[ovirt-users] Re: Upload Image Error

2018-05-24 Thread Peter Harman
Ovirt is Hosted Engine and version 4.2 installed a week ago.
OS is Centos7.4 on hosted engine and hosts

Peter Harman – Systems and Safety Cordinator  | Homeyer Precision Manufacturing

[Description: C:\Users\gruether\AppData\Local\Temp\Temp1_Homeyer Logo 
(2).zip\Homeyer Logo\Homeyer Logo.jpg]

16051 State Hwy 47, Marthasville, MO 63357| E phar...@homeyertool.com 
|<mailto:phar...@homeyertool.com%20%7C> P 636.433.2244 | F 636.433.5257

From: Nir Soffer <nsof...@redhat.com>
Sent: Thursday, May 24, 2018 3:39 PM
To: Peter Harman <phar...@homeyertool.com>; Yedidyah Bar David <d...@redhat.com>
Cc: users@ovirt.org; Daniel Erez <de...@redhat.com>
Subject: Re: [ovirt-users] Upload Image Error

On Thu, May 24, 2018 at 10:57 PM Peter Harman 
<phar...@homeyertool.com<mailto:phar...@homeyertool.com>> wrote:
Ovirt Users,

What version are you running?


I am running into a strange problem with uploading images through the webUI. 
When I test the connection on an upload I get “Connection to 
ovirt-imageio-proxy service has failed. Make sure the service is installed, 
configured, and ovirt-engine certificate is registered as a valid CA in the 
browser.” I have conducted this operation on several computers using both 
chrome and firefox and ensuring the certs were loaded into the browsers.

Are you sure you import the certificate correctly info the browser?


I went to this page: 
https://ovirt.org/develop/release-management/features/infra/pki/ to find cert 
info and checked both the engine and hosts for the certificates and the 
identity of the certificates – everything seemed to match up.

This issue means that the browser refuse to communicate
with the proxy because the proxy certificate does not match
the browser certificates.

Is it possible that you changed engine fqdn and regenerated
engine certificates?

Didi, how can we regenerate all certificates to make sure everything
is configured correctly?

Or verify that the certificates in a host are correct?

Next thing I looked at was the ovirt-imageio-proxy service. I checked it and 
restarted it below is a status output from one of the failed operations:

[root@hpm-engine ~]# systemctl status ovirt-imageio-proxy
● ovirt-imageio-proxy.service - oVirt ImageIO Proxy
   Loaded: loaded (/usr/lib/systemd/system/ovirt-imageio-proxy.service; 
enabled; vendor preset: disabled)
   Active: active (running) since Thu 2018-05-24 13:25:38 CDT; 1h 13min ago
Main PID: 21239 (ovirt-imageio-p)
Tasks: 2
   CGroup: /system.slice/ovirt-imageio-proxy.service
   └─21239 /usr/bin/python /usr/bin/ovirt-imageio-proxy

May 24 13:25:38 hpm-engine.server.local systemd[1]: Starting oVirt ImageIO 
Proxy...
May 24 13:25:38 hpm-engine.server.local systemd[1]: Started oVirt ImageIO Proxy.
May 24 14:38:02 hpm-engine.server.local ovirt-imageio-proxy[21239]: 127.0.0.1 - 
- [24/May/2018 14:38:02] "PUT /tickets/ HTTP/1.1" 200 0

This means proxy is running, and engine is able to communicate
with it. Unfortunately, this does not mean that the browser is able to
communicate with the proxy.

ovirt-imageio-proxy service seems to check out. So, next step was checking out 
VDSM process output is below (NOTE: I redacted a bunch of unrelated warnings):
...
Vdsm is not related to proxy connection errors.

Did you know that you can upload using the SDK? It is also much
faster since you can upload directly to the host, instead of via the proxy.

Here is an example:
https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_disk.py

Nir
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Upload Image Error

2018-05-24 Thread Peter Harman
Ovirt Users,

I am running into a strange problem with uploading images through the webUI. 
When I test the connection on an upload I get “Connection to 
ovirt-imageio-proxy service has failed. Make sure the service is installed, 
configured, and ovirt-engine certificate is registered as a valid CA in the 
browser.” I have conducted this operation on several computers using both 
chrome and firefox and ensuring the certs were loaded into the browsers.

I went to this page: 
https://ovirt.org/develop/release-management/features/infra/pki/ to find cert 
info and checked both the engine and hosts for the certificates and the 
identity of the certificates - everything seemed to match up.

Next thing I looked at was the ovirt-imageio-proxy service. I checked it and 
restarted it below is a status output from one of the failed operations:

[root@hpm-engine ~]# systemctl status ovirt-imageio-proxy
● ovirt-imageio-proxy.service - oVirt ImageIO Proxy
   Loaded: loaded (/usr/lib/systemd/system/ovirt-imageio-proxy.service; 
enabled; vendor preset: disabled)
   Active: active (running) since Thu 2018-05-24 13:25:38 CDT; 1h 13min ago
Main PID: 21239 (ovirt-imageio-p)
Tasks: 2
   CGroup: /system.slice/ovirt-imageio-proxy.service
   └─21239 /usr/bin/python /usr/bin/ovirt-imageio-proxy

May 24 13:25:38 hpm-engine.server.local systemd[1]: Starting oVirt ImageIO 
Proxy...
May 24 13:25:38 hpm-engine.server.local systemd[1]: Started oVirt ImageIO Proxy.
May 24 14:38:02 hpm-engine.server.local ovirt-imageio-proxy[21239]: 127.0.0.1 - 
- [24/May/2018 14:38:02] "PUT /tickets/ HTTP/1.1" 200 0

ovirt-imageio-proxy service seems to check out. So, next step was checking out 
VDSM process output is below (NOTE: I redacted a bunch of unrelated warnings):

[root@mothership ~]# systemctl status vdsmd -l
● vdsmd.service - Virtual Desktop Server Manager
   Loaded: loaded (/usr/lib/systemd/system/vdsmd.service; enabled; vendor 
preset: enabled)
   Active: active (running) since Thu 2018-05-24 08:12:40 CDT; 6h ago
Main PID: 3359 (vdsmd)
Tasks: 58
   CGroup: /system.slice/vdsmd.service
   ├─3359 /usr/bin/python2 /usr/share/vdsm/vdsmd
   └─6731 /usr/libexec/ioprocess --read-pipe-fd 68 --write-pipe-fd 67 
--max-threads 10 --max-queued-requests 10

So VDSM doesn’t seem to be the issue. I changed a few settings here and there 
but mostly forget what I did (I changed it all back to defult)

Some background information - I am using /etc/hosts for all the FQDN components 
- which seems to be working well.  I checked the times to be sure the time 
matched up (I know this important for some security related issues.)

In a somewhat funny note I disabled SSL on VDSM in one attempt at the issue and 
now know why you should not do that when engine is using SSL.

Any help is appreciated. I am learning a lot and really thank everyone who 
develops Ovirt - it’s awesome.




Peter Harman - Systems and Safety Cordinator  | Homeyer Precision Manufacturing

[Description: C:\Users\gruether\AppData\Local\Temp\Temp1_Homeyer Logo 
(2).zip\Homeyer Logo\Homeyer Logo.jpg]

16051 State Hwy 47, Marthasville, MO 63357| E phar...@homeyertool.com 
|<mailto:phar...@homeyertool.com%20%7C> P 636.433.2244 | F 636.433.5257

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Shameless networking question

2018-05-23 Thread Peter Harman
Ovirt Community,

First off: thank you - these emails have helped me to get Ovirt running. I 
barely know what I am doing but learning quickly.

I am trying to do a network separation and confusing myself. I have two 
physical networks (10.10.x.x/16 and 192.168.1.x/24) my ovirt management is 
bridged on 10.10.x.x. My (currently single) Hosts have at least one physical 
NIC connecting to each network. I am trying to get to the point there the VMs 
are on the 192.168.1.x network and the 10.10.x.x network. The goal is to join 
the VMs to a AD domain on 192.168.1.x but keep access as limited as possible to 
the 10.10.x.x network.

I've been on a googlethon over the past few days and still don't understand the 
best practice - or even a working practice - to accomplish this goal.

Peter Harman - Systems and Safety Cordinator  | Homeyer Precision Manufacturing

[Description: C:\Users\gruether\AppData\Local\Temp\Temp1_Homeyer Logo 
(2).zip\Homeyer Logo\Homeyer Logo.jpg]

16051 State Hwy 47, Marthasville, MO 63357| E phar...@homeyertool.com 
|<mailto:phar...@homeyertool.com%20%7C> P 636.433.2244 | F 636.433.5257

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org


[ovirt-users] Hosted Engine dependency issue

2018-05-11 Thread Peter Harman
Hello,

I am new to Ovirt (and linux) , I successfully installed a working hosted 
engine twice but am now running into a dependency issue. I keep getting the 
below message:

Error: Package: cockpit-storaged-160-1.el7.centos.noarch (extras)
   Requires: storaged-iscsi >= 2.1.1
   Available: storaged-iscsi-2.5.2-2.el7.x86_64 
(ovirt-4.2-centos-ovirt42)
   storaged-iscsi = 2.5.2-2.el7
   Available: storaged-iscsi-2.5.2-4.el7.x86_64 (extras)
   storaged-iscsi = 2.5.2-4.el7
Error: Package: cockpit-storaged-160-1.el7.centos.noarch (extras)
   Requires: storaged >= 2.1.1
   Available: storaged-2.5.2-2.el7.x86_64 (ovirt-4.2-centos-ovirt42)
   storaged = 2.5.2-2.el7
   Available: storaged-2.5.2-4.el7.x86_64 (extras)
   storaged = 2.5.2-4.el7
Error: Package: cockpit-storaged-160-1.el7.centos.noarch (extras)
   Requires: storaged-lvm2 >= 2.1.1
   Available: storaged-lvm2-2.5.2-2.el7.x86_64 
(ovirt-4.2-centos-ovirt42)
   storaged-lvm2 = 2.5.2-2.el7
   Available: storaged-lvm2-2.5.2-4.el7.x86_64 (extras)
   storaged-lvm2 = 2.5.2-4.el7

I wiped the machine and tried again with no luck. Does anybody know what I am 
doing wrong?

Peter Harman - Systems and Safety Cordinator  | Homeyer Precision Manufacturing

[Description: C:\Users\gruether\AppData\Local\Temp\Temp1_Homeyer Logo 
(2).zip\Homeyer Logo\Homeyer Logo.jpg]

16051 State Hwy 47, Marthasville, MO 63357| E phar...@homeyertool.com 
|<mailto:phar...@homeyertool.com%20%7C> P 636.433.2244 | F 636.433.5257

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org