize: 219982856192


And checking what the chain looks like there.

In theory it's possible to remove them from the database, but the
relationships between the images would need to be fixed as well, as
both images you mentioned have children

okay, tell me how to remove them from the DB please.


On Mon, Jan 31, 2022 at 5:46 PM Nathanaël Blanchet  wrote:

Engine complains about 60087f63-6237-4419-a5dd-9a48c84c1c43 and
109fac1e-c2e3-4ba6-9867-5d1c94d3a447

Le 31/01/2022 à 16:26, Benny Zlotnik a écrit :

I see all images have a vm_snapshot_id that's not null, do you know
which image it complains about?
It is possible that there is no corresponding entry in the snapshots
table, since I see there is foreign key


On Mon, Jan 31, 2022 at 4:56 PM Nathanaël Blanchet  wrote:

engine=# select * from images where
image_group_id='ba2efe1a-8b83-4406-8711-7120b4bd11d0';
-[ RECORD 1 ]-+-
image_guid| 0bf72cb1-d90d-4b3d-bbfe-1e1c58a6ce46
creation_date | 2022-01-31 10:03:29.958+01
size  | 219902115840
it_guid   | ----
parentid  | 08966754-0bb6-4c88-9ad6-35d6242fa380
imagestatus   | 1
lastmodified  | 2022-01-31 10:04:35.519+01
vm_snapshot_id| 623d7b5a-b90d-48b6-8db9-a86ed739ad71
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:03:30.067155+01
_update_date  | 2022-01-31 10:04:35.519545+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 2 ]-+-
image_guid| ad3205a5-823d-4997-adc8-df769780fa3b
creation_date | 2022-01-31 10:08:11.749+01
size  | 219902115840
it_guid   | ----
parentid  | 733b1d36-d107-4adc-9ac0-a0c800c2c22c
imagestatus   | 1
lastmodified  | 2022-01-31 10:10:36.54+01
vm_snapshot_id| c2fb7dbf-5ea9-46f9-8735-e2532193219d
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:08:11.841814+01
_update_date  | 2022-01-31 10:10:36.540134+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 3 ]-+-
image_guid| 70c4877a-1649-4882-9cca-38cc40bd7d5a
creation_date | 2022-01-31 10:12:50.02+01
size  | 219902115840
it_guid   | ----
parentid  | a8b0087c-e975-4b8a-b137-0ea1c9107db6
imagestatus   | 1
lastmodified  | 2022-01-31 10:15:35.55+01
vm_snapshot_id| e0df180f-f728-44c3-8d61-d53f0cace1c4
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:12:50.120438+01
_update_date  | 2022-01-31 10:15:35.550984+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 4 ]-+-
image_guid| 20585d25-a90d-4ef5-a9bb-2205f79c99d8
creation_date | 2022-01-31 10:04:35.419+01
size  | 219902115840
it_guid   | ----
parentid  | 0bf72cb1-d90d-4b3d-bbfe-1e1c58a6ce46
imagestatus   | 1
lastmodified  | 2022-01-31 10:06:15.902+01
vm_snapshot_id| 93aa0faa-9d51-4550-87ca-801de8d4ad40
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:04:35.519545+01
_update_date  | 2022-01-31 10:06:15.903055+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 5 ]-+-
image_guid| 733b1d36-d107-4adc-9ac0-a0c800c2c22c
creation_date | 2022-01-31 10:06:15.78+01
size  | 219902115840
it_guid   | ----
parentid  | 20585d25-a90d-4ef5-a9bb-2205f79c99d8
imagestatus   | 1
lastmodified  | 2022-01-31 10:08:11.841+01
vm_snapshot_id| 70717bc6-d018-4229-88d2-0a6b31ad0153
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022

[ovirt-users] Re: no snaphot but engines complains there is one when trying to remove disk

2022-01-31 Thread Nathanaël Blanchet
Engine complains about 60087f63-6237-4419-a5dd-9a48c84c1c43 and 
109fac1e-c2e3-4ba6-9867-5d1c94d3a447


Le 31/01/2022 à 16:26, Benny Zlotnik a écrit :

I see all images have a vm_snapshot_id that's not null, do you know
which image it complains about?
It is possible that there is no corresponding entry in the snapshots
table, since I see there is foreign key


On Mon, Jan 31, 2022 at 4:56 PM Nathanaël Blanchet  wrote:

engine=# select * from images where
image_group_id='ba2efe1a-8b83-4406-8711-7120b4bd11d0';
-[ RECORD 1 ]-+-
image_guid| 0bf72cb1-d90d-4b3d-bbfe-1e1c58a6ce46
creation_date | 2022-01-31 10:03:29.958+01
size  | 219902115840
it_guid   | ----
parentid  | 08966754-0bb6-4c88-9ad6-35d6242fa380
imagestatus   | 1
lastmodified  | 2022-01-31 10:04:35.519+01
vm_snapshot_id| 623d7b5a-b90d-48b6-8db9-a86ed739ad71
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:03:30.067155+01
_update_date  | 2022-01-31 10:04:35.519545+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 2 ]-+-
image_guid| ad3205a5-823d-4997-adc8-df769780fa3b
creation_date | 2022-01-31 10:08:11.749+01
size  | 219902115840
it_guid   | ----
parentid  | 733b1d36-d107-4adc-9ac0-a0c800c2c22c
imagestatus   | 1
lastmodified  | 2022-01-31 10:10:36.54+01
vm_snapshot_id| c2fb7dbf-5ea9-46f9-8735-e2532193219d
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:08:11.841814+01
_update_date  | 2022-01-31 10:10:36.540134+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 3 ]-+-
image_guid| 70c4877a-1649-4882-9cca-38cc40bd7d5a
creation_date | 2022-01-31 10:12:50.02+01
size  | 219902115840
it_guid   | ----
parentid  | a8b0087c-e975-4b8a-b137-0ea1c9107db6
imagestatus   | 1
lastmodified  | 2022-01-31 10:15:35.55+01
vm_snapshot_id| e0df180f-f728-44c3-8d61-d53f0cace1c4
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:12:50.120438+01
_update_date  | 2022-01-31 10:15:35.550984+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 4 ]-+-
image_guid| 20585d25-a90d-4ef5-a9bb-2205f79c99d8
creation_date | 2022-01-31 10:04:35.419+01
size  | 219902115840
it_guid   | ----
parentid  | 0bf72cb1-d90d-4b3d-bbfe-1e1c58a6ce46
imagestatus   | 1
lastmodified  | 2022-01-31 10:06:15.902+01
vm_snapshot_id| 93aa0faa-9d51-4550-87ca-801de8d4ad40
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:04:35.519545+01
_update_date  | 2022-01-31 10:06:15.903055+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 5 ]-+-
image_guid| 733b1d36-d107-4adc-9ac0-a0c800c2c22c
creation_date | 2022-01-31 10:06:15.78+01
size  | 219902115840
it_guid   | ----
parentid  | 20585d25-a90d-4ef5-a9bb-2205f79c99d8
imagestatus   | 1
lastmodified  | 2022-01-31 10:08:11.841+01
vm_snapshot_id| 70717bc6-d018-4229-88d2-0a6b31ad0153
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:06:15.903055+01
_update_date  | 2022-01-31 10:08:11.841814+01
active| f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 6 ]-+-
image_guid| a8b0087c-e975-4b8a-b137-0ea1c9107db6
creation_date | 2022-01-31 10:10:36.419+01
size  | 219902115840
it_guid   | ----
parentid  | ad3205a5-823d-4997-adc8-df769780fa3b
imagestatus   | 1
lastmodified  | 2022-01-31 10:12:50.12+01
vm_snapshot_id| 5de5b2ee-0ca4-476f-963d-7bf9b3601817
volume_type   | 2
volume_format | 4
image_group_id| ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:10:36.540134+01

[ovirt-users] Re: no snaphot but engines complains there is one when trying to remove disk

2022-01-31 Thread Nathanaël Blanchet

Hello

Le 31/01/2022 à 14:41, Gianluca Cecchi a écrit :
On Mon, Jan 31, 2022 at 2:29 PM Nathanaël Blanchet  
wrote:


Hi all,

A colleague launched this morning a snapshot creation, there was
no error message but he wasn't able to start the vm anymore, with
this issue : VM PSI-SYB-DEV is down with error. Exit message:
Unable to get volume size for domain
a5be6cae-f0c8-452f-b7cd-70d0e5eed710 volume
109fac1e-c2e3-4ba6-9867-5d1c94d3a447..



No direct help, but you had better specify the exact version of 
components and if the snapshot was directly executed inside web admin 
gui or via rest/API or with any kind of external sw.

Possibly anything could have had different effects depending on versions

He executed with webui engine 4.4.9


Gianluca


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2WQ4Q6ITMRPA3G6DW23QZG4AE5NDQ55J/


[ovirt-users] Re: no snaphot but engines complains there is one when trying to remove disk

2022-01-31 Thread Nathanaël Blanchet
  | 60087f63-6237-4419-a5dd-9a48c84c1c43
imagestatus   | 1
lastmodified  | 2022-01-31 14:58:30.263+01
vm_snapshot_id    | c05d9174-4338-40a1-9040-f75bdbc3903c
volume_type   | 2
volume_format | 4
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 11:14:41.055894+01
_update_date  | 2022-01-31 14:58:30.26388+01
active    | f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 8 ]-+-
image_guid    | 7f95b43c-6007-48de-b107-fad3520c2fa6
creation_date | 2022-01-31 10:15:35.436+01
size  | 219902115840
it_guid   | ----
parentid  | 70c4877a-1649-4882-9cca-38cc40bd7d5a
imagestatus   | 1
lastmodified  | 2022-01-31 10:17:09.272+01
vm_snapshot_id    | f0a391a0-e129-4f6e-afc7-304ca2dda4d1
volume_type   | 2
volume_format | 4
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:15:35.550984+01
_update_date  | 2022-01-31 10:17:09.272314+01
active    | f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 9 ]-+-
image_guid    | 68db1cb9-6227-4ab2-af77-0c336488abbc
creation_date | 2022-01-31 14:58:30.139+01
size  | 219902115840
it_guid   | ----
parentid  | 109fac1e-c2e3-4ba6-9867-5d1c94d3a447
imagestatus   | 1
lastmodified  | 2022-01-31 14:58:30.139+01
vm_snapshot_id    | dad5a7ec-804d-4351-bb97-5ddc24b2072e
volume_type   | 2
volume_format | 4
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 14:58:30.26388+01
_update_date  |
active    | t
volume_classification | 0
qcow_compat   | 0
-[ RECORD 10 ]+-
image_guid    | 379db97c-bfe1-4804-9b1f-576050efdcd3
creation_date | 2022-01-31 10:17:09.148+01
size  | 219902115840
it_guid   | ----
parentid  | 7f95b43c-6007-48de-b107-fad3520c2fa6
imagestatus   | 1
lastmodified  | 2022-01-31 10:27:58.556+01
vm_snapshot_id    | 89c331f6-4799-4f03-888d-d9b680f1a4c6
volume_type   | 2
volume_format | 4
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:17:09.272314+01
_update_date  | 2022-01-31 10:27:58.557011+01
active    | f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 11 ]+-
image_guid    | 60087f63-6237-4419-a5dd-9a48c84c1c43
creation_date | 2022-01-31 10:27:58.444+01
size  | 219902115840
it_guid   | ----
parentid  | 379db97c-bfe1-4804-9b1f-576050efdcd3
imagestatus   | 1
lastmodified  | 2022-01-31 11:14:41.055+01
vm_snapshot_id    | 979b7cfd-4b38-4e95-92e6-ed77f5320e73
volume_type   | 2
volume_format | 4
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2022-01-31 10:27:58.557011+01
_update_date  | 2022-01-31 11:14:41.055894+01
active    | f
volume_classification | 1
qcow_compat   | 0
-[ RECORD 12 ]+-
image_guid    | 08966754-0bb6-4c88-9ad6-35d6242fa380
creation_date | 2018-11-15 10:08:56+01
size  | 219902115840
it_guid   | ----
parentid  | ----
imagestatus   | 1
lastmodified  | 2022-01-31 10:03:30.067+01
vm_snapshot_id    | adedebd6-c342-4bcd-9a6c-54b9abec3a7b
volume_type   | 1
volume_format | 5
image_group_id    | ba2efe1a-8b83-4406-8711-7120b4bd11d0
_create_date  | 2018-11-15 10:11:10.302763+01
_update_date  | 2022-01-31 10:03:30.067155+01
active    | f
volume_classification | 1
qcow_compat   | 0

Le 31/01/2022 à 14:40, Benny Zlotnik a écrit :

-c "select * from images where
image_group_id = ''"


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U5VLTMZBG7AEX3YIBYRZLIBZ3XSNEYLR/


[ovirt-users] no snaphot but engines complains there is one when trying to remove disk

2022-01-31 Thread Nathanaël Blanchet

Hi all,

A colleague launched this morning a snapshot creation, there was no 
error message but he wasn't able to start the vm anymore, with this 
issue : VM PSI-SYB-DEV is down with error. Exit message: Unable to get 
volume size for domain a5be6cae-f0c8-452f-b7cd-70d0e5eed710 volume 
109fac1e-c2e3-4ba6-9867-5d1c94d3a447..


I tried many things but nothing works: it is impossible to remove this 
disk, or copy it, or clone the vm :


Cannot detach Virtual Disk. The disk is already configured in a 
snapshot. In order to detach it, remove the disk's snapshots.


There is no snaphost listed into webui or api (so not snapshot id), 
while disk_snapshots exists into the associated storage domain.


So I tried to remove disks snapshot direvctly with API followind the 
DELETE method


|DELETE /api/storagedomains/{storage_id}/disksnapshots/{image_id}|

[Cannot remove Disk Snapshot. VM\'s Snapshot does not exist.]

In conclusion: vm_disks can't be removed because of the non existent 
associated vm's snapshot id.


I tried to remove vm_snapshots disks references directly into the 
postgres DB but I didn't find the correct table.


What can I do now?

Your precious help is welcome.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WV3AJS4W5NAY55CV6Z3VVOIKG3SBKJ26/


[ovirt-users] Re: CentOS Stream Guest OS 9 support

2022-01-18 Thread Nathanaël Blanchet

Why not? I'm running several instances without specific issues.

Le 18/01/2022 à 16:49, Gangi Reddy a écrit :

Can we create CentOS Stream 9 guest OS VM in Ovirt? Do you have any link that i 
refer?

Ovirt:
Software Version:4.4.7.6-1.el8

Host:
OS Version: RHEL - 8.4.2105.0 - 3.el8
OS Description: oVirt Node 4.4.8
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XZHHWKAOQ6ZIIKMEU3RB353ZBIHSHOPN/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F4PRUMBTNP7EUU43IOIXCILL34LZR5MN/


[ovirt-users] Re: give cloud-init the VM name

2022-01-17 Thread Nathanaël Blanchet

Hello,

Two ways of thinking:

1. the vdsm hook could be very easy to write so as to make what you
   desire (ovirtsdk4 is presinstalled on ovirt node):
   importovirtsdk4 assdk
   importovirtsdk4.types astypes
   fromvdsm.hook importhooking
   # Get the vm name from xml definition:
   domxml= hooking.read_domxml()
   vm_name= domxml.getElementsByTagName('name')[0].firstChild.nodeValue
   print(vm_name)
   connection= sdk.Connection(
   url='https://engine.example.com/ovirt-engine/api',
   username='admin@internal',
   password='password',
   ca_file='ca.pem',
   )
   # Find the virtual machine:
   vms_service= connection.system_service().vms_service()
   vm= vms_service.list(search= vm_name)[0]
   # Find the service that manages the virtual machine:
   vm_service= vms_service.vm_service(vm.id)
   # Start the virtual machine enabling cloud-init and providing the
   # password for the `root` user and the hostname:
   vm_service.start(
   use_cloud_init=True,
   vm=types.Vm(
   initialization=types.Initialization(
   user_name='root',
   root_password='password',
   host_name= vm_name+ 'example.com'
   )
   )
   )
   # Close the connection to the server:
   connection.close()
   Then place it as executable in
   /usr/libexec/vdsm/hooks/before_vm_start on each host that should be
   able to run the pool vms.

2. As the web UI already auto fills the VM hostname cloud-init field
   with the vm name (or fqdn), the VM Hostname should do the same with
   vm pool, but it doesn't. You could open a RFE for this, it shouldn't
   be very complicated to patch it.

Le 17/01/2022 à 12:34, Luca Contessa a écrit :

I thought that:- you know the name of the future VM

I will try to clarify: I'm trying to obtain from the oVirt engine the name of 
the VM created inside the pool.
For example if the VM in pool LinuxPool is called LinuxMachine-1 I want the 
cloud-init to know that the VM is called LinuxMachine-1 and with this info add 
the suffix using the method you described.
Again, thank you a lot for the response.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GKIRUVQ7R65MH6QU73XVDF5GCQCKDZTK/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PZUVWBBNAJFZRD2VTLOJKNDOEUABHQSR/


[ovirt-users] Re: using stop_reason as a vdsm hook trigger into the UI

2021-12-22 Thread Nathanaël Blanchet


Le 22/12/2021 à 15:49, Nathanaël Blanchet a écrit :



Le 22/12/2021 à 14:56, John Taylor a écrit :

Maybe use the events api and search for the shutdown and reason in there?

api/events;from={event_id}?search={query}" rel="events/search"/>

-John


Exact! that's precisely the workaround I already tested this morning 
as well :)


and it works because the event contains the stop_reason in the 
description field before vm is in the stopped status!


Unfortunately, after some additionnal tests, I am in the same situation 
as initially with stop_reason element in api/vm, i.e. the new event 
containing the stop reason is writed to the API only after the hook 
script has exited.


So I  am never able to test this variable to determine the action to do...

P.S: For those who are interested: to make that case work, I proceeded 
at the opposite: rather than testing the variable condition in the hook 
itsself, I only use the hook to curl a job_template in AWX. By this way, 
the hook exits, and the ovirt_vm_info returns the expected stop_reason 
value and so on for following actions...




On Tue, Dec 21, 2021 at 9:00 AM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Thanks for responding,

Le 20/12/2021 à 21:42, Nir Soffer a écrit :

On Mon, Dec 20, 2021 at 9:59 PM Nathanaël Blanchet  
<mailto:blanc...@abes.fr>  wrote:

Adding the devel list since question is more about extending oVirt
...

The idea is to use the stop_reason element into the vm xml definition. But 
after hours, I realized that this element is writed to the vm definition file 
only after the VM has been destroyed.

So you want to run the clean hook only if stop reason == "clean"?

I think the way to integrate hooks is to define a custom property
in the vm, and check if the property was defined in the hook.

For example how the localdisk hook is triggered:

def main():
 backend = os.environ.get('localdisk')
 if backend is None:
 return
 if backend not in [BACKEND_LVM, BACKEND_LVM_THIN]:
 hooking.log("localdisk-hook: unsupported backend: %r" % backend)
 return
 ...

The hook runs only if the environment variable "localdisk" is defined
and configured properly.

vdsm defines the custom properties as environment variables.

On the engine side, you need to add a user defined property:

  engine-config -s UserDefinedVMProperties='localdisk=^(lvm|lvmthin)$'

And configure a custom property with one of the allowed values, like:

 localdisk=lvm

See vdsm_hooks/localdisk/README for more info.

If you want to control the cleanup, by adding a "clean" stop reason only 
when
needed, this will not help, and vdsm hook is probably not the right way
to integrate this.

Sure

If your intent is to clean a vm in some special events, but you want
to integrate
this in engine, maybe you should write an engine ui plugin?

The plugin can show the running vms, and provide a clean button that will
shut down the vm and run your custom code.

too complex for doing what I want

But maybe you don't need to integrate this in engine, and having a simple
script using ovirt engine API/SDK to shutdown the vm and run the cleanup
code.

My playbook/scripts work already fine, but this is not my goal.

Nir


I will sum up my initial question: *Is there any way to get the
value of "stop_reason" (value of the field in the UI) so as to
reuse this variable into a vdsm hook?*

Thank you


-- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr  <mailto:blanc...@abes.fr>

___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/OSM572SLKKAFOWZWT6OTNSFZED5JX5RC/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/OSM572SLKKAFOWZWT6OTNSFZED5JX5RC/>


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.o

[ovirt-users] Re: using stop_reason as a vdsm hook trigger into the UI

2021-12-22 Thread Nathanaël Blanchet


Le 22/12/2021 à 14:56, John Taylor a écrit :

Maybe use the events api and search for the shutdown and reason in there?

api/events;from={event_id}?search={query}" rel="events/search"/>

-John


Exact! that's precisely the workaround I already tested this morning as 
well :)


and it works because the event contains the stop_reason in the 
description field before vm is in the stopped status!




On Tue, Dec 21, 2021 at 9:00 AM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Thanks for responding,

Le 20/12/2021 à 21:42, Nir Soffer a écrit :

On Mon, Dec 20, 2021 at 9:59 PM Nathanaël Blanchet  
<mailto:blanc...@abes.fr>  wrote:

Adding the devel list since question is more about extending oVirt
...

The idea is to use the stop_reason element into the vm xml definition. But 
after hours, I realized that this element is writed to the vm definition file 
only after the VM has been destroyed.

So you want to run the clean hook only if stop reason == "clean"?

I think the way to integrate hooks is to define a custom property
in the vm, and check if the property was defined in the hook.

For example how the localdisk hook is triggered:

def main():
 backend = os.environ.get('localdisk')
 if backend is None:
 return
 if backend not in [BACKEND_LVM, BACKEND_LVM_THIN]:
 hooking.log("localdisk-hook: unsupported backend: %r" % backend)
 return
 ...

The hook runs only if the environment variable "localdisk" is defined
and configured properly.

vdsm defines the custom properties as environment variables.

On the engine side, you need to add a user defined property:

  engine-config -s UserDefinedVMProperties='localdisk=^(lvm|lvmthin)$'

And configure a custom property with one of the allowed values, like:

 localdisk=lvm

See vdsm_hooks/localdisk/README for more info.

If you want to control the cleanup, by adding a "clean" stop reason only 
when
needed, this will not help, and vdsm hook is probably not the right way
to integrate this.

Sure

If your intent is to clean a vm in some special events, but you want
to integrate
this in engine, maybe you should write an engine ui plugin?

The plugin can show the running vms, and provide a clean button that will
shut down the vm and run your custom code.

too complex for doing what I want

But maybe you don't need to integrate this in engine, and having a simple
script using ovirt engine API/SDK to shutdown the vm and run the cleanup
code.

My playbook/scripts work already fine, but this is not my goal.

Nir


I will sum up my initial question: *Is there any way to get the
value of "stop_reason" (value of the field in the UI) so as to
reuse this variable into a vdsm hook?*

Thank you


-- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr  <mailto:blanc...@abes.fr>

___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/OSM572SLKKAFOWZWT6OTNSFZED5JX5RC/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/OSM572SLKKAFOWZWT6OTNSFZED5JX5RC/>


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3O3BKLSJ5PTHFWFZWSVGQ5PJ5EPVPUC5/


[ovirt-users] Re: using stop_reason as a vdsm hook trigger into the UI

2021-12-21 Thread Nathanaël Blanchet

Thanks for responding,

Le 20/12/2021 à 21:42, Nir Soffer a écrit :

On Mon, Dec 20, 2021 at 9:59 PM Nathanaël Blanchet  wrote:

Adding the devel list since question is more about extending oVirt
...

The idea is to use the stop_reason element into the vm xml definition. But 
after hours, I realized that this element is writed to the vm definition file 
only after the VM has been destroyed.

So you want to run the clean hook only if stop reason == "clean"?

I think the way to integrate hooks is to define a custom property
in the vm, and check if the property was defined in the hook.

For example how the localdisk hook is triggered:

def main():
 backend = os.environ.get('localdisk')
 if backend is None:
 return
 if backend not in [BACKEND_LVM, BACKEND_LVM_THIN]:
 hooking.log("localdisk-hook: unsupported backend: %r" % backend)
 return
 ...

The hook runs only if the environment variable "localdisk" is defined
and configured properly.

vdsm defines the custom properties as environment variables.

On the engine side, you need to add a user defined property:

  engine-config -s UserDefinedVMProperties='localdisk=^(lvm|lvmthin)$'

And configure a custom property with one of the allowed values, like:

 localdisk=lvm

See vdsm_hooks/localdisk/README for more info.

If you want to control the cleanup, by adding a "clean" stop reason only when
needed, this will not help, and vdsm hook is probably not the right way
to integrate this.

Sure


If your intent is to clean a vm in some special events, but you want
to integrate
this in engine, maybe you should write an engine ui plugin?

The plugin can show the running vms, and provide a clean button that will
shut down the vm and run your custom code.

too complex for doing what I want


But maybe you don't need to integrate this in engine, and having a simple
script using ovirt engine API/SDK to shutdown the vm and run the cleanup
code.

My playbook/scripts work already fine, but this is not my goal.

Nir

I will sum up my initial question: *Is there any way to get the value of 
"stop_reason" (value of the field in the UI) so as to reuse this 
variable into a vdsm hook?*


Thank you


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OSM572SLKKAFOWZWT6OTNSFZED5JX5RC/


[ovirt-users] using stop_reason as a vdsm hook trigger into the UI

2021-12-20 Thread Nathanaël Blanchet
rc=1 err=b'Traceback (most recent call last):\n  File 
"/usr/libexec/vdsm/hooks/after_vm_destroy/clean_vm_dependencies_2.py", 
line 84, in \n    print(status.text, 
stop_reason.text)\nAttributeError: \'NoneType\' object has no attribute 
\'text\'\n' (hooks:122)




So I'm deducing I'm not able to accomplish my initial goal to use 
stop_reason as a trigger with after_vm_destroy event.


I searched an other way to do: I thought of replacing querying ovirt API 
with getting the value coming from the UI, but I can't find the suitable 
database query. Is there a way to do such a thing? Does engine hooks 
exist for stopped vm??


Thank you for your help.

PS: I'm already able to do this from ansible/AWX, but I have to do it 
from UI/vdsm for any reason.


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/S42J27JTR57YUEDH56B2H6AWUJS4BQFR/


[ovirt-users] Re: Oauth token lifetime

2021-12-20 Thread Nathanaël Blanchet


Le 17/12/2021 à 18:07, Sandro Bonazzola a écrit :



Il giorno gio 16 dic 2021 alle ore 23:08 Nathanaël Blanchet 
mailto:blanc...@abes.fr>> ha scritto:


Hello there is not a lot informations about Oauth token except I
found they expire after 30 minuts of inactivity. I'd like to
change this value if possible to a dedicate lifetime. Usually this
kind of change is done with engine-config but no such item is
currently available. Is it possible?


engine-config is still there:
# rpm -qf /usr/bin/engine-config
ovirt-engine-tools-4.5.0-0.2.master.20211215083937.gitafa2fd24e6.el8.noarch


It is not about the engine-config command itsself but about the way to 
configure the oauth2 token lifetime. I mean, we usually use the 
engine-config for this kind of thing, but it seems there is currently no 
way to do this with engine-config.


Where can I configure this?




--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA <https://www.redhat.com/>

sbona...@redhat.com <mailto:sbona...@redhat.com>

<https://www.redhat.com/> 

*Red Hat respects your work life balance. Therefore there is no need 
to answer this email out of your office hours.

*
*

*


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TBDYPUHDVU5ID5TG373JFTSXLTHKIIKK/


[ovirt-users] Oauth token lifetime

2021-12-16 Thread Nathanaël Blanchet
Hello there is not a lot informations about Oauth token except I found they expire after 30 minuts of inactivity. I'd like to change this value if possible to a dedicate lifetime. Usually this kind of change is done with engine-config but no such item is currently available. Is it possible?___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7XF4N3ND7YTRBE57G6XFOCKZ6Y5HOOU2/


[ovirt-users] Re: Upgrading 4.3.7 -> 4.4.9 :: Can't migrate vm from old to new host

2021-12-10 Thread Nathanaël Blanchet

Hi,

Is your migration network provisionned by DHCP?

If so, there is a known bug that prevents NetworkManager to set ip rule 
table for your migration network, and it won't be fixed before 4.5 release.


As a workaround, you can set the protocol to static or manually assign 
rule table to 0 as folowing on all on your hosts:


nmcli connection mod migration ipv4.route-table 0 && nmcli con up migration

Le 10/12/2021 à 17:07, Niklas Larsson via Users a écrit :

Hi,

we are trying to upgrade 4.3.7 -> 4.4.9 (Ovirt-Node, hosted engine). 
And things looks good until we try to migrate VM from 4.3.7 host to 
the 4.4.9 host, it fails with an generic error - and in below is from 
the vsdm.log from the 4.3.7 host.


Migrating VM from 4.4.9 host -> 4.3.7 host works.

Upgraded the 4.3.7 to 4.3.10 - did not solve it

Log from the 4.3 host:
2021-12-10 16:18:22,829+0100 INFO  (jsonrpc/1) [api.virt] START 
migrate(params={u'incomingLimit': 2, u'src': 
u'kvm22.shg.mgn.weblink.se', u'dstqemu': u'10.1.2.111', 
u'autoConverge': u'true', u'tunneled': u'false', u'enableGuestEvents': T
rue, u'dst': u'kvm21.shg.mgn.weblink.se:54321', 
u'convergenceSchedule': {u'init': [{u'params': [u'100'], u'name': 
u'setDowntime'}], u'stalling': [{u'action': {u'params': [u'150'], 
u'name': u'setDowntime'}, u'limit': 1}, {u'action': {u'params': 
[u'200'], u'name': u'setDowntime'}, u'limit': 2}, {u'action': 
{u'params': [u'300'], u'name': u'setDowntime'}, u'limit': 3}, 
{u'action': {u'params': [u'400'], u'name': u'setDowntime'}, u'limit': 
4}, {u'action': {u'params': [u'500'], u'name': u'setDowntime'}, 
u'limit': 6}, {u'action': {u'params': [], u'name': u'abort'}, 
u'limit': -1}]}, u'vmId': u'11f3a2aa-7951-4064-92f9-bb8ab515373b', 
u'abortOnError': u'true', u'outgoingLimit': 2, u'compressed': 
u'false', u'maxBandwidth': 62, u'method': u'online'}) 
from=:::10.1.2.51,46546, 
flow_id=03aca28c-00c9-4b58-a1e8-3aa355e162c2, 
vmId=11f3a2aa-7951-4064-92f9-bb8ab515373b (api:48)
2021-12-10 16:18:22,831+0100 INFO  (jsonrpc/1) [api.virt] FINISH 
migrate return={'status': {'message': 'Migration in progress', 'code': 
0}, 'progress': 0} from=:::10.1.2.51,46546, 
flow_id=03aca28c-00c9-4b58-a1e8-3aa355e162c2, 
vmId=11f3a2aa-7951-4064-92f9-bb8ab515373b (api:54)
2021-12-10 16:18:22,831+0100 INFO  (jsonrpc/1) [jsonrpc.JsonRpcServer] 
RPC call VM.migrate succeeded in 0.01 seconds (__init__:312)
2021-12-10 16:18:22,873+0100 ERROR (migsrc/11f3a2aa) [virt.vm] 
(vmId='11f3a2aa-7951-4064-92f9-bb8ab515373b') [Errno -2] Name or 
service not known (migration:282)
2021-12-10 16:18:22,875+0100 ERROR (migsrc/11f3a2aa) [virt.vm] 
(vmId='11f3a2aa-7951-4064-92f9-bb8ab515373b') Failed to migrate 
(migration:450)

Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 
402, in _regular_run

    self._setupVdsConnection()
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 
239, in _setupVdsConnection

    client = self._createClient(port)
  File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 
227, in _createClient
    client_socket = utils.create_connected_socket(host, int(port), 
sslctx)
  File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 435, in 
create_connected_socket

    socket.AF_UNSPEC, socket.SOCK_STREAM)
gaierror: [Errno -2] Name or service not known
2021-12-10 16:18:22,888+0100 INFO  (jsonrpc/7) [api.virt] START 
getMigrationStatus() from=:::10.1.2.51,46546, 
vmId=11f3a2aa-7951-4064-92f9-bb8ab515373b (api:48)
2021-12-10 16:18:22,888+0100 INFO  (jsonrpc/7) [api.virt] FINISH 
getMigrationStatus return={'status': {'message': 'Done', 'code': 0}, 
'migrationStats': {'status': {'message': 'Fatal error during 
migration', 'code': 12}, 'progress': 0}} from=:::10.1.2.51,46546, 
vmId=11f3a2aa-7951-4064-92f9-bb8ab515373b (api:54)
2021-12-10 16:18:22,889+0100 INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] 
RPC call VM.getMigrationStatus succeeded in 0.00 seconds (__init__:312)
2021-12-10 16:18:23,431+0100 INFO  (jsonrpc/3) [jsonrpc.JsonRpcServer] 
RPC call Host.ping2 succeeded in 0.00 seconds (__init__:312)


Any ideas?

/niklas
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BWSVMZGNRNK5MBLJH3HSKZPRBCITL5XL/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Con

[ovirt-users] ovirt 4.4.x series

2021-12-08 Thread Nathanaël Blanchet

Hello,

I found some informations about an upcoming  ovirt 4.5 release based on 
centos stream 9. Considering that Centos stream 9 will not be stable 
before  months, can we expect new 4.4.x releases following 4.4.9?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JHHNKPSQDB4QKDRSQ5RLIILR24ZC4BAH/


[ovirt-users] Re: routing table and wrong ip rule attribution on hosts

2021-11-30 Thread Nathanaël Blanchet
Le 30 nov. 2021 13:18, Nathanaël Blanchet  a écrit :
Le 30/11/2021 à 12:00, Ales Musil a
  écrit :


  
  




  On Tue, Nov 30, 2021 at
11:16 AM Nathanaël Blanchet <blanc...@abes.fr>
wrote:
  
  

  

  Le 30 nov. 2021 10:31, Ales
Musil <amu...@redhat.com>
a écrit :

  




  On Tue, Nov 30, 2021 at 10:08
    AM Nathanaël Blanchet <blanc...@abes.fr>
wrote:
  
  

  Le 30/11/2021 à 07:25, Ales Musil a
écrit :
  
  

  
  
  
  
On Mon, Nov 29, 2021
  at 11:47 PM Nathanaël Blanchet
  <blanc...@abes.fr>
  wrote:

Hi
  all,



Hi,

 

  
  I 've finished migration from
  4.4.4 to 4.4.9 and I'm facing a
  strange 
  issue with routing table on my
  hosts: all IP addressed interfaces
  (and 
  in particular gluster and
  migration ones that requiere an
  IP) are not 
  part of the "254" or "0" usual ip
  rule.



Only network with default route
  role will be in the default table
  (254). This has been the case for
  quite a while.
What has changed in 4.4.8 is
  that now NetworkManager is aware
  of that, before the routes were
  managed outside of
NM and it might have caused
  some issues.

 

  
  for instance:
  
  [root@fuego ~]# nmcli con sh
  gluster |grep ipv4.route-table
ipv4.route-table:   202179335
  
  [root@fuego ~]# nmcli con sh
  migration |grep ipv4.route-table
ipv4.route-table:   316605387
  
  but ovirtmgmt:
  
  [root@fuego ~]# nmcli con sh
  ovirtmgmt |grep ipv4.route-table
ipv4.route-table:   254 (main)
  
  and obviously the main route table
  is empty:
  
  [root@ ~]# ip ro
  default via 10.34.100.65 dev
  ovirtmgmt proto dhcp metric 425
  10.34.100.0/24
  dev ovirtmgmt proto kernel scope
  link src 10.34.100.116 

[ovirt-users] Re: routing table and wrong ip rule attribution on hosts

2021-11-30 Thread Nathanaël Blanchet

Le 30/11/2021 à 12:00, Ales Musil a écrit :



On Tue, Nov 30, 2021 at 11:16 AM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:




Le 30 nov. 2021 10:31, Ales Musil mailto:amu...@redhat.com>> a écrit :



On Tue, Nov 30, 2021 at 10:08 AM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Le 30/11/2021 à 07:25, Ales Musil a écrit :



On Mon, Nov 29, 2021 at 11:47 PM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Hi all,


Hi,


I 've finished migration from 4.4.4 to 4.4.9 and
I'm facing a strange
issue with routing table on my hosts: all IP
addressed interfaces (and
in particular gluster and migration ones that
requiere an IP) are not
part of the "254" or "0" usual ip rule.


Only network with default route role will be in the
default table (254). This has been the case for quite
a while.
What has changed in 4.4.8 is that now NetworkManager
is aware of that, before the routes were managed
outside of
NM and it might have caused some issues.


for instance:

[root@fuego ~]# nmcli con sh gluster |grep
ipv4.route-table
ipv4.route-table:   202179335

[root@fuego ~]# nmcli con sh migration |grep
ipv4.route-table
ipv4.route-table:   316605387

but ovirtmgmt:

[root@fuego ~]# nmcli con sh ovirtmgmt |grep
ipv4.route-table
ipv4.route-table:   254 (main)

and obviously the main route table is empty:

[root@ ~]# ip ro
default via 10.34.100.65 dev ovirtmgmt proto dhcp
metric 425
10.34.100.0/24 <http://10.34.100.0/24> dev
ovirtmgmt proto kernel scope link src 10.34.100.116
metric 425


Well the main table should contain only the default
route gateway.
You can take a look at other routes by:
ip route show table all

Indeed, other routes exists

[root@fuego ~]# ip ro sh table all
10.34.101.0/24 <http://10.34.101.0/24> dev gluster table
202179335 proto kernel scope link src 10.34.101.140 metric
426
10.34.106.0/23 <http://10.34.106.0/23> dev admin table
100729354 proto kernel scope link src 10.34.106.72 metric 425
10.34.108.0/23 <http://10.34.108.0/23> dev migration table
316605387 proto kernel scope link src 10.34.108.56 metric 427

but don't seem to be used by kernel like they should be by
the main table.


None of the concerned hosts can ping each other on
such interface, and
live migrations systematically fail.


That might be a different issue related to BZ#2022354
<https://bugzilla.redhat.com/2022354>. To check if
that's really the case
please take a look into oVirt engine and there you
should see all affected networks out-of-sync.
On the BZ there are two possible workarounds.

Not seems to be that BZ because there is no out of sync
network in my case, but the issue could be from the same
root cause, because of NM routing table integration.


This behaviour is new with 4.4.9 and I don't know
if it is a new (and
not achevied) network feature introduced with
centos stream to deal
network filtering packets.


A simple workaround would be "nmcli connection mod
migration
ipv4.route-table 0 && nmcli con up migration", but
I'd like to
understand why such  strange (and unuseful ?) rule
table are now
randomly attributed?


I would highly suggest against that because the
default route in the default table should be only one,
with exception to some backup scenarios.

Notice that this command doesn't add additionnal default
route in addition to the main one, but only source route
of the defined networks that allow hosts to be reachabled
on that networ

[ovirt-users] Re: routing table and wrong ip rule attribution on hosts

2021-11-30 Thread Nathanaël Blanchet
Le 30 nov. 2021 10:31, Ales Musil  a écrit :On Tue, Nov 30, 2021 at 10:08 AM Nathanaël Blanchet <blanc...@abes.fr> wrote:
  

  
  
Le 30/11/2021 à 07:25, Ales Musil a
  écrit :


  
  




  On Mon, Nov 29, 2021 at
11:47 PM Nathanaël Blanchet <blanc...@abes.fr> wrote:
  
  Hi all,
  
  
  
  Hi,
  
   
   
I 've finished migration from 4.4.4 to 4.4.9 and I'm facing
a strange 
issue with routing table on my hosts: all IP addressed
interfaces (and 
in particular gluster and migration ones that requiere an
IP) are not 
part of the "254" or "0" usual ip rule.
  
  
  
  Only network with default route role will be in the
default table (254). This has been the case for quite a
while.
  What has changed in 4.4.8 is that now NetworkManager is
aware of that, before the routes were managed outside of
  NM and it might have caused some issues.
  
   
   
for instance:

[root@fuego ~]# nmcli con sh gluster |grep ipv4.route-table
ipv4.route-table:   202179335

[root@fuego ~]# nmcli con sh migration |grep
ipv4.route-table
ipv4.route-table:   316605387

but ovirtmgmt:

[root@fuego ~]# nmcli con sh ovirtmgmt |grep
ipv4.route-table
ipv4.route-table:   254 (main)

and obviously the main route table is empty:

[root@ ~]# ip ro
default via 10.34.100.65 dev ovirtmgmt proto dhcp metric 425
10.34.100.0/24
dev ovirtmgmt proto kernel scope link src 10.34.100.116 
metric 425
  
  
  
  Well the main table should contain only the default route
gateway. 
  
  You can take a look at other routes by:
  ip route show table all
  

  

Indeed, other routes exists

  

   
   

  

[root@fuego ~]# ip ro sh table all
10.34.101.0/24 dev gluster table 202179335 proto kernel scope link
src 10.34.101.140 metric 426 
10.34.106.0/23 dev admin table 100729354 proto kernel scope link src
10.34.106.72 metric 425
10.34.108.0/23 dev migration table 316605387 proto kernel scope link
src 10.34.108.56 metric 427 
but don't seem to be used by kernel like they should be by the
  main table.


  

   
None of the concerned hosts can ping each other on such
interface, and 
live migrations systematically fail.
  
  
  
  That might be a different issue related to BZ#2022354.
  To check if that's really the case
  please take a look into oVirt
  engine and there you should see all affected networks
  out-of-sync. 

  On the BZ there are two possible
  workarounds.


  

Not seems to be that BZ because there is no out of sync network in
my case, but the issue could be from the same root cause, because of
NM routing table integration.

  

   
   
This behaviour is new with 4.4.9 and I don't know if it is a
new (and 
not achevied) network feature introduced with centos stream
to deal 
network filtering packets.
  
   
A simple workaround would be "nmcli connection mod migration

ipv4.route-table 0 && nmcli con up migration", but
I'd like to 
understand why such  strange (and unuseful ?) rule table are
now 
randomly attributed?
  
  
  
  I would highly suggest against that because the default
route in the default table should be only one, with
exception to some backup scenarios. 
  

  

Notice that this command doesn't add additionnal default route in
  addition to the main one, but only source route of the defined
  networks that allow hosts to be reachabled on that networks.

[root@fuego ~]# ip ro
  default via 10.34.100.65 dev ovirtmgmt proto dhcp metric 425 
  10.34.100.0/24 dev ovirtmgmt proto kernel scope link src
  10.34.100.116 metric 425 
  10.34.106.0/23 dev admin proto kernel scope link src 10.34.107.76
  metric 450 
  10.34.108.0/23 dev migrati

[ovirt-users] Re: routing table and wrong ip rule attribution on hosts

2021-11-30 Thread Nathanaël Blanchet

Le 30/11/2021 à 07:25, Ales Musil a écrit :



On Mon, Nov 29, 2021 at 11:47 PM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Hi all,


Hi,


I 've finished migration from 4.4.4 to 4.4.9 and I'm facing a strange
issue with routing table on my hosts: all IP addressed interfaces
(and
in particular gluster and migration ones that requiere an IP) are not
part of the "254" or "0" usual ip rule.


Only network with default route role will be in the default table 
(254). This has been the case for quite a while.
What has changed in 4.4.8 is that now NetworkManager is aware of that, 
before the routes were managed outside of

NM and it might have caused some issues.


for instance:

[root@fuego ~]# nmcli con sh gluster |grep ipv4.route-table
ipv4.route-table:   202179335

[root@fuego ~]# nmcli con sh migration |grep ipv4.route-table
ipv4.route-table:   316605387

but ovirtmgmt:

[root@fuego ~]# nmcli con sh ovirtmgmt |grep ipv4.route-table
ipv4.route-table:   254 (main)

and obviously the main route table is empty:

[root@ ~]# ip ro
default via 10.34.100.65 dev ovirtmgmt proto dhcp metric 425
10.34.100.0/24 <http://10.34.100.0/24> dev ovirtmgmt proto kernel
scope link src 10.34.100.116
metric 425


Well the main table should contain only the default route gateway.
You can take a look at other routes by:
ip route show table all

Indeed, other routes exists
[root@fuego ~]# ip ro sh table all
10.34.101.0/24 dev gluster table 202179335 proto kernel scope link src 
10.34.101.140 metric 426
10.34.106.0/23 dev admin table 100729354 proto kernel scope link src 
10.34.106.72 metric 425
10.34.108.0/23 dev migration table 316605387 proto kernel scope link src 
10.34.108.56 metric 427


but don't seem to be used by kernel like they should be by the main table.



None of the concerned hosts can ping each other on such interface,
and
live migrations systematically fail.


That might be a different issue related to BZ#2022354 
<https://bugzilla.redhat.com/2022354>. To check if that's really the case
please take a look into oVirt engine and there you should see all 
affected networks out-of-sync.

On the BZ there are two possible workarounds.
Not seems to be that BZ because there is no out of sync network in my 
case, but the issue could be from the same root cause, because of NM 
routing table integration.



This behaviour is new with 4.4.9 and I don't know if it is a new (and
not achevied) network feature introduced with centos stream to deal
network filtering packets.


A simple workaround would be "nmcli connection mod migration
ipv4.route-table 0 && nmcli con up migration", but I'd like to
understand why such  strange (and unuseful ?) rule table are now
randomly attributed?


I would highly suggest against that because the default route in the 
default table should be only one, with exception to some backup 
scenarios.


Notice that this command doesn't add additionnal default route in 
addition to the main one, but only source route of the defined networks 
that allow hosts to be reachabled on that networks.


[root@fuego ~]# ip ro
default via 10.34.100.65 dev ovirtmgmt proto dhcp metric 425
10.34.100.0/24 dev ovirtmgmt proto kernel scope link src 10.34.100.116 
metric 425
10.34.106.0/23 dev admin proto kernel scope link src 10.34.107.76 metric 
450
10.34.108.0/23 dev migration proto kernel scope link src 10.34.108.121 
metric 465


This behaviour is the same as before 4.4.8 and let the live migration to 
be effective because kernel is now aware to route the network to the 
correct bridge/interface.


To my mind, you can easily reproduce the bug because it is the same on 
my 10 hosts.


Thanks for your help.



-- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr <mailto:blanc...@abes.fr>
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/QQR2XW7EYWGWYRCKLVBCUUA4VURDHRB7/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/QQR2XW7EYWGWYRCKLVBCUUA4VURDHRB7/>


Let us know if it's the mentioned bug, if not we can investigate 
deeper what might be wrong.


Than

[ovirt-users] routing table and wrong ip rule attribution on hosts

2021-11-29 Thread Nathanaël Blanchet

Hi all,

I 've finished migration from 4.4.4 to 4.4.9 and I'm facing a strange 
issue with routing table on my hosts: all IP addressed interfaces (and 
in particular gluster and migration ones that requiere an IP) are not 
part of the "254" or "0" usual ip rule.


for instance:

[root@fuego ~]# nmcli con sh gluster |grep ipv4.route-table
ipv4.route-table:   202179335

[root@fuego ~]# nmcli con sh migration |grep ipv4.route-table
ipv4.route-table:   316605387

but ovirtmgmt:

[root@fuego ~]# nmcli con sh ovirtmgmt |grep ipv4.route-table
ipv4.route-table:   254 (main)

and obviously the main route table is empty:

[root@ ~]# ip ro
default via 10.34.100.65 dev ovirtmgmt proto dhcp metric 425
10.34.100.0/24 dev ovirtmgmt proto kernel scope link src 10.34.100.116 
metric 425


None of the concerned hosts can ping each other on such interface, and 
live migrations systematically fail.


This behaviour is new with 4.4.9 and I don't know if it is a new (and 
not achevied) network feature introduced with centos stream to deal 
network filtering packets.


A simple workaround would be "nmcli connection mod migration 
ipv4.route-table 0 && nmcli con up migration", but I'd like to 
understand why such  strange (and unuseful ?) rule table are now 
randomly attributed?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QQR2XW7EYWGWYRCKLVBCUUA4VURDHRB7/


[ovirt-users] hosted engine vm not present

2021-11-28 Thread Nathanaël Blanchet

Hello

I successfully migrated from HE 4.3.10 to HE 4.4.9, but I think I 
commited a mistake:


The HostedEngine vm was running on the host (haboob) where I deployed 
the upgrade path.


Everything was ok except that I deployed it on the wrong host (haboob). 
So I live migrated the HostedEngine on the centos prexisting host 
(kilimanjaro) and erase haboob. Then I reinstalled a new host (fuego) to 
replace haboob. The HostedEngine is able to migrate between kilimajaro 
and fuego but now the vm seems to not be seen by any host when doing:


[root@fuego ~]# hosted-engine --vm-status


--== Host fuego (id: 1) status ==--

Host ID    : 1
Host timestamp : 3252
Score  : 3350
Engine status  : {"vm": "down", "health": "bad", 
"detail": "unknown", "reason": "vm not running on this host"}

Hostname   : fuego
Local maintenance  : False
stopped    : False
crc32  : 14527b72
conf_on_shared_storage : True
local_conf_timestamp   : 3257
Status up-to-date  : True
Extra metadata (valid at timestamp):
    metadata_parse_version=1
    metadata_feature_version=1
    timestamp=3252 (Sun Nov 28 18:27:29 2021)
    host-id=1
    score=3350
    vm_conf_refresh_time=3257 (Sun Nov 28 18:27:34 2021)
    conf_on_shared_storage=True
    maintenance=False
    state=EngineDown
    stopped=False



--== Host kilimanjaro.v100.abes.fr (id: 3) status ==--

Host ID    : 3
Host timestamp : 65261186
Score  : 0
Engine status  : {"reason": "vm not running on this 
host", "health": "bad", "vm": "down_unexpected", "detail": "unknown"}

Hostname   : kilimanjaro.v100.abes.fr
Local maintenance  : True
stopped    : False
crc32  : c381cf1e
conf_on_shared_storage : True
local_conf_timestamp   : 65261189
Status up-to-date  : True
Extra metadata (valid at timestamp):
    metadata_parse_version=1
    metadata_feature_version=1
    timestamp=65261186 (Sun Nov 28 19:27:23 2021)
    host-id=3
    score=0
    vm_conf_refresh_time=65261189 (Sun Nov 28 19:27:26 2021)
    conf_on_shared_storage=True
    maintenance=True
    state=LocalMaintenance
    stopped=False


When doing hosted-engine --console, it returns:

[root@fuego ~]# hosted-engine --console
Command VM.getStats with args {'vmID': 
'74d2966c-2efa-41f0-a5c3-dd383f690a92'} failed:
(code=1, message=Virtual machine does not exist: {'vmId': 
'74d2966c-2efa-41f0-a5c3-dd383f690a92'})

The engine VM is not on this host

It is like the vmID was  the old 4.3.10 HostedEngine that doesn't exist 
anymore.


How can I make the new HostedEngine vmID be the good one known by HA and 
hosts?


*I'm afraid to lose the HostedEngine vm when stopping it!*

Thank you for your precious help.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EHUUM3MGCNTCVRZUXJE3OADK7ENNTEUN/


[ovirt-users] host non responsive

2021-11-23 Thread Nathanaël Blanchet

Hello,

Some of my hosts are for some different reason in "non responsive" 
state. Fortunately, critical vms continue to run on it.


I didn't manage to recover the up state and the only solution will be at 
a predefined date to stop and fence the host.


Waiting for this date, I ssh stopped a targeted vm for maintenance (with 
init 0) and now I want to reboot it on a healthy host. This vm is ovirt 
high available with a lease on a storage domain.


How can I tell to engine that the vm lease is not anymore on the non 
responding host so as to start the vm elsewhere?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/37YRPRFXAIVNCUDIKAXI4UK7C3Z3ZVVP/


[ovirt-users] Re: Virt-sysprep --update --network

2021-11-16 Thread Nathanaël Blanchet

Thank you for replying,

I'm familiar with virt-sysprep/virt-customze and I want to 
systematically update packages of a fresh empty qcow2 image when making 
a template.


Ovirt already allows  to use virt-sysprep thanks to seal object.

I finally found the py script that deals with virt-sysprep: 
/usr/lib/python3.6/site-packages/vdsm/virtsysprep.py


from vdsm.virt.utils import LibguestfsCommand

_VIRTSYSPREP = LibguestfsCommand("virt-sysprep",
 "/usr/bin/virt-sysprep")


def sysprep(vm_id, vol_paths):
    """
    Run virt-sysprep on the list of volumes

    :param vol_paths: list of volume paths
    """
    args = ['--network', '--update']
    for vol_path in vol_paths:
    args.extend(('-a', vol_path))

    _VIRTSYSPREP.run(args, log_tag=vm_id)


Default script has no argument and just seal the vm, I simply added     
args = ['--network', '--update'] to update package.


This modification implies to modify the script on all hosts and restart 
vdsmd, and is not persistent on vdsm/node upgrade. So I wondered if 
there was a way to make it persistent thanks to hooks.



Le 16/11/2021 à 13:25, Marcos Sungaila a écrit :


Hi Nathanaël,

With virt-sysprep, it is possible to install a package, update your 
template, activate a network connection, have SELinux relabel your 
system, and change other options.


Also is highly recommended to boot your template to ensure every 
last-minute change is working fine.


Before sealing the template, people use it to make all changes 
(update, package installation, user creation, network connections 
activation, etc…).


On the other hand, you can modify those options with virt-sysprep and 
launch an instance based on the template to validate your changes.


It is up to you to decide how to prepare your VM to seal/template it.

Regards,

Marcos

*From:*Nathanaël Blanchet 
*Sent:* segunda-feira, 15 de novembro de 2021 17:19
*To:* users@ovirt.org
*Subject:* [External] : [ovirt-users] Virt-sysprep --update --network

Hello,

As It is currently possible to seal a VM when templating with Sysprep, 
is it possible to extend virt-sysprep with other options as "--update 
--network" to update a qcow2 image with any hook?



--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TGWPX2VQC6NG7TB2KFR7X4JHCT2A33AM/


[ovirt-users] Virt-sysprep --update --network

2021-11-15 Thread Nathanaël Blanchet
Hello, As It is currently possible to seal a VM when templating with Sysprep, is it possible to extend virt-sysprep with other options as "--update --network" to update a qcow2 image with any hook?___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GLIID67TWLXY45XZLDAIO4Y7RB7AJEXJ/


[ovirt-users] add users to group

2021-11-04 Thread Nathanaël Blanchet

Hello,

The only way I found to add users to group is :

ovirt-aaa-jdbc-tool group-manage useradd /|group-name|/ --user=/|username|/

I didn't find any way to do such a thing neither with the webui, neither 
with ansible module ovirt_group or ovirt_user.


Thanks for advices.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P3AZ7T7CVFBSJB6OVDB6SIEZJVHRKPJG/


[ovirt-users] Re: add users to group

2021-11-04 Thread Nathanaël Blanchet
I forgot to tell that pre existing group "Everyone" and 
"ovirt-administrator" are unusable because we can't add any users to 
them with ovirt-aaa-jdbc-tool


Le 04/11/2021 à 16:34, Nathanaël Blanchet a écrit :


Hello,

The only way I found to add users to group is :

ovirt-aaa-jdbc-tool group-manage useradd /|group-name|/ 
--user=/|username|/


I didn't find any way to do such a thing neither with the webui, 
neither with ansible module ovirt_group or ovirt_user.


Thanks for advices.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OCTWWS53WLFGUD7CY2EF37FTQ3JR35Y7/


[ovirt-users] mom-vdsm doesn't restart after upgrade

2021-09-07 Thread Nathanaël Blanchet

Hello,

I performed a host upgrade from 4.4.5  to 4.4.8, and vdsmd failed to 
launch with this log:


Sep 07 16:16:52 kamen systemd[1]: mom-vdsm.service: Job 
mom-vdsm.service/start failed with result 'dependency'.
Sep 07 16:16:54 kamen systemd[1]: Dependency failed for MOM instance 
configured for VDSM purposes.


Following this ticket 
https://bugzilla.redhat.com/show_bug.cgi?id=1557735, I managed to launch 
mom-vdsm and so vdsmd doing:


vdsm-tool configure


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VTXGL2F2CGKKG4WGWJQ3E2IHQUQFEES4/


[ovirt-users] what happens to vms when a host shutdowns?

2021-07-06 Thread Nathanaël Blanchet

Hi,

We are installing UPS powerchute client on hypervisors.

What is the default vms behaviour of running vms when an hypervisor is 
ordered to shutdown: do the vms live migrate or do they shutdown 
properly (even the restart on an other host because of HA) ?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HMZZOD6W654VIGBEDYKJ5QQQEM5MWGL4/


[ovirt-users] Re: Is there a way to find the creation date of a Virtual Machines from Ovirt Manager

2021-06-09 Thread Nathanaël Blanchet
A last easy option is to login to the graphana portal at 
https:///ovirt-engine-grafana/login


There is much more than creation date...

Le 09/06/2021 à 09:31, Eyal Shenitzky a écrit :

You can also get the VM details from the rest-API:

/ovirt-engine/api/vms/

And you will get all the VM details including the VM  
and .


On Wed, 9 Jun 2021 at 09:36, Vojtech Juranek <mailto:vjura...@redhat.com>> wrote:


On Wednesday, 9 June 2021 08:19:04 CEST Ritesh Chikatwar wrote:
> Creation date of vm is not shown in the Ui. There is one option:
you can
> connect to the database and query for it.


select _create_date from vm_static where vm_name='vm_name';




> On Tue, Jun 8, 2021 at 9:56 PM Strahil Nikolov via Users
mailto:users@ovirt.org>>
>
> wrote:
> > I have no clue, but if you have centralized logging (or you
keep logs long
> > enough), uou can check vdsm's log on all hosts and identify
when the VM
> > was
> > first start.
> >
> > Best Regards,
> > Strahil Nikolov
> >
> > On Tue, Jun 8, 2021 at 17:26, k.gunasekhar--- via Users
> > mailto:users@ovirt.org>> wrote:
> > Is there a way to find the creation date of a Virtual Machines
from Ovirt
> > Manager command line or psql
> > ___
> > Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
> > To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
> > List Archives:
> >
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OA7KGOSJQQGE
<https://lists.ovirt.org/archives/list/users@ovirt.org/message/OA7KGOSJQQGE>
> > CW3LTGW34OE4DFU5JPI7/
> >
> > ___
> > Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
> > To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
> > List Archives:
> >
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6R6DG5HVHE2Y
<https://lists.ovirt.org/archives/list/users@ovirt.org/message/6R6DG5HVHE2Y>
> > C53TQOBIL5FHD73TX25A/

___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/VT2SHN6DQTAGHVS6E5UHOGCXLPWGUF7F/

<https://lists.ovirt.org/archives/list/users@ovirt.org/message/VT2SHN6DQTAGHVS6E5UHOGCXLPWGUF7F/>



--
Regards,
Eyal Shenitzky

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/74NKMHZN3LOEEVWD254ZADPNU62WWCF2/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WWTS2Z25IDOXUYEYCSKJT26YSKG3YJK3/


[ovirt-users] what does dwh db contain?

2021-05-27 Thread Nathanaël Blanchet

Hello,

I need to understand which user removed a vm 2 months ago, but I can't 
recover such info into engine.log (that default rotate is 20).


I gave a quick look to the dwh database: I'm able to find the removal 
date, but not the associated user.


Is there a way to get this information?

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/B4WRS5FRMNWFXRIMGKJUYA7PLNNTGC7Z/


[ovirt-users] Re: can't use vmconsole anymore

2021-05-10 Thread Nathanaël Blanchet

Hi,

I can't still connect to my vms with vmconsole proxy on my production 
engine (other test and dev engine are OK).


the ssh key for the wanted user is available in the the API:


href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3/sshpublickeys/aaace8d4-08d3-4452-ac91-df4b491bd899" 
id="aaace8d4-08d3-4452-ac91-df4b491bd899">


ssh-rsa 
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw==


href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3" 
id="64b7f3bf-9d43-4508-af93-63ad77652be3"/>




But /usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py 
--version "1" keys still returns nothing.


On the engine:

[root@air ~]# systemctl status ovirt-vmconsole-proxy-sshd.service
● ovirt-vmconsole-proxy-sshd.service - oVirt VM Console SSH server daemon
   Loaded: loaded 
(/usr/lib/systemd/system/ovirt-vmconsole-proxy-sshd.service; enabled; 
vendor preset: disabled)

   Active: active (running) since Mon 2021-05-10 14:16:55 CEST; 22min ago
 Main PID: 3649210 (sshd)
    Tasks: 1 (limit: 204594)
   Memory: 2.7M
   CGroup: /system.slice/ovirt-vmconsole-proxy-sshd.service
   └─3649210 /usr/sbin/sshd -f 
/usr/share/ovirt-vmconsole/ovirt-vmconsole-proxy/ovirt-vmconsole-proxy-sshd/sshd_config 
-D


mai 10 14:16:55 air.v100.abes.fr systemd[1]: Started oVirt VM Console 
SSH server daemon.
mai 10 14:16:55 air.v100.abes.fr sshd[3649210]: Server listening on 
0.0.0.0 port .
mai 10 14:16:55 air.v100.abes.fr sshd[3649210]: Server listening on :: 
port .
mai 10 14:17:01 air.v100.abes.fr ovirt-vmconsole-proxy-keys[3649214]: 
ERROR '"keys"'
mai 10 14:17:01 air.v100.abes.fr sshd[3649212]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1
mai 10 14:17:02 air.v100.abes.fr ovirt-vmconsole-proxy-keys[3649218]: 
ERROR '"keys"'
mai 10 14:17:02 air.v100.abes.fr sshd[3649212]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1
mai 10 14:17:02 air.v100.abes.fr sshd[3649212]: Connection closed by 
authenticating user ovirt-vmconsole 10.34.100.131 port 46874 [preauth]


I tried to execute /usr/libexec/ovirt-vmconsole-proxy-keys 
ovirt-vmconsole but it gives an internal ERROR (as on the other working 
engine, so it may be not relevant)


What can I test more?

Le 18/04/2021 à 15:59, Sharon Gratch a écrit :

Hi,

Please follow the instructions mentioned here:
https://www.ovirt.org/documentation/virtual_machine_management_guide/#Logging_in_to_a_virtual_machine_using_SPICE 
<https://www.ovirt.org/documentation/virtual_machine_management_guide/#Logging_in_to_a_virtual_machine_using_SPICE>- 
> " Opening a Serial Console to a Virtual Machine".


It seems that something is wrong with the user permissions/keys.
Is the 4.4.5 oVirt installation an upgraded or a new installation?
You mentioned that it's working with your other engines? Do they all 
use the 4.4.5 version?


Thanks,
Sharon


On Fri, Apr 16, 2021 at 1:31 PM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


I removed the user and created an other time. Now, I have this

The key seems to be present in the DB

engine=# SELECT users.username, user_profiles.property_content::text
FROM user_profiles
JOIN users ON users.user_id = user_profiles.user_id
WHERE user_profiles.property_type= 'SSH_PUBLIC_KEY';
  username |
property_content


--+---

--
---
sblanc...@levant.abes.fr <mailto:sblanc...@levant.abes.fr> | "ssh-rsa

B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQ

sy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArn
NcmS6JFxnPIrGYxxmv01K6VXVvw=="
(1 row)

and now in the api




ssh-rsa

B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KW

[ovirt-users] Re: What software used to take forever incremental backup from VM?

2021-04-19 Thread Nathanaël Blanchet

Hello,

Unfortunately they don't support Changed block tracking (CBT) provided 
by ovirt 4.4 because it is still in technology preview... It is 
surprizing, considering that vprotect already supports it...


"Vinchin version 6 does not suppprt oVirt CBT yet, as oVirt has not released this 
feature fully, now it is still in tech preview. When it is released, we will support it 
soon!"

Le 19/04/2021 à 06:00, jzcure82...@chacuo.net a écrit :

Vinchin Backup & Recovery can be one of the best choices. I've been using it 
for a year and I think it performs forever incremental backup well in ovirt.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/X64JC45MDKJ7TRG5ATWYFETAN3T35IGW/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VSNZVLY6HZALY7N7O7BCTQTDHSJBJU4X/


[ovirt-users] Re: can't use vmconsole anymore

2021-04-18 Thread Nathanaël Blanchet
Hello
Everything worked with 4.3.10, then i upgraded to 4.4.4 and finally to 4.4.5The 
upgrade path was the same with other engines but all worked as expected.
Le 18 avr. 2021 16:00, Sharon Gratch a écrit :


Hi,

Please follow the instructions mentioned here:
https://www.ovirt.org/documentation/virtual_machine_management_guide/#Logging_in_to_a_virtual_machine_using_SPICE
<https://www.ovirt.org/documentation/virtual_machine_management_guide/#Logging_in_to_a_virtual_machine_using_SPICE>-
> " Opening a Serial Console to a Virtual Machine".

It seems that something is wrong with the user permissions/keys.
Is the 4.4.5 oVirt installation an upgraded or a new installation?
You mentioned that it's working with your other engines? Do they all use
the 4.4.5 version?

Thanks,
Sharon


On Fri, Apr 16, 2021 at 1:31 PM Nathanaël Blanchet  wrote:

> I removed the user and created an other time. Now, I have this
>
> The key seems to be present in the DB
>
> engine=# SELECT users.username, user_profiles.property_content::text
> FROM user_profiles
> JOIN users ON users.user_id = user_profiles.user_id
> WHERE user_profiles.property_type= 'SSH_PUBLIC_KEY';
>   username |
> property_content
>
>
> --+---
>
> --
> ---
>   sblanc...@levant.abes.fr | "ssh-rsa
>
> B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQ
>
> sy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArn
> NcmS6JFxnPIrGYxxmv01K6VXVvw=="
> (1 row)
>
> and now in the api
>
> 
>  href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3/sshpublickeys/70850a0e-1b20-4dd5-9fcd-4f64303509d1"
>
> id="70850a0e-1b20-4dd5-9fcd-4f64303509d1">
> 
> ssh-rsa
>
> B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw==
> 
>  href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3"
> id="64b7f3bf-9d43-4508-af93-63ad77652be3"/>
> 
> 
>
> but I still can't connect
>
> $ ssh -t -p   ovirt-vmcons...@air.v100.abes.fr connect
> ovirt-vmcons...@air.v100.abes.fr: Permission denied (publickey).
>
> and
>
> [root@air ~]#
> /usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
> --version "1" keys
>
> still returns empty string...
>
>
> Le 16/04/2021 à 11:07, Nathanaël Blanchet a écrit :
> >
> > Le 16/04/2021 à 10:31, Radoslaw Szwajkowski a écrit :
> >>> [root@air-dev ~]#
> >>> /usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
> >>> --version "1" keys
> >>> {"keys": [{"entityid": "d5e69fa0-96a0-4aae-952d-18fe36940248",
> >>> "entity":
> >>> "sblanc...@levant.abes.fr@abes.fr-authz", "key": "ssh-rsa
> >>>
> B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw=="}],
>
> >>>
> >>> "version": 1, "content": "key_list"}
> >>>
> >>> but the same command on the main  engine returns empty
> >>>
> >>> [root@air ~]#
> >>> /usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
> >>> --version "1" keys
> >>>
> >> Empty list (no keys) should look similar to: {"keys": [], "version":
> >> 1, "content": "key_list"}
> >> In your case it seems that VMConsoleProxyServlet is not responding
> >> i.e. on my dev env I get a similar result (em

[ovirt-users] Re: can't use vmconsole anymore

2021-04-16 Thread Nathanaël Blanchet

I removed the user and created an other time. Now, I have this

The key seems to be present in the DB

engine=# SELECT users.username, user_profiles.property_content::text
FROM user_profiles
JOIN users ON users.user_id = user_profiles.user_id
WHERE user_profiles.property_type= 'SSH_PUBLIC_KEY';
 username |
property_content

--+---
--
---
 sblanc...@levant.abes.fr | "ssh-rsa 
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQ

sy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArn
NcmS6JFxnPIrGYxxmv01K6VXVvw=="
(1 row)

and now in the api


href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3/sshpublickeys/70850a0e-1b20-4dd5-9fcd-4f64303509d1" 
id="70850a0e-1b20-4dd5-9fcd-4f64303509d1">


ssh-rsa 
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw==


href="/ovirt-engine/api/users/64b7f3bf-9d43-4508-af93-63ad77652be3" 
id="64b7f3bf-9d43-4508-af93-63ad77652be3"/>




but I still can't connect

$ ssh -t -p   ovirt-vmcons...@air.v100.abes.fr connect
ovirt-vmcons...@air.v100.abes.fr: Permission denied (publickey).

and

[root@air ~]# 
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py 
--version "1" keys


still returns empty string...


Le 16/04/2021 à 11:07, Nathanaël Blanchet a écrit :


Le 16/04/2021 à 10:31, Radoslaw Szwajkowski a écrit :

[root@air-dev ~]#
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
--version "1" keys
{"keys": [{"entityid": "d5e69fa0-96a0-4aae-952d-18fe36940248", 
"entity":

"sblanc...@levant.abes.fr@abes.fr-authz", "key": "ssh-rsa
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw=="}], 


"version": 1, "content": "key_list"}

but the same command on the main  engine returns empty

[root@air ~]#
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
--version "1" keys


Empty list (no keys) should look similar to: {"keys": [], "version":
1, "content": "key_list"}
In your case it seems that VMConsoleProxyServlet is not responding
i.e. on my dev env I get a similar result (empty output,error code 1)
when server is down.


it is up


● ovirt-vmconsole-proxy-sshd.service - oVirt VM Console SSH server daemon
   Loaded: loaded 
(/usr/lib/systemd/system/ovirt-vmconsole-proxy-sshd.service; enabled; 
vendor preset: disabled)
   Active: active (running) since Fri 2021-04-16 10:50:41 CEST; 1min 
27s ago

 Main PID: 1914370 (sshd)
    Tasks: 1 (limit: 204594)
   Memory: 3.5M
   CGroup: /system.slice/ovirt-vmconsole-proxy-sshd.service
   └─1914370 /usr/sbin/sshd -f 
/usr/share/ovirt-vmconsole/ovirt-vmconsole-proxy/ovirt-vmconsole-proxy-sshd/sshd_config 
-D


avril 16 10:50:41 air.v100.abes.fr systemd[1]: Started oVirt VM 
Console SSH server daemon.
avril 16 10:50:41 air.v100.abes.fr sshd[1914370]: Server listening on 
0.0.0.0 port .
avril 16 10:50:41 air.v100.abes.fr sshd[1914370]: Server listening on 
:: port .
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole[1914540]: 
2021-04-16 10:52:02,241+0200 ovirt-vmconsole-list: ERROR main:265 
Error: HTTP Error 403: Forbidden
avril 16 10:52:02 air.v100.abes.fr 
ovirt-vmconsole-proxy-keys[1914536]: ERROR Key list execution failed rc=1
avril 16 10:52:02 air.v100.abes.fr sshd[1914534]: 
AuthorizedKeysCommand /usr/libexec/ovirt-vmconsole-proxy-keys 
ovirt-vmconsole failed, status 1
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole[1914547]: 
2021-04-16 10:52:02,806+0200 ovirt-vmconsole-list: ERROR main:265 
Error: HTTP Error 403: Forbidden
avril 16 10:52:02 air.v100.abes.fr 
ovirt-vmcons

[ovirt-users] Re: can't use vmconsole anymore

2021-04-16 Thread Nathanaël Blanchet


Le 16/04/2021 à 10:31, Radoslaw Szwajkowski a écrit :

[root@air-dev ~]#
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
--version "1" keys
{"keys": [{"entityid": "d5e69fa0-96a0-4aae-952d-18fe36940248", "entity":
"sblanc...@levant.abes.fr@abes.fr-authz", "key": "ssh-rsa
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw=="}],
"version": 1, "content": "key_list"}

but the same command on the main  engine returns empty

[root@air ~]#
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py
--version "1" keys


Empty list (no keys) should look similar to: {"keys": [], "version":
1, "content": "key_list"}
In your case it seems that VMConsoleProxyServlet is not responding
i.e. on my dev env I get a similar result (empty output,error code 1)
when server is down.


it is up


● ovirt-vmconsole-proxy-sshd.service - oVirt VM Console SSH server daemon
   Loaded: loaded 
(/usr/lib/systemd/system/ovirt-vmconsole-proxy-sshd.service; enabled; 
vendor preset: disabled)
   Active: active (running) since Fri 2021-04-16 10:50:41 CEST; 1min 
27s ago

 Main PID: 1914370 (sshd)
    Tasks: 1 (limit: 204594)
   Memory: 3.5M
   CGroup: /system.slice/ovirt-vmconsole-proxy-sshd.service
   └─1914370 /usr/sbin/sshd -f 
/usr/share/ovirt-vmconsole/ovirt-vmconsole-proxy/ovirt-vmconsole-proxy-sshd/sshd_config 
-D


avril 16 10:50:41 air.v100.abes.fr systemd[1]: Started oVirt VM Console 
SSH server daemon.
avril 16 10:50:41 air.v100.abes.fr sshd[1914370]: Server listening on 
0.0.0.0 port .
avril 16 10:50:41 air.v100.abes.fr sshd[1914370]: Server listening on :: 
port .
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole[1914540]: 2021-04-16 
10:52:02,241+0200 ovirt-vmconsole-list: ERROR main:265 Error: HTTP Error 
403: Forbidden
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole-proxy-keys[1914536]: 
ERROR Key list execution failed rc=1
avril 16 10:52:02 air.v100.abes.fr sshd[1914534]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole[1914547]: 2021-04-16 
10:52:02,806+0200 ovirt-vmconsole-list: ERROR main:265 Error: HTTP Error 
403: Forbidden
avril 16 10:52:02 air.v100.abes.fr ovirt-vmconsole-proxy-keys[1914543]: 
ERROR Key list execution failed rc=1
avril 16 10:52:02 air.v100.abes.fr sshd[1914534]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1
avril 16 10:52:03 air.v100.abes.fr sshd[1914534]: Connection closed by 
authenticating user ovirt-vmconsole 10.34.100.131 port 53674 [preauth]




However you can check if DB contains the right data (key is encoded as
JSON string - enclosed in double quotes):
SELECT users.username, user_profiles.property_content::text
FROM user_profiles
JOIN users ON users.user_id = user_profiles.user_id
WHERE user_profiles.property_type= 'SSH_PUBLIC_KEY';


https://air.v100.abes.fr//ovirt-engine/api/users/1bb90486-d431-4554-a6a1-37631d8c16d4/sshpublickeys



is empty

while

https://air-dev.v100.abes.fr/ovirt-engine/api/users/d5e69fa0-96a0-4aae-952d-18fe36940248/sshpublickeys 



returns


href="/ovirt-engine/api/users/d5e69fa0-96a0-4aae-952d-18fe36940248/sshpublickeys/1fa3fcaf-7475-4c72-9565-b32425d3c8fd" 
id="1fa3fcaf-7475-4c72-9565-b32425d3c8fd">


ssh-rsa 
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw==


href="/ovirt-engine/api/users/d5e69fa0-96a0-4aae-952d-18fe36940248" 
id="d5e69fa0-96a0-4aae-952d-18fe36940248"/>






best regards,
Radek


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EGTQ6QPLMO4EZQTFJZ6AOUGUM5PVPRWN/


[ovirt-users] Re: can't use vmconsole anymore

2021-04-16 Thread Nathanaël Blanchet

Hello,

This is what I get on working engines:

[root@air-dev ~]# 
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py 
--version "1" keys
{"keys": [{"entityid": "d5e69fa0-96a0-4aae-952d-18fe36940248", "entity": 
"sblanc...@levant.abes.fr@abes.fr-authz", "key": "ssh-rsa 
B3NzaC1yc2EBIwAAAQEAyfrDI84RWtSvFOUvpb9DkbnIuEfZEQAt4ZCXDHNXcmRwa9iXfPbj69gkOJyj7Jhj9RinJn9at4NgJtrO/rRRgT+SzYUWpdO2KWHgRM5v1rpYcw820ZDdAZk+yxCjQsy6kd49q/q6B+Uzg8Kpth+CAV1ubRrBYqFiuT/qQe9y+0N1TkNdASWL38oZH9K0rzbDb4WlU2Er2BCXzoLF2NBk7iyaS3+Y65DqWPPHHdh89nilC6k5N7SCUkSOayrjh7NnErkBAKZ6PPaarZqZhZPrCbHZnu0oqA0XQXKLcYpwuhNwcK8e4ZWsDwMmArnNcmS6JFxnPIrGYxxmv01K6VXVvw=="}], 
"version": 1, "content": "key_list"}


but the same command on the main  engine returns empty

[root@air ~]# 
/usr/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py 
--version "1" keys


It seems that UI field doesn't inject the key, it should exist an other 
way to do it with CLI/API


Le 16/04/2021 à 09:32, Radoslaw Szwajkowski a écrit :

/libexec/ovirt-vmconsole-proxy-helper/ovirt-vmconsole-list.py"
--version "1" keys


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CSUPQXS6NFBZ2LO2T6M2Y6EZXUNIR76J/


[ovirt-users] Re: can't use vmconsole anymore

2021-04-15 Thread Nathanaël Blanchet

some more found into /var/log/messages

Apr 15 21:03:58 air journal[1747077]: 2021-04-15 21:03:58,073+0200 
ovirt-vmconsole-list: ERROR main:265 Error: HTTP Error 403: Forbidden
Apr 15 21:03:58 air ovirt-vmconsole-proxy-keys[1747073]: ERROR Key list 
execution failed rc=1
Apr 15 21:03:58 air sshd[1747071]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1
Apr 15 21:03:58 air journal[1747082]: 2021-04-15 21:03:58,573+0200 
ovirt-vmconsole-list: ERROR main:265 Error: HTTP Error 403: Forbidden
Apr 15 21:03:58 air ovirt-vmconsole-proxy-keys[1747078]: ERROR Key list 
execution failed rc=1
Apr 15 21:03:58 air sshd[1747071]: AuthorizedKeysCommand 
/usr/libexec/ovirt-vmconsole-proxy-keys ovirt-vmconsole failed, status 1


Le 15/04/2021 à 21:08, Nathanaël Blanchet a écrit :

Hi,

I was used to use the vmconsole proxy, but since a while, I'm getting 
this issue (currently 4.4.5):


# ssh -t -p   ovirt-vmcons...@air.v100.abes.fr connect
ovirt-vmcons...@air.v100.abes.fr: Permission denied (publickey).

I found following in the engine.log

2021-04-15 17:55:43,094+02 ERROR 
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default 
task-4) [] Error validating ticket: : 
sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
    at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
    at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
    at 
java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
    at 
org.ovirt.engine.core.uutils//org.ovirt.engine.core.uutils.crypto.CertificateChain.buildCertPath(CertificateChain.java:128)
    at 
org.ovirt.engine.core.uutils//org.ovirt.engine.core.uutils.crypto.ticket.TicketDecoder.decode(TicketDecoder.java:89)
    at 
deployment.engine.ear.services.war//org.ovirt.engine.core.services.VMConsoleProxyServlet.validateTicket(VMConsoleProxyServlet.java:175)
    at 
deployment.engine.ear.services.war//org.ovirt.engine.core.services.VMConsoleProxyServlet.doPost(VMConsoleProxyServlet.java:225)


The user key is the good one, I use the same with my other engines and 
I can successfully connect to vm consoles.


Thank you for helping


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4ARLUNP53FH5A2ZLWMKHNJUO4DAC35LB/


[ovirt-users] can't use vmconsole anymore

2021-04-15 Thread Nathanaël Blanchet

Hi,

I was used to use the vmconsole proxy, but since a while, I'm getting 
this issue (currently 4.4.5):


# ssh -t -p   ovirt-vmcons...@air.v100.abes.fr connect
ovirt-vmcons...@air.v100.abes.fr: Permission denied (publickey).

I found following in the engine.log

2021-04-15 17:55:43,094+02 ERROR 
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-4) 
[] Error validating ticket: : 
sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target
    at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
    at 
java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
    at 
java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
    at 
org.ovirt.engine.core.uutils//org.ovirt.engine.core.uutils.crypto.CertificateChain.buildCertPath(CertificateChain.java:128)
    at 
org.ovirt.engine.core.uutils//org.ovirt.engine.core.uutils.crypto.ticket.TicketDecoder.decode(TicketDecoder.java:89)
    at 
deployment.engine.ear.services.war//org.ovirt.engine.core.services.VMConsoleProxyServlet.validateTicket(VMConsoleProxyServlet.java:175)
    at 
deployment.engine.ear.services.war//org.ovirt.engine.core.services.VMConsoleProxyServlet.doPost(VMConsoleProxyServlet.java:225)


The user key is the good one, I use the same with my other engines and I 
can successfully connect to vm consoles.


Thank you for helping

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XVAQKUBBWR5MDDYFUYW3IAHV5HQNQMNF/


[ovirt-users] extending vm disk when vm is up

2021-04-08 Thread Nathanaël Blanchet

Hello,

Why it is not possible to extend disk size into UI when a vm is up while 
it is possible to do the same with API/SDK/ansible?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQJFANDIRQTLYYXDKFS3J62D7WCTM7D6/


[ovirt-users] Re: oVirt longevity after CentOS 8, RHV changes

2021-04-07 Thread Nathanaël Blanchet

Le 07/04/2021 à 17:33, Michal Skrivanek a écrit :



On 7. 4. 2021, at 17:22, Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Hi,

Le 06/04/2021 à 18:15, Sandro Bonazzola a écrit :



Il giorno sab 3 apr 2021 alle ore 18:22 Andrei Verovski 
mailto:andre...@starlett.lv>> ha scritto:


Hi,

Does all this mean oVirt will be sometime and somehow merged
with OpenShift (or OKD)?


oVirt supports integration with OKD with KubeVirt. I've no video to 
show it for oVIrt (yet) but you can see it here for RHV / OCP: 
https://www.youtube.com/watch?v=MMEaZAxj9_8 
<https://www.youtube.com/watch?v=MMEaZAxj9_8>
Tried to do the same as shown on the video on ovirt 4.4.4, but no 
kubevirt provider is available. Is it an option when installing or an 
upcoming feature?


it is there, but only enabled by default in 4.4.5
there’s KubevirtProviderSupportEnabled vdc_option for that in older 
versions


Yes that's it, for those who want to quickly enable it in prior ovirt 
versions:


engine-config -s KubevirtProviderSupportEnabled=true




There is no plan to get oVirt merged into OKD.


Its not that easy since OKD designed primarily for
Kubernetes/Docker containers.

Or oVirt may be considered just another abandonware within 2+ years?


oVirt is not going to be abandonware as long as the community will 
not abandon it.




--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA <https://www.redhat.com/>

sbona...@redhat.com <mailto:sbona...@redhat.com>
<https://www.redhat.com/> 

*Red Hat respects your work life balance. Therefore there is no need 
to answer this email out of your office hours.

*
*

*

___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z7MPCRZKWD6JRYPDEKCUJWCYGUHMF6FM/

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org 
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html 
<https://www.ovirt.org/privacy-policy.html>
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/ 
<https://www.ovirt.org/community/about/community-guidelines/>
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C7UIUX37CUD5EPSLKSF6OB3Q3OS3F6B/ 
<https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C7UIUX37CUD5EPSLKSF6OB3Q3OS3F6B/>



--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LZTMGEFSWDG7OSMZPO5XOGT2KDLABHWC/


[ovirt-users] Re: oVirt longevity after CentOS 8, RHV changes

2021-04-07 Thread Nathanaël Blanchet

Hi,

Le 06/04/2021 à 18:15, Sandro Bonazzola a écrit :



Il giorno sab 3 apr 2021 alle ore 18:22 Andrei Verovski 
mailto:andre...@starlett.lv>> ha scritto:


Hi,

Does all this mean oVirt will be sometime and somehow merged with
OpenShift (or OKD)?


oVirt supports integration with OKD with KubeVirt. I've no video to 
show it for oVIrt (yet) but you can see it here for RHV / OCP: 
https://www.youtube.com/watch?v=MMEaZAxj9_8 
<https://www.youtube.com/watch?v=MMEaZAxj9_8>
Tried to do the same as shown on the video on ovirt 4.4.4, but no 
kubevirt provider is available. Is it an option when installing or an 
upcoming feature?

There is no plan to get oVirt merged into OKD.


Its not that easy since OKD designed primarily for
Kubernetes/Docker containers.

Or oVirt may be considered just another abandonware within 2+ years?


oVirt is not going to be abandonware as long as the community will not 
abandon it.




--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA <https://www.redhat.com/>

sbona...@redhat.com <mailto:sbona...@redhat.com>

<https://www.redhat.com/> 

*Red Hat respects your work life balance. Therefore there is no need 
to answer this email out of your office hours.

*
*

*

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z7MPCRZKWD6JRYPDEKCUJWCYGUHMF6FM/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C7UIUX37CUD5EPSLKSF6OB3Q3OS3F6B/


[ovirt-users] intel_iommu=on kvm-intel.nested=1 deactivates rp_filter kernel option

2021-04-01 Thread Nathanaël Blanchet

Hello,

I have two kind of hosts:

 * some with default ovirt node 4.4 kernel settings
 * some with custom kernel settings including intel_iommu=on
   kvm-intel.nested=1

I can't open vm console from the second category host when binding from 
a different vlan because the host is unreacheable


But if I set sysctl -w net.ipv4.conf.all.rp_filter=2, I can bind the 
host and open a vm console.


I didn't test if this behaviour is because of Hostdev Passthrough & 
SR-IOV or Nested Virtualization.


Is it an expected behaviour or a bug?

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IMIAUNX2BTP3Q7MGX3ALMCOGOIN5IY4O/


[ovirt-users] 4.5 compatibility cluster

2021-03-03 Thread Nathanaël Blanchet
When uprading my hosts to ovirt 4.4, is it better to chose 4.4 or 4.5 cluster compatibility, knowing that there is no planned 4.5 release yet?___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VJJLQWLRQYDL6WS4S35GAXG4DI4HMKAK/


[ovirt-users] node IPs can't be pingued on a fresh 4.4.4 installation

2021-03-03 Thread Nathanaël Blanchet

Hello

On  a fresh installation of a 4.4.4 node, I configured network so as to 
get dhcp delivered IP for gluster and migration services. After IPs have 
been delivered, they can't be pingued and vms migrations fail.


All work as expected once I reactivate each bridge with nmcli/nmtui... 
This bug is present on each new node installation.


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/52CNAOQW5WKQD2CQWPUCKNUHQ5UERYYE/


[ovirt-users] Re: oVirt4.1 add host error. can i upgrade from 4.1 to 4.4? without updating sequentially 4.1-4.2-4.3-4.4

2021-03-01 Thread Nathanaël Blanchet
You should try to add an ovirt node 4.1  if you really want to stay on 4.1 
:https://resources.ovirt.org/pub/ovirt-4.1/iso/ovirt-node-ng-installer-ovirt/4.1-2018012411/ovirt-node-ng-installer-ovirt-4.1-2018012411.iso
Whatever, you will never be able to upgrade from 4.1 to 4.4 because 4.4 is only 
el8.
Le 1 mars 2021 07:52, grig...@gmail.com a écrit :


HI! 
There is an oVirt 4.1 self-hosted engine cluster of two hosts and a storage 
connected via iscsi. When trying to add another host, it gives an error: "ERROR 
otopi.context context._executeMethod:151 Failed to execute stage 'Setup 
validation': Cannot locate vdsm package, possible cause is incorrect channels". 
Older hosts on Centos 7.5.1804, last on Centos 7.9.2009. Is it possible to go 
from 4.1 to 4.4 using the third host as the main one for the transfer? 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U4TQUY3PDIJ7VTBPDEQ2PH6MZZHSK6C/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PZN3C4MQ2NBQUYJGGKEKAMYEFR2GLKCQ/


[ovirt-users] Re: How to enable nested virtualization

2021-02-28 Thread Nathanaël Blanchet
You  need to reinstall the host after having  enabled the nested feature and 
obviously reboot the host so as it will boot with the new kernel feature.
Le 26 févr. 2021 19:57, miguel.gar...@toshibagcs.com a écrit :


Hi all,

We are trying to run virtual box in a vm that is running over ovirt platform. I 
had followed the instruction to enable nested virtualization on host as 
described in this document 
https://ostechnix.com/how-to-enable-nested-virtualization-in-kvm-in-linux/

However I was not able to enable nested virtualization to the vm since nothing 
is listed from virsh console. Also tryed to edit vm configuration lookig up for 
"cpu mode" or "copy cpu configuration as host"

Also from oVirt admin portal I had enabled host for nested virtualization 
through Compute > Host > selected Host > edit > Kernel Nested virtualization 
checked.

But the host still returns:
$ cat /sys/module/kvm_intel/parameters/nested
N
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U7IPOFY374742NASZYEEEDQQNHZRGXOF/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3MQIXYTLL3MFBIIKPDSWH5F5EJKJTTWN/


[ovirt-users] Re: [ANN] oVirt 4.4.5 Fifth Release Candidate is now available for testing

2021-02-16 Thread Nathanaël Blanchet
Sure, I'm using ansible in production and I successfully tested the 
community terraform project following this 
https://github.com/oVirt/terraform-provider-ovirt.


for ansible, you can use raw ovirt_vm modules  or get inspired by 
https://github.com/oVirt/ovirt-ansible/blob/master/examples/ovirt_vm_infra.yml 
which is good to a start point.


Le 16/02/2021 à 17:37, Strahil Nikolov via Users a écrit :

Is it possible to create the VM in Ansible/Terraform or over the API ?
What happens when you create the VM without a disk and once created -> 
create and attach the disk itself ?


Best Regards,
Strahil Nikolov

On Mon, Feb 15, 2021 at 19:20, Edward Berger
 wrote:
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/MOI3CBHR75RGSQVHJKQ3UP2OQ4D2MZNY/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F6ZWAZM37ATG7LDQI4CULSCMSU6MQM7M/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZIHYMDLRVGGYF56TOBN5T6AR3MOTZYFU/


[ovirt-users] Re: move ovirt 4.3.9 to RHEL 8

2021-02-01 Thread Nathanaël Blanchet
Last metadata expiration check: 0:23:39 ago on Fri 29 Jan
2021 07:02:20 PM CST.
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
Name               Stream       Profiles Summary
container-tools    rhel8 [d][e] common [ Most recent
(rolling) versions of podma
                                d] n, buildah, skopeo, runc,
conmon, runc,
conmon, CRIU, Udica, etc as well as de
 pendencies such as container-selinux bu
 ilt and tested together, and updated as
frequently as every 12 weeks.
pki-deps           10.6 [e]  PKI Dependencies module for PKI
10.6 or
later
postgresql         12 [e]       client,  PostgreSQL server
and client module
                                server [
                                d]
python36           3.6 [d][e]   build, c Python programming
language, version 3.
                                ommon [d 6
                                ]
satellite-5-client 1.0 [d][e]   common [ Red Hat Satellite 5
client packages
                                d], gui
virt               rhel [d][e]  common [ Virtualization module
                                d]

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled


Paul

On Fri, Jan 29, 2021 at 5:21 PM Gianluca Cecchi
mailto:gianluca.cec...@gmail.com>> wrote:

On Fri, Jan 29, 2021 at 8:44 PM Paul Dyer
mailto:pmdyer...@gmail.com>> wrote:

Hi,

I am laying the groupwork for upgrade ovirt to 4.4. 
 Since the standalone ovirt mgr is now running on RHEL 7,
I have installed RHEL 8 to a new VM.   Unfortunately,
after installing ovirt-release43, I am not able to find
documentation for the dnf modules required.   All the
current documentation point to ovirt-release44 and dnf
modules not available for ovirt 4.3/RHEL 8.



oVirt 4.3.x (both engine server and hypervisors) are only
based on CentOS 7.x or RH EL 7.x
oVirt 4.4.y (both engine server and hypervisors) are only
based on CentOS 8.x or RH EL 8.x

I think 4.3 on RH EL 8 never tested at all by the developers.

If your target is upgrade from 4.3 to 4.4 you have to do an
"application" backup of the 4.3 engine (see the link at the
bottom) and restore it on the new engine in 4.4, that is a
scratch install on a new system, but can have the same
ip/hostname as the old engine server, so that it could be
transparent from an user access point of view.
Already done both on oVirt and RHV with external engine,
local database.
The old engine and the new one are two vSphere virtual machines.
You can install the new engine based on RH EL 8 with
temporary network parameters and then as soon as you have
completed the backup of the 4.3 one and copied over it you
can shutdown the 4.3 engine server, to keep at a minimum the
absence of an engine for the environment that anyway doesn't
compromise the workload of your virtual machines.
Of course HA reactions or live migration are not possible in
this time frame without an engine.
The restore and the reconfiguration take minutes if you
prepare the new engine server in advance.

Read also here for the full details:
https://www.ovirt.org/documentation/upgrade_guide/

HIH,
Gianluca



-- 
Paul Dyer,

Mercury Consulting Group, RHCE
504-338-8750
___
Users mailing list -- users@ovirt.org <mailto:users%40ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-leave%40ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/GY34KCSUCDNUV2P6ZW32IHCM66P3MFFO/




--
Paul Dyer,
Mercury Consulting Group, RHCE
504-338-8750

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W5GSPTPO7XVJV5IFDNV4H34VJSYWBJBJ/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To uns

[ovirt-users] Re: recovering gluster volumes when moving hosts to a new datacenter

2021-01-30 Thread Nathanaël Blanchet
Sure !
Le 30 janv. 2021 20:54, Alex K a écrit :


On Fri, Jan 29, 2021, 12:15 Nathanaël Blanchet  wrote:

> Hi,
>
> I moved 3 hosts (for replica 3 volume) from a previous datacenter to a
> new datacenter.
>
> Those hosts had initially been configured in a gluster cluster and
> managed multiple gluster volume created with ovirt UI.
>
> These hosts are now apart of a new gluster cluster and they see each
> others with cli "gluster peer status" as well as the associated volumes
> "gluter volumes list".
>
> But I can't make gluster volumes visible in the usually "volume" tab, so
> ovirt doesn't seem to see them.
>
> Is there a way to import pre existing gluster volume so as to ovirt be
> able to manage them ?
>
Have you enabled gluster under cluster options?

>
> Thanks.
>
> --
> Nathanaël Blanchet
>
> Supervision réseau
> SIRE
> 227 avenue Professeur-Jean-Louis-Viala
> 34193 MONTPELLIER CEDEX 5
> Tél. 33 (0)4 67 54 84 55
> Fax  33 (0)4 67 54 84 14
> blanc...@abes.fr
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OW27PE5P7GXXBWJWAYQGZCFUCERYVVLY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U6WTT6O54HJRTME5DBK5L432DLA7JFES/


[ovirt-users] recovering gluster volumes when moving hosts to a new datacenter

2021-01-29 Thread Nathanaël Blanchet

Hi,

I moved 3 hosts (for replica 3 volume) from a previous datacenter to a 
new datacenter.


Those hosts had initially been configured in a gluster cluster and 
managed multiple gluster volume created with ovirt UI.


These hosts are now apart of a new gluster cluster and they see each 
others with cli "gluster peer status" as well as the associated volumes 
"gluter volumes list".


But I can't make gluster volumes visible in the usually "volume" tab, so 
ovirt doesn't seem to see them.


Is there a way to import pre existing gluster volume so as to ovirt be 
able to manage them ?


Thanks.

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OW27PE5P7GXXBWJWAYQGZCFUCERYVVLY/


[ovirt-users] Re: centos 7.9

2021-01-28 Thread Nathanaël Blanchet

Hello,

I really don't agree, as Sandro and many other redhat guy repeated many 
times, ovirt releases are tested for quality before been delivered.


So It shouldn't change anything if you use ovirt node based on el8 
stream, which would be a snapshot of all needed and tested dependencies  
for the concerned release.


Anyway, this is already the case for current released based on Centos, 
which are shipped with many additionnal repos that are not included in 
the Base el8 repo.


By this way, Ovirt has always been stable for production from my own 10 
years experience and I have no doubt that the quality will go on.


Le 25/01/2021 à 18:53, Thomas Hoberg a écrit :

I would agree, if CentOS 8 could still be considered a proper base to build on.
But since that is now EOL at the end of this year, oVirt is no longer viable, 
because it's beta-on-beta.

I can only hope that IBM will read the writing on the wall before you guys will 
be out of a job.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EQAQ6WGQJUJDVHY22LM72A7SQ3NXXP3R/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3OAUELSHY2QNTLNSKVAIAFDIOADMAMR6/


[ovirt-users] ovirt node based on centos 8 stream

2021-01-22 Thread Nathanaël Blanchet

Hi all,

I project to upgrade from 4.3 to 4.4 hosts in the next few days, and I 
wonder if ovirt node based on centos 8.3 will be upgradable to ovirt 
node based on centos stream.


If not, I will wait to upgrade directly to ovirt node centos stream 
based when available.


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R2FAFKH2Q7U23FUSNO6X2E2OIEO33BXD/


[ovirt-users] how to fix time-drift on el8 hosts?

2021-01-07 Thread Nathanaël Blanchet

Hello,

Engine complains about my fresh el8 ovirt 4.4.3 node host:

"Host hadriacus has time-drift of 3202 seconds while maximum configured 
value is 300 seconds."


I tried to fix it with these commands:

sudo chronyc -a makestep
chronyc sources
chronyc tracking

... but the host is still not synchronized.

How should I proceed?

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P46GEHJ45PUZZHK2AY6A5ZH3AFBWUPCA/


[ovirt-users] User portal and DNS entries removal

2020-11-21 Thread Nathanaël Blanchet
Hello,We project to use User portal to give more autonomy to users for creating VMs. Creation, modifications are easy et friendship, and network is dealt with external dhcp/ddns. But when deleting a VM, DNS leases with a long TTL still remains and it is not possible to access a new VM that is named as same as the precedent one. I wrote a playbook that erases all related DNS entries and I'm used to run it with AWX for other cases. Is there a way to integrate this playbook into User portal to be run when deleting a VM so as the DNS database to be still clean?___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PPEDJKD6NUJONACMFFJFQJ7YR3TC2QFN/


[ovirt-users] Re: how to test incremental backup in 4.4

2020-06-08 Thread Nathanaël Blanchet
Is this feature official in ovirt 4.4 or is it a preview tech? 
I haven't read any annoucement or any release note about such a great 
feature... 


De: "Eyal Shenitzky"  
À: "Gianluca Cecchi"  
Cc: "users"  
Envoyé: Lundi 8 Juin 2020 13:53:09 
Objet: [ovirt-users] Re: how to test incremental backup in 4.4 

Thank you! 

We will be glad to have some feedback when you have some. 

Please keep posted. 

On Mon, 8 Jun 2020 at 10:57, Gianluca Cecchi < [ 
mailto:gianluca.cec...@gmail.com | gianluca.cec...@gmail.com ] > wrote: 





On Sun, Jun 7, 2020 at 1:33 PM Eyal Shenitzky < [ mailto:eshen...@redhat.com | 
eshen...@redhat.com ] > wrote: 

BQ_BEGIN



On Sun, 7 Jun 2020 at 14:29, Eyal Shenitzky < [ mailto:eshen...@redhat.com | 
eshen...@redhat.com ] > wrote: 

BQ_BEGIN

Hi Gianluca, 

On Thu, 4 Jun 2020 at 02:04, Gianluca Cecchi < [ 
mailto:gianluca.cec...@gmail.com | gianluca.cec...@gmail.com ] > wrote: 

BQ_BEGIN

Hello, 
going to test incremental backup in 4.4. 
Is this page the updated one to use: 
[ 
https://www.ovirt.org/develop/release-management/features/storage/incremental-backup.html
 | 
https://www.ovirt.org/develop/release-management/features/storage/incremental-backup.html
 ] 



This page contains a lot of data about the feature and includes must of the 
APIs but it still needs some updates. 

There is currently no up-to-date documentation but we are working on it. 
Please share your inputs when you have some insights. 

You can have a look at the session we did on the DevConf 2020 conference [1] 

BQ_END

Also, please note that in order to use the incremental backup feature you must 
set ' IsIn crementalBackupSupported' 
to 'true' in the Engine database and restart the engine before taking a backup 
- 

engine-config -s " IsIn crementalBackupSupported=true" 

BQ_BEGIN



BQ_BEGIN

? 
Is there already any ansible module/role ongoing to support it? 

BQ_END

There is no Ansible implementation for it but we provide a python SDK 
script for backup a VM using incremental backup new API [2] 

[1] - [ https://www.youtube.com/watch?v=foyi1UyadEc | 
https://www.youtube.com/watch?v=foyi1UyadEc ] 
[2] - [ 
https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/backup_vm.py 
|  
https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/backup_vm.py 
] 


BQ_BEGIN


Thanks, 
Gianluca 
___ 
Users mailing list -- [ mailto:users@ovirt.org | users@ovirt.org ] 
To unsubscribe send an email to [ mailto:users-le...@ovirt.org | 
users-le...@ovirt.org ] 
Privacy Statement: [ https://www.ovirt.org/privacy-policy.html | 
https://www.ovirt.org/privacy-policy.html ] 
oVirt Code of Conduct: [ 
https://www.ovirt.org/community/about/community-guidelines/ | 
https://www.ovirt.org/community/about/community-guidelines/ ] 
List Archives: [ 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CWLMCHTSWDNOLFUPPLOU7ORIVKHWD5GM/
 | 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CWLMCHTSWDNOLFUPPLOU7ORIVKHWD5GM/
 ] 

BQ_END



-- 
Regards, 
Eyal Shenitzky 

BQ_END



-- 
Regards, 
Eyal Shenitzky 

BQ_END

Thank you very much for your insights, Eyal. 
In the mean time I enabled the feature in the engine and I'm going to watch and 
read the resources you provided. 

Gianluca 

BQ_END



-- 
Regards, 
Eyal Shenitzky 

___ 
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org 
Privacy Statement: https://www.ovirt.org/privacy-policy.html 
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/ 
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7OI72KSF3KSWW2L47NULVW222PKL2WNW/
 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HT3ZEYCOZ7KQHMBPMUWR5QPYVMHZGPMS/


[ovirt-users] centos 8 stream status

2020-05-06 Thread Nathanaël Blanchet

Hello,

Centos 8 stream should be the preview of centos 8, so why not using 
right now it instead of waiting GA 8.2?


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WFGADEFI7FIUTHQUO4XN6HCG5U3HYBMP/


[ovirt-users] Re: how to use idrac interface as a vm network

2020-03-25 Thread Nathanaël Blanchet
That's it! Nothing to do with an ovirt feature, the idrac interface is 
present since I activated the ISM module on the hosts. So this interface 
is unuseful for networking stuff in ovirt.


Le 25/03/2020 à 17:12, eev...@digitaldatatechs.com a écrit :


The idrac 7 can use either LOM or usb. I’m not sure about 6 but the 
idrac shows up as a usb nic in version 7 wih a link local ip, 
169.254.0.X and allows the OS passthrough mentioned.


Eric Evans

Digital Data Services LLC.

304.660.9080

*From:* Nathanaël Blanchet 
*Sent:* Wednesday, March 25, 2020 9:22 AM
*To:* users@ovirt.org
*Cc:* Maton, Brett 
*Subject:* [ovirt-users] Re: how to use idrac interface as a vm network

Thanks for replying,

I know this setting, but I do want to use the dedicated nic.

The curious thing is that the MAC adress of the dedicated NIC into 
IDRAC setting differs from the MAC reported into ovirt:


So it lest me suppose that there is a kind of virtual card derived 
from the physical one, can anybody confirm this?


Le 25/03/2020 à 13:02, Maton, Brett a écrit :

Can't say that I've tried it, but it looks like it's a setting
within iDRAC

This link is for iDRAC 8, but it's probably similar for 7 and 9...


https://www.dell.com/community/PowerEdge-Hardware-General/iDRAC-8-NIC-Port-Sharing/td-p/5078061

On Wed, 25 Mar 2020 at 09:33, Nathanaël Blanchet mailto:blanc...@abes.fr>> wrote:

Hello,

I noticed an idrac interface was available in the host network
since an
undefined ovirt version.

Mine are already plugged as dedicated vlan to administrate
host at the
lowest level.

I tested to use it as a vm network on the same vlan, but it
doesn't work.

What am I supposed to do with this available interface?

PS: on HP hosts, no Ilo interface appears in host network tab

-- 
    Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr <mailto:blanc...@abes.fr>
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/UP6WTZIH7YTAXG3CB32P7MZNMIFAAEDE/

--
Nathanaël Blanchet
Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr  <mailto:blanc...@abes.fr>



--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NLNCEIZ2JQJQOTLBNRQLPRQHD6XSBSOV/


[ovirt-users] Re: how to use idrac interface as a vm network

2020-03-25 Thread Nathanaël Blanchet

Thanks for replying,

I know this setting, but I do want to use the dedicated nic.

The curious thing is that the MAC adress of the dedicated NIC into IDRAC 
setting differs from the MAC reported into ovirt:


So it lest me suppose that there is a kind of virtual card derived from 
the physical one, can anybody confirm this?


Le 25/03/2020 à 13:02, Maton, Brett a écrit :
Can't say that I've tried it, but it looks like it's a setting within 
iDRAC


This link is for iDRAC 8, but it's probably similar for 7 and 9...
https://www.dell.com/community/PowerEdge-Hardware-General/iDRAC-8-NIC-Port-Sharing/td-p/5078061


On Wed, 25 Mar 2020 at 09:33, Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Hello,

I noticed an idrac interface was available in the host network
since an
undefined ovirt version.

Mine are already plugged as dedicated vlan to administrate host at
the
lowest level.

I tested to use it as a vm network on the same vlan, but it
doesn't work.

What am I supposed to do with this available interface?

PS: on HP hosts, no Ilo interface appears in host network tab

    -- 
Nathanaël Blanchet


Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr <mailto:blanc...@abes.fr>
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/UP6WTZIH7YTAXG3CB32P7MZNMIFAAEDE/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IER2TDN664L43CG3RWMUI3ODE3IPWOPL/


[ovirt-users] how to use idrac interface as a vm network

2020-03-25 Thread Nathanaël Blanchet

Hello,

I noticed an idrac interface was available in the host network since an 
undefined ovirt version.


Mine are already plugged as dedicated vlan to administrate host at the 
lowest level.


I tested to use it as a vm network on the same vlan, but it doesn't work.

What am I supposed to do with this available interface?

PS: on HP hosts, no Ilo interface appears in host network tab

--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UP6WTZIH7YTAXG3CB32P7MZNMIFAAEDE/


[ovirt-users] bonding and SR-IOV

2020-03-23 Thread Nathanaël Blanchet

Hello,

I successfully attached VF to a VM on a single PF nic following 
https://access.redhat.com/articles/3215851.


I want the vm with VF to be migratable, but the nic hotplug/replug is 
too long. So I tested the mode 1 bonding (active-backup) with a virtio 
nic following this


https://www.ovirt.org/develop/release-management/features/network/liveMigrationSupportForSRIOV.html

On a single PF, the resilience tests with migration are correct with 1 
or 2 second downtime.


But now I want to do the same on a typical host with LACP PF:

Considering vlan13, I must bond a virtio nic on a brv13/brv13 profile 
with SR-IOV/brv13 profile as the primary interface.


Everything work when the primary interface is brv13/brv13 profile (work 
as a traditionnal bridge config), but not when changing on the 
SR-IOV/brv13 profile.


I know in this case that the SR-IOV profile is connected to a LACP 
interface, but does it mean that I have to configure the VF vnic in the 
VM to be part of the LACP(bond1) as a single member and in that case to 
do active-backup bond0 with two members bond1 and brv13 nic?


Hope to be clear enough.

Thanks for your help.


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KBCQUNROEYDLWEI2PZ6FGXDJK42GD3M5/


[ovirt-users] Re: oVirt 4.4.0 Alpha release refresh is now available for testing

2020-03-06 Thread Nathanaël Blanchet
<https://www.redhat.com/>

sbona...@redhat.com <mailto:sbona...@redhat.com>

<https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need 
to answer this email out of your office hours.*


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C532UQTU3YL43BIWCVU2JXHP7G5Y3OEB/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CCHDGXRW63BQSTPRY3APUQ362SCK2HGU/


[ovirt-users] Re: Ovirt API and CLI

2020-02-27 Thread Nathanaël Blanchet


Le 27/02/2020 à 11:00, Yedidyah Bar David a écrit :

On Thu, Feb 27, 2020 at 11:53 AM Eugène Ngontang  wrote:

Yes Ansible ovirt_vms module is useful, I use it for provisioning/deployment, 
but once my VM created, I'd like to administrate/interact with them, I don't 
think I should write playbooks for that.


Why not? You're the next devops :)

I was used to use ovirt-shell (removed from 4.4), and instead of it I 
control now all my vms with ansible playbooks:


 * consultation with ovirt-*_inf with appropriate filters (combine ,
   dict2items) and conditions (when, until)
 * interaction with other modules (with present/absent statement for
   all parameters)

I precise I am not a developer but once I took the habit with a proper 
environment (venv, IDE, loops, structured playbook and roles, dict 
struct, etc..), I was able do what I want, or rather what the API let me do.


Before begining, I should advice you to take the time to study the 
structure of the output of the registered variable


Here is a piece of my commonly used playbooks to check status of wanted vms:

- name: template ovirt pour tester les modules
hosts: localhost
connection: local
tasks:
- block:
- include: ovirt_auth.yaml
tags: auth,change
- name: vmfacts
ovirt_vm_info:
auth: "{{ ovirt_auth }}"
pattern: "name=vm5 or name=vm8"
register: vm_info
- debug: var=vm_info.ovirt_vms
# msg: "{{vm_info.ovirt_vms | map(attribute='status')|list}}"
- name: "Génération d'un dictionnaire avec combine"
set_fact:
vm_status: "{{ vm_status|default({})|combine({item.name: item.status}) }}"
loop: "{{vm_info.ovirt_vms}}"
when: item.status == "up"
- debug:
msg: "{{vm_status}}"
always:
- include: ovirt_auth_revoke.yaml
tags: auth,change

Good luck!


This is up to you, of course.

For a project that uses heavily the ansible modules, see
ovirt-ansible-hosted-engine-setup.

For one that uses the python SDK, see ovirt-system-tests. The SDK
itself also has a very useful collection of examples.


But I'll find a solution.

Good luck and best regards,


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LDCRW5YXHEMEY77XTHQKV4CAHHUKF43E/


[ovirt-users] Re: terraform integration

2020-02-25 Thread Nathanaël Blanchet
Le 25 févr. 2020 15:11, Roy Golan  a écrit :On Fri, 21 Feb 2020 at 14:52, Nathanaël Blanchet <blanc...@abes.fr> wrote:
  

  
  
Hello,
It seems that the work for including ovirt as a provider in the
  master branch of openshift installer has been done. I compiled the
  master code and ovirt does appear in the survey.
  I don't have much time to test it for now but is it operationnal?
  If yes, I will prior to have a look to it.It is operational, yes - which OS are you going to use? The choice seems to be done between RHCOS ans FCOS doesn't it? I would prefer FCOS. Do I have to preset a template or the installer downloads the template by its own? Okd 4.4 is still in alpha preview, is it stable enough, what does it still miss?
Thanks.

Le 06/01/2020 à 21:30, Roy Golan a
  écrit :


  
  



The merge window is now open for the masters branches of
  the various origin components.
Post merge there should be an OKD release - this is not
  under my control, but when it will be available I'll let you
  know.



  On Mon, 6 Jan 2020 at 20:54,
    Nathanaël Blanchet <blanc...@abes.fr> wrote:
  
  

  Hello Roy
  
  Le 21/11/2019 à 13:57, Roy Golan a écrit :
  
  

  
  
  
  
On Thu, 21 Nov
  2019 at 08:48, Roy Golan <rgo...@redhat.com>
  wrote:


  




  On Wed, 20
Nov 2019 at 09:49, Nathanaël Blanchet <blanc...@abes.fr>
wrote:
  
  

  
  
  Le 19/11/2019 à 19:23, Nathanaël
Blanchet a écrit :
  
  


Le 19/11/2019 à 13:43, Roy Golan a
  écrit :


  




  On
Tue, 19 Nov 2019 at 14:34,
    Nathanaël Blanchet <blanc...@abes.fr>
wrote:
  
  

  Le 19/11/2019 à 08:55,
Roy Golan a écrit :
  
  
oc get -o json clusterversion 
  
  This is the output of the
previous failed deployment,
I'll give a try to a newer
one when I'll have a minute
to test 
  

  

  

Without changing nothing with
  template,  I gave a new try and...
  nothing works anymore now, none of
  provided IPs can be pingued : dial tcp
  10.34.212.51:6443:
  connect: no route to host", so none of
  masters can be provisonned by
  bootstrap.

I tried with the latest rhcos and
  latest ovirt 4.3.7, it is the same.
  Obviously something changed since my
  first attempt 12 days ago... is your
  docker image for openshift-installer
  up to date?

[ovirt-users] Re: terraform integration

2020-02-21 Thread Nathanaël Blanchet

Hello,

It seems that the work for including ovirt as a provider in the master 
branch of openshift installer has been done. I compiled the master code 
and ovirt does appear in the survey.
I don't have much time to test it for now but is it operationnal? If 
yes, I will prior to have a look to it.


Thanks.

Le 06/01/2020 à 21:30, Roy Golan a écrit :



The merge window is now open for the masters branches of the various 
origin components.
Post merge there should be an OKD release - this is not under my 
control, but when it will be available I'll let you know.


On Mon, 6 Jan 2020 at 20:54, Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Hello Roy

Le 21/11/2019 à 13:57, Roy Golan a écrit :



On Thu, 21 Nov 2019 at 08:48, Roy Golan mailto:rgo...@redhat.com>> wrote:



On Wed, 20 Nov 2019 at 09:49, Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:


Le 19/11/2019 à 19:23, Nathanaël Blanchet a écrit :



Le 19/11/2019 à 13:43, Roy Golan a écrit :



On Tue, 19 Nov 2019 at 14:34, Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Le 19/11/2019 à 08:55, Roy Golan a écrit :

oc get -o json clusterversion


This is the output of the previous failed
deployment, I'll give a try to a newer one when
I'll have a minute to test


Without changing nothing with template,  I gave a new
try and... nothing works anymore now, none of provided
IPs can be pingued : dial tcp 10.34.212.51:6443
<http://10.34.212.51:6443>: connect: no route to host",
so none of masters can be provisonned by bootstrap.

I tried with the latest rhcos and latest ovirt 4.3.7, it
is the same. Obviously something changed since my first
attempt 12 days ago... is your docker image for
openshift-installer up to date?

Are you still able to your side to deploy a valid cluster ?


I investigated looking at bootstrap logs (attached) and
it seems that every containers die immediately after been
started.

Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.60107571 + UTC m=+0.794838407 container init
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623197173 + UTC m=+0.816959853 container
start
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623814258 + UTC m=+0.817576965 container
attach
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:34 localhost systemd[1]:

libpod-446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603.scope:
Consumed 814ms CPU time
Nov 20 07:02:34 localhost podman[2024]: 2019-11-20
07:02:34.100569998 + UTC m=+1.294332779 container
died
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:35 localhost podman[2024]: 2019-11-20
07:02:35.138523102 + UTC m=+2.332285844 container
remove
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)

and this:

Nov 20 07:04:16 localhost hyperkube[1909]: E1120
07:04:16.489527    1909 remote_runtime.go:200]
CreateContainer in sandbox
"58f2062aa7b6a5b2bdd6b9cf7b41a9f94ca2b30ad5a20e4fa4dec8a9b82f05e5"
from runtime service failed: rpc error: code = Unknown
desc = container create failed: container_linux.go:345:
starting container process caused "exec: \"runtimecfg\":
executable file not found in $PATH"
Nov 20 07:04:16 loc

[ovirt-users] Re: paused vm's will not resume

2020-02-18 Thread Nathanaël Blanchet

This default credentials may help you for virsh operations:

login: vdsm@ovirt

password: shibboleth

Le 18/02/2020 à 19:45, eev...@digitaldatatechs.com a écrit :

When I used virsh it always asks for credentials. I used the saslpasswd and 
gave a user a password to get it to work, but it still failed. I had copies of 
my disks and had to import them to get it up and running again. I will 
definitely try this if it crops up again.
I hope I never have to.
Thanks for your help.

Eric Evans
Digital Data Services LLC.
304.660.9080


-Original Message-
From: Nir Soffer 
Sent: Tuesday, February 18, 2020 12:00 PM
To: eev...@digitaldatatechs.com
Cc: users 
Subject: [ovirt-users] Re: paused vm's will not resume

On Tue, Feb 18, 2020 at 6:56 AM  wrote:

I have 2 vm's, which are the most important in my world, that paused and will 
not resume. I have googled this to death but no solution. It stated a lack of 
space but none of the drives on my hosts are using more than 30% or there space 
and these 2 have ran on kvm host for several years and always had at least 50% 
free space.

Can you share the VM XML of these VMs?

The easier way is:

# virsh -r list

# virsh -r dumpxml vm-id

Also having vdsm.log from the time the vm was paused would help to understand 
why the vm was paused.

For block storage, paused vms are expected to be resumed once the vm disk is 
extended, or if the vm paused because storage was not accessible temporarily, 
once the storage becomes accessible again.

For file based storage, we don't support yet resuming paused vms.

Nir


I like ovirt and want to use it but I cannot tolerate the down time. If I 
cannot get this resolved, I'm going back to kvm hosts. I am pulling my hair out 
here.
If anyone can help with this issue, please let me know.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org Privacy
Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JBXNV3WT
2W72I2E7EXM2KY4YN37STIMC/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KFU4CMDLWBPARNOI2GVXNI62E7YPT4R2/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JRBRYRWDG5XLKVA4MRM2UANMXYHXENG5/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/T2MXLVQDDUZZAUQ6SFYXHR7M5O3W5F5R/


[ovirt-users] Re: Ovirt backup

2020-01-20 Thread Nathanaël Blanchet


Le 19/01/2020 à 18:38, Jayme a écrit :
The biggest problem with these tools is that they are very 
inefficient.  To work they snapshot the VM then clone the snapshot 
into a new VM, back it up then delete.  This takes a lot of space and 
time.


vProtect and some other enterprise backup software snapshot the VM and 
stream the snapshot from the API without needing to clone or using a 
proxy VM.
At the same time, this workflow is the one recommended by the ovirt team 
(https://www.ovirt.org/develop/release-management/features/storage/backup-restore-api-integration.html). 
If it is no effecient enough, ovirt team should update the process and 
advice users of a better practice for vm backup in current/future ovirt 
4.3/4.4.
The new version of vProtect even bypasses the API (because it's slow) 
and now supports streaming over SSH directly from the host.  This is 
the ideal solution for oVirt VM backups imo, but I don't know if any 
free tool exists that can offer the same functionality.


On Sun, Jan 19, 2020 at 1:03 PM Torsten Stolpmann 
mailto:torsten.stolpm...@verit.de>> wrote:


I am still using https://github.com/wefixit-AT/oVirtBackup but since
support for the v3 API will be removed with oVirt 4.4 it will stop
working with this release. For this reason I can no longer
recommend it
but it served me well the past few years.

There is also https://github.com/jb-alvarado/ovirt-vm-backup which
has
similar functionality but I have yet no first-hand experience with
this.

Hope this helps.

Torsten

On 19.01.2020 10:05, Nazan CENGİZ wrote:
> Hi all,
>
>
> I want to back up Ovirt for free. Is there a script, project or
tool
> that you can recommend for this?
>
>
> Is there a project that you can test, both backup and restore
process
> can work properly?
>
>
> Best Regards,
>
> Nazan.
>
>
>
> <http://www.havelsan.com.tr>
> **Nazan CENGİZ
> AR-GE MÜHENDİSİ
> Mustafa Kemal Mahallesi 2120 Cad. No:39 06510 Çankaya Ankara TÜRKİYE
>       +90 312 219 57 87               +90 312 219 57 97
>
> YASAL UYARI: Bu elektronik posta işbu linki kullanarak
ulaşabileceğiniz
> Koşul ve Şartlar dokümanına tabidir.
> <http://havelsan.com.tr/tr/news/e-posta-yasal-uyari>
> LEGAL NOTICE: This e-mail is subject to the Terms and Conditions
> document which can be accessed with this link.
> <http://havelsan.com.tr/tr/news/e-posta-yasal-uyari>
>       Lütfen gerekmedikçe bu sayfa ve eklerini yazdırmayınız /
Please
> consider the environment before printing this email
>
>
>
> ___
> Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
> To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
> List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/G56O76VB5WO3MV2URL4OH3KNZMQRSKU4/
>
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/2LGGH7UEC3RBNELT57YF7255FYORSMGZ/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/H6JDPEBGWJY3KDRIKV2MJSJB64ZPZ3FS/


--
Nathanaël Blanchet

Supervision réseau
SIRE
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZSR6JQTJ5MYKC7AS4CZXNW33MQG6UOPW/


[ovirt-users] Re: terraform integration

2020-01-06 Thread Nathanaël Blanchet

Hello Roy

Le 21/11/2019 à 13:57, Roy Golan a écrit :



On Thu, 21 Nov 2019 at 08:48, Roy Golan <mailto:rgo...@redhat.com>> wrote:




On Wed, 20 Nov 2019 at 09:49, Nathanaël Blanchet mailto:blanc...@abes.fr>> wrote:


Le 19/11/2019 à 19:23, Nathanaël Blanchet a écrit :



Le 19/11/2019 à 13:43, Roy Golan a écrit :



On Tue, 19 Nov 2019 at 14:34, Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Le 19/11/2019 à 08:55, Roy Golan a écrit :

oc get -o json clusterversion


This is the output of the previous failed deployment,
I'll give a try to a newer one when I'll have a minute
to test


Without changing nothing with template,  I gave a new try
and... nothing works anymore now, none of provided IPs can be
pingued : dial tcp 10.34.212.51:6443
<http://10.34.212.51:6443>: connect: no route to host", so
none of masters can be provisonned by bootstrap.

I tried with the latest rhcos and latest ovirt 4.3.7, it is
the same. Obviously something changed since my first attempt
12 days ago... is your docker image for openshift-installer
up to date?

Are you still able to your side to deploy a valid cluster ?


I investigated looking at bootstrap logs (attached) and it
seems that every containers die immediately after been started.

Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.60107571 + UTC m=+0.794838407 container init
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623197173 + UTC m=+0.816959853 container start
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623814258 + UTC m=+0.817576965 container attach
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:34 localhost systemd[1]:

libpod-446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603.scope:
Consumed 814ms CPU time
Nov 20 07:02:34 localhost podman[2024]: 2019-11-20
07:02:34.100569998 + UTC m=+1.294332779 container died
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:35 localhost podman[2024]: 2019-11-20
07:02:35.138523102 + UTC m=+2.332285844 container remove
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)

and this:

Nov 20 07:04:16 localhost hyperkube[1909]: E1120
07:04:16.489527    1909 remote_runtime.go:200] CreateContainer
in sandbox
"58f2062aa7b6a5b2bdd6b9cf7b41a9f94ca2b30ad5a20e4fa4dec8a9b82f05e5"
from runtime service failed: rpc error: code = Unknown desc =
container create failed: container_linux.go:345: starting
container process caused "exec: \"runtimecfg\": executable
file not found in $PATH"
Nov 20 07:04:16 localhost hyperkube[1909]: E1120
07:04:16.489714    1909 kuberuntime_manager.go:783] init
container start failed: CreateContainerError: container create
failed: container_linux.go:345: starting container process
caused "exec: \"runtimecfg\": executable file not found in $PATH"

What do you think about this?


I'm seeing the same now, checking...


Because of the move upstream to release OKD the release-image that 
comes with the installer I gave you are no longer valid.


I need to prepare an installer version with the preview of OKD, you 
can find the details here 
https://mobile.twitter.com/smarterclayton/status/1196477646885965824
I tested your last openshift-installer container on quay.io, but the 
ovirt provider is not available anymore. Will ovirt be supported as an 
OKD 4.2 iaas provider ?





(do I need to use the terraform-workers tag instead of
latest?)

docker pullquay.io

[ovirt-users] recommandations for running ovirt playbooks into awx/tower

2019-12-26 Thread Nathanaël Blanchet
For those who want to run ovirt playbooks/dynamic inventories in a full 
Python3 awx/tower environment without any issue, you should consider 
this important point (as ovirt playbooks need to run with a local 
connection and with specific venv):


https://github.com/ansible/awx/issues/3267

"(...) make sure any host with |ansible_connection: local| /also/ 
specifies |ansible_python_interpreter: '{{ ansible_playbook_python }}'|."


my awx local inventory looks like this:

---
ansible_ssh_user: root
ansible_python_interpreter: '{{ ansible_playbook_python }}'

Without this, awx will run playbook with the local (default OS one) 
python binary instead of the venv one that must contain the nss/openssl 
re-compiled pycurl.


If you aim to use awx-rpm (https://awx.wiki/installation)

 * only el7 RPMs with default local py27, so consider the precedent point
 * create venv in the default venv path
   /opt/rh/rh-python36/root/usr/bin/awx-create-venv -n py36
 * compile pycurl with nss support :
   yum install -y make gcc redhat-rpm-config python3-devel
   libcurl-devel libxml2-devel openssl-devel
   exportPYCURL_SSL_LIBRARY=nss;pip install pycurl --compile --no-cache-dir
 * Install ovirtsdk4 dependencies:
   pip install ansible ovirt-engine-sdk-python psutil
 * venv become available into templates/inventory table

If you aim to use regular awx with el8 containers 
(https://github.com/ansible/awx/blob/devel/INSTALL.md#Docker-Compose) :


 * local python is already 3.6, so no issue with before
 * before launching installer:
   sed -i
   
'/project_data_dir/c\project_data_dir=/var/lib/awx/projects'installer/inventory
   sed -i
   '/custom_venv_dir/c\custom_venv_dir=/opt/my-envs'installer/inventory
 * create a venv into the awx_container
   docker exec-it awx_web bash
   yum install -y make gcc redhat-rpm-config python3-devel
   libcurl-devel libxml2-devel openssl-devel
   python3 -m venv /opt/my-envs/py36
 * compile pycurl with openssl support :
   source/opt/my-envs/py36/bin/activate
   exportPYCURL_SSL_LIBRARY=openssl;pip install pycurl --compile
   --no-cache-dir
 * Install ovirtsdk4 dependencies:
   pip install ansible ovirt-engine-sdk-python psutil
 * So as to get venv droplist availaible into templates/inventory tab
   settings -> system -> custom environment paths -> /opt/my-envs and
   login/logout.




Le 03/12/2019 à 04:07, Guillaume Pavese a écrit :
My problem was that I did not fully follow your directions, and had 
not pip installed ovirt-engine-sdk-python in the virtualenv.

Inventory is syncing now in awx.

Thanks for the help!


Guillaume Pavese
IngénieurSystèmeet Réseau
Interactiv-Group


On Fri, Nov 29, 2019 at 8:07 PM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


try if you can get a result with plain ovirt4.py execution:

cd /tmp

rsync -av

/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
.

cat ovirt.ini
[ovirt]
ovirt_url = https://engine_fqdn/ovirt-engine/api
ovirt_username = admin@internal
ovirt_password = passwd

./ovirt4.py


Le 29/11/2019 à 09:57, Guillaume Pavese a écrit :

Hi,

I use awx rpm from awx.wiki and followed your directions to
create a python2 venv with ansible 2.9.1 and built pycurl with
nss, however syncing the inventory still fails :

stderr:
ansible-inventory 2.9.1
  config file = None
  configured module search path =
[u'/var/lib/awx/.ansible/plugins/modules',
u'/usr/share/ansible/plugins/modules']
  ansible python module location =
/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible
  executable location =
/var/lib/awx/venv/ovirt-p2/bin/ansible-inventory
  python version = 2.7.5 (default, Aug  7 2019, 00:51:29) [GCC
4.8.5 20150623 (Red Hat 4.8.5-39)]
No config file found; using defaults
setting up inventory plugins
[WARNING]:  * Failed to parse
/opt/rh/rh-python36/root/usr/lib/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py with script plugin:
Inventory script
(/opt/rh/rh-python36/root/usr/lib/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py) had an execution error:

  File

"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/inventory/manager.py",
line 280, in parse_source
    plugin.parse(self._inventory, self._loader, source, cache=cache)
  File

"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/plugins/inventory/script.py",
line 161, in parse
    raise AnsibleParserError(to_native(e))

[WARNING]: Unable to parse
/opt/rh/rh-python36/root/usr/lib/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py as an inventory source

Guillaume Pavese
IngénieurSystèmeet Réseau
Interactiv-Group


On Fri, Nov 29, 2019 at 4:51 AM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

give a try to https://awx.wiki/ ba

[ovirt-users] Fwd: AWX and error using ovirt as an inventory source

2019-12-18 Thread Nathanaël Blanchet
Hello Ondra what do you think about this question? 
ovirt4.py may need some modifications to get required IPs/hostnames when 
multiple vm has multiple interfaces ? 
Personalized hack works for me but I have to modify the file each time I 
upgrade AWX. 

De: "Gianluca Cecchi"  
À: "Nathanaël Blanchet"  
Cc: "users"  
Envoyé: Mercredi 18 Décembre 2019 17:21:40 
Objet: Re: [ovirt-users] AWX and error using ovirt as an inventory source 

On Thu, Nov 28, 2019 at 4:59 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 





Hello gianluca, 



[snip] 

BQ_BEGIN



PS: Something else that may help, try to hack the ovirt4.py with ansible_host 
if you want to call the hosts into playbook by the hostname and not the first 
IP: 

vi 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
 
'affinity_labels' : [ [ http://label.name/ | label.name ] for label in labels], 
## ajout NBT pour obtenir le nom de l'hote a la place de l ip 
'ansible_host' : [ http://vm.name/ | vm.name ] , 
'affinity_groups' : [ 




BQ_END

Hello, 
coming back to this PS of yours. 
in my case [ http://vm.name/ | vm.name ] is not always resolvable, so it is not 
so feasible. 
But also the default configuration of ansible_host seems quite unfortunate 
With the default configuration, I see that for VMs with 2 ips, it gets the eth1 
one, not matching the VM hostname and so the job fails because of unreachable 
host. 
So I'm trying substituting 
/var/lib/awx/venv/awx/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
 

from 
return { 
'id': [ http://vm.id/ | vm.id ] , 
'name': [ http://vm.name/ | vm.name ] , 
... 
'devices': dict( 
( [ http://device.name/ | device.name ] , [ip.address for ip in device.ips]) 
for device in devices if device.ips 
), 
'ansible_host': next((device.ips[0].address for device in devices if 
device.ips), None) 
} 

to: 
return { 
'id': [ http://vm.id/ | vm.id ] , 
'name': [ http://vm.name/ | vm.name ] , 
... 
'devices': dict( 
( [ http://device.name/ | device.name ] , [ip.address for ip in device.ips]) 
for device in devices if device.ips 
), 
'ansible_host': vm.fqdn 
} 

If I do this with my test tmp file I see that comparing output of command 

(py36) bash-4.4# ./ovirt4.py 

I have a new value for ansible_host, matching the fqdn of the VM 
But going into awx, the job continues to fail and also if I go to inventory -> 
sources and sync, even if I check all the "update options": 
OVERWRITE 
OVERWRITE VARIABLES 
UPDATE ON LAUNCH 

Still the vm contains ansible_host with the old value, matching the second 
interface and not the fqdn... 

Any suggestion? 

Gianluca 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PIMIW6HDLQ5FBTGVWW6MIKJYLXAPI5QN/


[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-12-13 Thread Nathanaël Blanchet
Okay I got it! 
container version is slightly different from awx-rpm. All happen in awx_web 
container. You must use persistent volume so as to use venv and project data 
over ephemeral container. 
You must use python 3 with ansible 2.9.x 
cd installer && vi inventory 
custom_venv_dir = /opt/my-envs 
project_data_dir = /var/lib/awx/projects 

you can run installer 
ansible-playbook -i inventory install.yml 

check mounts 
docker inspect -f "{{ .Mounts }}" awx_web 
[{bind /opt/my-envs /opt/my-envs rw true rprivate} {bind /var/lib/awx/projects 
/var/lib/awx/projects rw true rprivate}] 

Right from now, you modify the container itself, becareful data are not 
persistent along container lifecycle, so what follows is for POC. You should 
build your own container image with this wanted parameters. 
yum install -y make gcc redhat-rpm-config python3-devel libcurl-devel 
libxml2-devel 
source /opt/my-envs/py36/bin/activate 
pip install psutil 
export PYCURL_SSL_LIBRARY = openssl ; pip install pycurl --compile 
--no-cache-dir 
pip install ansible ovirt-engine-sdk-python centreonapi dnspython 

select the py36 venv into the source to sync and it should work 

De: "Gianluca Cecchi"  
À: "Guillaume Pavese"  
Cc: "Nathanaël Blanchet" , "users"  
Envoyé: Vendredi 6 Décembre 2019 13:40:45 
Objet: Re: [ovirt-users] Re: AWX and error using ovirt as an inventory source 

Actually it seems I was using the wrong container... so explaining why I got 
the not found error about /opt/my-envs/ovirt/lib ... ;-) 

I was working on ansible/awx_web:9.0.1 container, while it seems I have to work 
ansible/awx_task:9.0.1 

After doing same steps on this container I get now this kind of error at the 
end while using apparently the correct virtualenv: 

2.429 INFO Updating inventory 4: MYDC_OVIRT 
3.257 DEBUG Using base command: python /opt/my-envs/ovirt/bin/ansible-inventory 
-i 
/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
 --playbook-dir 
/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/plugins/inventory 
-v 
3.257 INFO Reading Ansible inventory source: 
/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
 
3.259 INFO Using VIRTUAL_ENV: /opt/my-envs/ovirt/ 
3.260 INFO Using PATH: 
/opt/my-envs/ovirt/bin:/var/lib/awx/venv/awx/bin:/var/lib/awx/venv/awx/bin:/var/lib/awx/venv/awx/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
3.260 INFO Using PYTHONPATH: /opt/my-envs/ovirt/lib/python2.7/site-packages: 
Traceback (most recent call last): 
File "/var/lib/awx/venv/awx/bin/awx-manage", line 11, in  
load_entry_point('awx==9.0.1.0', 'console_scripts', 'awx-manage')() 
File "/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/__init__.py", 
line 158, in manage 
execute_from_command_line(sys.argv) 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/__init__.py",
 line 381, in execute_from_command_line 
utility.execute() 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/__init__.py",
 line 375, in execute 
self.fetch_command(subcommand).run_from_argv(self.argv) 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/base.py",
 line 323, in run_from_argv 
self.execute(*args, **cmd_options) 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/base.py",
 line 364, in execute 
output = self.handle(*args, **options) 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py",
 line 1153, in handle 
raise exc 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py",
 line 1043, in handle 
venv_path=venv_path, verbosity=self.verbosity).load() 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py",
 line 214, in load 
return self.command_to_json(base_args + ['--list']) 
File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py",
 line 197, in command_to_json 
self.method, proc.returncode, stdout, stderr)) 
RuntimeError: ansible-inventory failed (rc=1) with stdout: 
stderr: 
ansible-inventory 2.9.2 
config file = /etc/ansible/ansible.cfg 
configured module search path = [u'/var/lib/awx/.ansible/plugins/modules', 
u'/usr/share/ansible/plugins/modules'] 
ansible python module location = 
/opt/my-envs/ovirt/lib/python2.7/site-packages/ansible 
executable location = /opt/my-envs/ovirt/bin/ansible-inventory 
python version = 2.7.15 (default, Oct 8 2019, 21:08:29) [GCC 8.2.1 20180905 
(Red Hat 8.2.1-3)] 
Using /etc/ansible/ansible.cfg as config file 
setting up inventory plugins 
[WARNING]: * Failed to parse /var/lib/awx/venv/awx/lib64/python3.6/site- 
packages/awx/plugins/inve

[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-12-03 Thread Nathanaël Blanchet
Great, I hope Gianluca will be able to sync with the container version! 


De: "Guillaume Pavese"  
À: "Nathanaël Blanchet"  
Cc: "Gianluca Cecchi" , "users"  
Envoyé: Mardi 3 Décembre 2019 04:07:53 
Objet: Re: [ovirt-users] Re: AWX and error using ovirt as an inventory source 

My problem was that I did not fully follow your directions, and had not pip 
installed ovirt-engine-sdk-python in the virtualenv. 
Inventory is syncing now in awx. 

Thanks for the help! 


Guillaume Pavese 
Ingénieur Système et Réseau 
Interactiv-Group 


On Fri, Nov 29, 2019 at 8:07 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 





try if you can get a result with plain ovirt4.py execution: 

cd /tmp 


rsync -av 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py
 . 

cat ovirt.ini 
[ovirt] 
ovirt_url = [ https://engine_fqdn/ovirt-engine/api | 
https://engine_fqdn/ovirt-engine/api ] 
ovirt_username = admin@internal 
ovirt_password = passwd 

./ovirt4.py 



Le 29/11/2019 à 09:57, Guillaume Pavese a écrit : 

BQ_BEGIN

Hi, 

I use awx rpm from awx.wiki and followed your directions to create a python2 
venv with ansible 2.9.1 and built pycurl with nss, however syncing the 
inventory still fails : 

stderr: 
ansible-inventory 2.9.1 
config file = None 
configured module search path = [u'/var/lib/awx/.ansible/plugins/modules', 
u'/usr/share/ansible/plugins/modules'] 
ansible python module location = 
/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible 
executable location = /var/lib/awx/venv/ovirt-p2/bin/ansible-inventory 
python version = 2.7.5 (default, Aug 7 2019, 00:51:29) [GCC 4.8.5 20150623 (Red 
Hat 4.8.5-39)] 
No config file found; using defaults 
setting up inventory plugins 
[WARNING]: * Failed to parse /opt/rh/rh-python36/root/usr/lib/python3.6/site- 
packages/awx/plugins/inventory/ovirt4.py with script plugin: Inventory script 
(/opt/rh/rh-python36/root/usr/lib/python3.6/site- 
packages/awx/plugins/inventory/ovirt4.py) had an execution error: 

File 
"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/inventory/manager.py",
 line 280, in parse_source 
plugin.parse(self._inventory, self._loader, source, cache=cache) 
File 
"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/plugins/inventory/script.py",
 line 161, in parse 
raise AnsibleParserError(to_native(e)) 

[WARNING]: Unable to parse /opt/rh/rh-python36/root/usr/lib/python3.6/site- 
packages/awx/plugins/inventory/ovirt4.py as an inventory source 

Guillaume Pavese 
Ingénieur Système et Réseau 
Interactiv-Group 


On Fri, Nov 29, 2019 at 4:51 AM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 

BQ_BEGIN

give a try to [ https://awx.wiki/ | https://awx.wiki/ ] based on rpms and not 
docker if you want to test this feature, it rocks. 


De: "Gianluca Cecchi" < [ mailto:gianluca.cec...@gmail.com | 
gianluca.cec...@gmail.com ] > 
À: "Nathanaël Blanchet" < [ mailto:blanc...@abes.fr | blanc...@abes.fr ] > 
Cc: "users" < [ mailto:users@ovirt.org | users@ovirt.org ] > 
Envoyé: Jeudi 28 Novembre 2019 19:17:12 
Objet: Re: [ovirt-users] AWX and error using ovirt as an inventory source 

On Thu, Nov 28, 2019 at 5:33 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 

BQ_BEGIN




Le 28/11/2019 à 17:15, Gianluca Cecchi a écrit : 

BQ_BEGIN

On Thu, Nov 28, 2019 at 4:59 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 

BQ_BEGIN



Hello gianluca, 

I reported this issue a long time ago (march of 19) in an unofficial rpm awx 
project 


[ https://github.com/MrMEEE/awx-build/issues/72 | 
https://github.com/MrMEEE/awx-build/issues/72 ] 




But I see that it is marked as closed 

BQ_END
It's marked as closed for the unofficial RPM project only, not with the regular 
container deployment. 

BQ_BEGIN


BQ_BEGIN



All related RHV/ovirt stuff (not only dynamic inventory, but all ovirt* ansible 
module) fail because of the version of pycurl (worked before 7.19) 

BQ_END

You mean inside awx container, correct? 
See below my comments, as I know almost nothing about venv concepts... sorry 

BQ_BEGIN



What you need to do is create a py2.x venv then recompile latest pycurl with 
nss support like this: 

* # /opt/rh/rh-python36/root/usr/bin/awx-create-venv (-e 
/var/lib/awx/venv/) -n ovirt 

BQ_END

I have to run this inside awx container as user root? Can you explain the 
syntax? I get error because of the parenthesis... 

BQ_END


sure inside the container, parenthesis are the default parameters so you can 
use an other path: 

/opt/rh/rh-python36/root/usr/bin/awx-create-venv -n ovirt -p 2 

BQ_BEGIN



BQ_END


BQ_END

In my awx container I don't have 
/opt/rh/rh-python36/root/usr/bin/awx-create-venv and don't have awx-create-venv 
at all in

[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-11-29 Thread Nathanaël Blanchet

try if you can get a result with plain ovirt4.py execution:

cd /tmp

rsync -av 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py 
.


cat ovirt.ini
[ovirt]
ovirt_url = https://engine_fqdn/ovirt-engine/api
ovirt_username = admin@internal
ovirt_password = passwd

./ovirt4.py


Le 29/11/2019 à 09:57, Guillaume Pavese a écrit :

Hi,

I use awx rpm from awx.wiki and followed your directions to create a 
python2 venv with ansible 2.9.1 and built pycurl with nss, however 
syncing the inventory still fails :


stderr:
ansible-inventory 2.9.1
  config file = None
  configured module search path = 
[u'/var/lib/awx/.ansible/plugins/modules', 
u'/usr/share/ansible/plugins/modules']
  ansible python module location = 
/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible

  executable location = /var/lib/awx/venv/ovirt-p2/bin/ansible-inventory
  python version = 2.7.5 (default, Aug  7 2019, 00:51:29) [GCC 4.8.5 
20150623 (Red Hat 4.8.5-39)]

No config file found; using defaults
setting up inventory plugins
[WARNING]:  * Failed to parse 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py with script plugin: Inventory 
script

(/opt/rh/rh-python36/root/usr/lib/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py) had an execution error:

  File 
"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/inventory/manager.py", 
line 280, in parse_source

    plugin.parse(self._inventory, self._loader, source, cache=cache)
  File 
"/var/lib/awx/venv/ovirt-p2/lib/python2.7/site-packages/ansible/plugins/inventory/script.py", 
line 161, in parse

    raise AnsibleParserError(to_native(e))

[WARNING]: Unable to parse 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-

packages/awx/plugins/inventory/ovirt4.py as an inventory source

Guillaume Pavese
IngénieurSystèmeet Réseau
Interactiv-Group


On Fri, Nov 29, 2019 at 4:51 AM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


give a try to https://awx.wiki/ based on rpms and not docker if
you want to test this feature, it rocks.


*De: *"Gianluca Cecchi" mailto:gianluca.cec...@gmail.com>>
*À: *"Nathanaël Blanchet" mailto:blanc...@abes.fr>>
*Cc: *"users" mailto:users@ovirt.org>>
*Envoyé: *Jeudi 28 Novembre 2019 19:17:12
*Objet: *Re: [ovirt-users] AWX and error using ovirt as an
inventory source

On Thu, Nov 28, 2019 at 5:33 PM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:


Le 28/11/2019 à 17:15, Gianluca Cecchi a écrit :

On Thu, Nov 28, 2019 at 4:59 PM Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Hello gianluca,

I reported this issue a long time ago (march of 19) in
an unofficial rpm awx project

https://github.com/MrMEEE/awx-build/issues/72


But I see that it is marked as closed

It's marked as closed for the unofficial RPM project only, not
with the regular container deployment.

All related RHV/ovirt stuff (not only dynamic
inventory, but all ovirt* ansible module) fail because
of the version of pycurl (worked before 7.19)

You mean inside awx container, correct?
See below my comments, as I know almost nothing about venv
concepts... sorry

What you need to do is create a py2.x venv then
recompile latest pycurl with nss support like this:

  * # /opt/rh/rh-python36/root/usr/bin/awx-create-venv
(-e /var/lib/awx/venv/) -n ovirt

I have to run this inside awx container as user root? Can
you explain the syntax? I get error because of the
parenthesis...

sure inside the container, parenthesis are the default
parameters so you can use an other path:

/opt/rh/rh-python36/root/usr/bin/awx-create-venv -n ovirt -p 2


In my awx container I don't
have  /opt/rh/rh-python36/root/usr/bin/awx-create-venv and don't
have awx-create-venv at all in any path.
Not in container based on image ansible/awx_task:9.0.1 nor in
container based on image ansible/awx_web:9.0.1

Gianluca

___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/4MSEW7LVC4QOTANHO7ZVTBSJ7V2DQP4U/


Ce message et toutes les pièces jointes (ci-aprè

[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-11-28 Thread Nathanaël Blanchet
give a try to [ https://awx.wiki/ | https://awx.wiki/ ] based on rpms and not 
docker if you want to test this feature, it rocks. 


De: "Gianluca Cecchi"  
À: "Nathanaël Blanchet"  
Cc: "users"  
Envoyé: Jeudi 28 Novembre 2019 19:17:12 
Objet: Re: [ovirt-users] AWX and error using ovirt as an inventory source 

On Thu, Nov 28, 2019 at 5:33 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 






Le 28/11/2019 à 17:15, Gianluca Cecchi a écrit : 

BQ_BEGIN

On Thu, Nov 28, 2019 at 4:59 PM Nathanaël Blanchet < [ mailto:blanc...@abes.fr 
| blanc...@abes.fr ] > wrote: 

BQ_BEGIN



Hello gianluca, 

I reported this issue a long time ago (march of 19) in an unofficial rpm awx 
project 


[ https://github.com/MrMEEE/awx-build/issues/72 | 
https://github.com/MrMEEE/awx-build/issues/72 ] 




But I see that it is marked as closed 

BQ_END
It's marked as closed for the unofficial RPM project only, not with the regular 
container deployment. 

BQ_BEGIN


BQ_BEGIN



All related RHV/ovirt stuff (not only dynamic inventory, but all ovirt* ansible 
module) fail because of the version of pycurl (worked before 7.19) 

BQ_END

You mean inside awx container, correct? 
See below my comments, as I know almost nothing about venv concepts... sorry 

BQ_BEGIN



What you need to do is create a py2.x venv then recompile latest pycurl with 
nss support like this: 

* # /opt/rh/rh-python36/root/usr/bin/awx-create-venv (-e 
/var/lib/awx/venv/) -n ovirt 

BQ_END

I have to run this inside awx container as user root? Can you explain the 
syntax? I get error because of the parenthesis... 

BQ_END


sure inside the container, parenthesis are the default parameters so you can 
use an other path: 

/opt/rh/rh-python36/root/usr/bin/awx-create-venv -n ovirt -p 2 

BQ_BEGIN



BQ_END


BQ_END

In my awx container I don't have 
/opt/rh/rh-python36/root/usr/bin/awx-create-venv and don't have awx-create-venv 
at all in any path. 
Not in container based on image ansible/awx_task:9.0.1 nor in container based 
on image ansible/awx_web:9.0.1 

Gianluca 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4MSEW7LVC4QOTANHO7ZVTBSJ7V2DQP4U/


[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-11-28 Thread Nathanaël Blanchet


Le 28/11/2019 à 17:15, Gianluca Cecchi a écrit :
On Thu, Nov 28, 2019 at 4:59 PM Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Hello gianluca,

I reported this issue a long time ago (march of 19) in an
unofficial rpm awx project

https://github.com/MrMEEE/awx-build/issues/72


But I see that it is marked as closed
It's marked as closed for the unofficial RPM project only, not with the 
regular container deployment.


All related RHV/ovirt stuff (not only dynamic inventory, but all
ovirt* ansible module) fail because of the version of pycurl
(worked before 7.19)

You mean inside awx container, correct?
See below my comments, as I know almost nothing about venv concepts... 
sorry


What you need to do is create a py2.x venv then recompile latest
pycurl with nss support like this:

  * # /opt/rh/rh-python36/root/usr/bin/awx-create-venv (-e
/var/lib/awx/venv/) -n ovirt

I have to run this inside awx container as user root? Can you explain 
the syntax? I get error because of the parenthesis...


sure inside the container, parenthesis are the default parameters so you 
can use an other path:


/opt/rh/rh-python36/root/usr/bin/awx-create-venv -n ovirt -p 2


  * source /var/lib/awx/venv/ovirt/bin/activate

as root correct? and I should source the just created venv, correct?

yes


  * # (ovirt) export PYCURL_SSL_LIBRARY=nss; pip install pycurl
--compile --no-cache-dir

I presume (ovirt) is a sort of prompt of the venv

yes
Will the settings preserved across reboot of the server hosting the 
container?

the setting is inside the container


  * choose this venv instead of the regular in your inventory page
and you'll be able to sync

I don't see in awx an option to specify a venv or another...


You may need to create a second venv so as the drop down menu to be present.



PS: Something else that may help, try to hack the ovirt4.py with
ansible_host if you want to call the hosts into playbook by the
hostname and not the first IP:

vi

/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py

'affinity_labels': [label.name <http://label.name> forlabelinlabels],
## ajout NBT pour obtenir le nom de l'hote a la place de l ip
'ansible_host': vm.name <http://vm.name>,
'affinity_groups': [


I will investigate, thanks.
Gianluca


--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/THLWR2HQWZJAM336DTN6MLKBO26ZEJKZ/


[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-11-28 Thread Nathanaël Blanchet


Le 28/11/2019 à 16:59, Nathanaël Blanchet a écrit :


Hello gianluca,

I reported this issue a long time ago (march of 19) in an unofficial 
rpm awx project


https://github.com/MrMEEE/awx-build/issues/72

All related RHV/ovirt stuff (not only dynamic inventory, but all 
ovirt* ansible module) fail because of the version of pycurl (worked 
before 7.19)


What you need to do is create a py2.x venv then recompile latest 
pycurl with nss support like this:


  * # /opt/rh/rh-python36/root/usr/bin/awx-create-venv (-e
/var/lib/awx/venv/) -n ovirt


I forgot to precise python2 (some ovirt ansible module fail with py3)

# /opt/rh/rh-python36/root/usr/bin/awx-create-venv (-e 
/var/lib/awx/venv/) -n ovirt -p 2


  * source /var/lib/awx/venv/ovirt/bin/activate
  * # (ovirt) export PYCURL_SSL_LIBRARY=nss; pip install pycurl
--compile --no-cache-dir


 * # (ovirt) pip install ovirt-engine-sdk-python ansible psutil
   python-memcached


  * choose this venv instead of the regular in your inventory page and
you'll be able to sync

PS: Something else that may help, try to hack the ovirt4.py with 
ansible_host if you want to call the hosts into playbook by the 
hostname and not the first IP:


vi 
/opt/rh/rh-python36/root/usr/lib/python3.6/site-packages/awx/plugins/inventory/ovirt4.py


'affinity_labels': [label.name forlabelinlabels],
## ajout NBT pour obtenir le nom de l'hote a la place de l ip
'ansible_host': vm.name,
'affinity_groups': [


Le 28/11/2019 à 15:51, Gianluca Cecchi a écrit :

Hello,
I have awx 9.0.1 and ansible 2.8.5 in container of a CentOS 7.7 server.
I'm trying to use oVirt 4.3.6.7-1.el7 as a source of an inventory in 
awx but I get error when syncing


Find at bottom below the error messages.
I see that in recent past (around June this year) there were some 
problems, but they should be solved now, correct?
There was also a problem in syncing when some powered off VMs were 
present in oVirt env, but I think this solved too, correct?


Any way to replicate / test from command line of awx container?
I try some things but in command line I always get error regarding

oVirt inventory script requires ovirt-engine-sdk-python >= 4.0.0

that I think depends on not using correct command line and/or not 
setting needed env.


Thanks in advance,
Gianluca

    2.536 INFO     Updating inventory 4: MYDC_OVIRT
    3.011 INFO     Reading Ansible inventory source: 
/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/plugins/inventory/ovirt4.py

    3.013 INFO     Using VIRTUAL_ENV: /var/lib/awx/venv/ansible
    3.013 INFO     Using PATH: 
/var/lib/awx/venv/ansible/bin:/var/lib/awx/venv/awx/bin:/var/lib/awx/venv/awx/bin:/var/lib/awx/venv/awx/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    3.013 INFO     Using PYTHONPATH: 
/var/lib/awx/venv/ansible/lib/python3.6/site-packages:

Traceback (most recent call last):
  File "/var/lib/awx/venv/awx/bin/awx-manage", line 11, in 
    load_entry_point('awx==9.0.1.0', 'console_scripts', 'awx-manage')()
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/__init__.py", 
line 158, in manage

    execute_from_command_line(sys.argv)
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/__init__.py", 
line 381, in execute_from_command_line

    utility.execute()
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/__init__.py", 
line 375, in execute

    self.fetch_command(subcommand).run_from_argv(self.argv)
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/base.py", 
line 323, in run_from_argv

    self.execute(*args, **cmd_options)
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/django/core/management/base.py", 
line 364, in execute

    output = self.handle(*args, **options)
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py", 
line 1153, in handle

    raise exc
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py", 
line 1043, in handle

    venv_path=venv_path, verbosity=self.verbosity).load()
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py", 
line 214, in load

    return self.command_to_json(base_args + ['--list'])
  File 
"/var/lib/awx/venv/awx/lib64/python3.6/site-packages/awx/main/management/commands/inventory_import.py", 
line 197, in command_to_json

    self.method, proc.returncode, stdout, stderr))
RuntimeError: ansible-inventory failed (rc=1) with stdout:
stderr:
ansible-inventory 2.8.5
  config file = /etc/ansible/ansible.cfg
  configured module search path = 
['/var/lib/awx/.ansible/plugins/modules', 
'/usr/share/ansible/plugins/modules']
  ansible python module location = 
/usr/lib/python3.6/site-packages/ansible

  executable loc

[ovirt-users] Re: AWX and error using ovirt as an inventory source

2019-11-28 Thread Nathanaël Blanchet
nventory 
script

(/var/lib/awx/venv/awx/lib64/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py) had an execution error:

  File 
"/usr/lib/python3.6/site-packages/ansible/inventory/manager.py", line 
268, in parse_source

    plugin.parse(self._inventory, self._loader, source, cache=cache)
  File 
"/usr/lib/python3.6/site-packages/ansible/plugins/inventory/script.py", 
line 161, in parse

    raise AnsibleParserError(to_native(e))

 [WARNING]: Unable to parse /var/lib/awx/venv/awx/lib64/python3.6/site-
packages/awx/plugins/inventory/ovirt4.py as an inventory source

ERROR! No inventory was parsed, please check your configuration and 
options.




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DGTCAAC5DZHSKGO5YTLMJSOQO3HUCMDC/


--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AZTRIDK4UX6C2T2CW5HL5G3DFRX4Z7EX/


[ovirt-users] Re: terraform integration

2019-11-21 Thread Nathanaël Blanchet


Le 21/11/2019 à 13:57, Roy Golan a écrit :



On Thu, 21 Nov 2019 at 08:48, Roy Golan <mailto:rgo...@redhat.com>> wrote:




On Wed, 20 Nov 2019 at 09:49, Nathanaël Blanchet mailto:blanc...@abes.fr>> wrote:


Le 19/11/2019 à 19:23, Nathanaël Blanchet a écrit :



Le 19/11/2019 à 13:43, Roy Golan a écrit :



On Tue, 19 Nov 2019 at 14:34, Nathanaël Blanchet
mailto:blanc...@abes.fr>> wrote:

Le 19/11/2019 à 08:55, Roy Golan a écrit :

oc get -o json clusterversion


This is the output of the previous failed deployment,
I'll give a try to a newer one when I'll have a minute
to test


Without changing nothing with template,  I gave a new try
and... nothing works anymore now, none of provided IPs can be
pingued : dial tcp 10.34.212.51:6443
<http://10.34.212.51:6443>: connect: no route to host", so
none of masters can be provisonned by bootstrap.

I tried with the latest rhcos and latest ovirt 4.3.7, it is
the same. Obviously something changed since my first attempt
12 days ago... is your docker image for openshift-installer
up to date?

Are you still able to your side to deploy a valid cluster ?


I investigated looking at bootstrap logs (attached) and it
seems that every containers die immediately after been started.

Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.60107571 + UTC m=+0.794838407 container init
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623197173 + UTC m=+0.816959853 container start
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:33 localhost podman[2024]: 2019-11-20
07:02:33.623814258 + UTC m=+0.817576965 container attach
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:34 localhost systemd[1]:

libpod-446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603.scope:
Consumed 814ms CPU time
Nov 20 07:02:34 localhost podman[2024]: 2019-11-20
07:02:34.100569998 + UTC m=+1.294332779 container died
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)
Nov 20 07:02:35 localhost podman[2024]: 2019-11-20
07:02:35.138523102 + UTC m=+2.332285844 container remove
446dc9b7a04ff3ff4bbcfa6750e3946c084741b39707eb088c9d7ae648e35603
(image=registry.svc.ci.openshift.org/origin/release:4.3
<http://registry.svc.ci.openshift.org/origin/release:4.3>,
name=eager_cannon)

and this:

Nov 20 07:04:16 localhost hyperkube[1909]: E1120
07:04:16.489527    1909 remote_runtime.go:200] CreateContainer
in sandbox
"58f2062aa7b6a5b2bdd6b9cf7b41a9f94ca2b30ad5a20e4fa4dec8a9b82f05e5"
from runtime service failed: rpc error: code = Unknown desc =
container create failed: container_linux.go:345: starting
container process caused "exec: \"runtimecfg\": executable
file not found in $PATH"
Nov 20 07:04:16 localhost hyperkube[1909]: E1120
07:04:16.489714    1909 kuberuntime_manager.go:783] init
container start failed: CreateContainerError: container create
failed: container_linux.go:345: starting container process
caused "exec: \"runtimecfg\": executable file not found in $PATH"

What do you think about this?


I'm seeing the same now, checking...


Because of the move upstream to release OKD the release-image that 
comes with the installer I gave you are no longer valid.


I need to prepare an installer version with the preview of OKD, you 
can find the details here 
https://mobile.twitter.com/smarterclayton/status/1196477646885965824
Seems that okd4 
https://github.com/openshift/okd/releases/download/4.3.0-0.okd-2019-11-15-182656/openshift-install-linux-4.3.0-0.okd-2019-11-15-182656.tar.gz 
is a compiled binary without the ovirt installer. Can you tell where are 
sources so as to include ovirt extensions into the installer build?





   

[ovirt-users] Re: terraform integration

2019-11-19 Thread Nathanaël Blanchet


Le 19/11/2019 à 13:43, Roy Golan a écrit :



On Tue, 19 Nov 2019 at 14:34, Nathanaël Blanchet <mailto:blanc...@abes.fr>> wrote:


Le 19/11/2019 à 08:55, Roy Golan a écrit :

oc get -o json clusterversion


This is the output of the previous failed deployment, I'll give a
try to a newer one when I'll have a minute to test

Without changing nothing with template,  I gave a new try and... nothing 
works anymore now, none of provided IPs can be pingued : dial tcp 
10.34.212.51:6443: connect: no route to host", so none of masters can be 
provisonned by bootstrap.


I tried with the latest rhcos and latest ovirt 4.3.7, it is the same. 
Obviously something changed since my first attempt 12 days ago... is 
your docker image for openshift-installer up to date?


Are you still able to your side to deploy a valid cluster ?


(do I need to use the terraform-workers tag instead of latest?)

docker pullquay.io/rgolangh/openshift-installer:terraform-workers  
<http://quay.io/rgolangh/openshift-installer:terraform-workers>


[root@openshift-installer
openshift-origin-client-tools-v3.11.0-0cbc58b-linux-64bit]# ./oc
get -o json clusterversion
{
    "apiVersion": "v1",
    "items": [
    {
    "apiVersion": "config.openshift.io/v1
<http://config.openshift.io/v1>",
    "kind": "ClusterVersion",
    "metadata": {
    "creationTimestamp": "2019-11-07T12:23:06Z",
    "generation": 1,
    "name": "version",
    "namespace": "",
    "resourceVersion": "3770202",
    "selfLink":
"/apis/config.openshift.io/v1/clusterversions/version
<http://config.openshift.io/v1/clusterversions/version>",
    "uid": "77600bba-6e71-4b35-a60b-d8ee6e0f545c"
    },
    "spec": {
    "channel": "stable-4.3",
    "clusterID": "6f87b719-e563-4c0b-ab5a-1144172bc983",
    "upstream":
"https://api.openshift.com/api/upgrades_info/v1/graph;
<https://api.openshift.com/api/upgrades_info/v1/graph>
    },
    "status": {
    "availableUpdates": null,
    "conditions": [
    {
    "lastTransitionTime": "2019-11-07T12:23:12Z",
    "status": "False",
    "type": "Available"
    },
    {script
    "lastTransitionTime": "2019-11-07T12:56:15Z",
    "message": "Cluster operator
image-registry is still updating",
    "reason": "ClusterOperatorNotAvailable",
    "status": "True",
    "type": "Failing"
    },
    {
    "lastTransitionTime": "2019-11-07T12:23:12Z",
    "message": "Unable to apply
4.3.0-0.okd-2019-10-29-180250: the cluster operator image-registry
has not yet successfully rolled out",
    "reason": "ClusterOperatorNotAvailable",
    "status": "True",
    "type": "Progressing"
    },
    {
    "lastTransitionTime": "2019-11-07T12:23:12Z",
    "message": "Unable to retrieve available
updates: currently installed version 4.3.0-0.okd-2019-10-29-180250
not found in the \"stable-4.3\" channel",
    "reason": "RemoteFailed",
    "status": "False",
    "type": "RetrievedUpdates"
    }
    ],
    "desired": {
    "force": false,
    "image":

"registry.svc.ci.openshift.org/origin/release@sha256:68286e07f7d68ebc8a067389aabf38dee9f9b810c5520d6ee4593c38eb48ddc9

<http://registry.svc.ci.openshift.org/origin/release@sha256:68286e07f7d68ebc8a067389aabf38dee9f9b810c5520d6ee4593c38eb48ddc9>&q

  1   2   3   4   5   >