Re: [ovirt-users] Ovirt 4.0

[Derek Atkins]

Hi,

On Mon, January 8, 2018 9:44 am, Yaniv Kaul wrote:
> On Mon, Jan 8, 2018 at 4:27 PM, Marktvk  wrote:
>
>> Hello Correct.
>>
>> But i can not do this for a reason. I hope ovirt will bring a kvm
>> upgrade
>> for 4.0 the security issue at this moment with CPU's ( intel)
>>
>
> You could upgrade your CPU firmware and get up-to-date packages, but what
> about the new CPU types for the guests?
> There are no plans to backport the patch for them[1] to 4.0 (though I
> assume you could patch your own engine with it!).
> Y.
>
> [1] https://gerrit.ovirt.org/#/c/85998/

I've been only minimally following this discussion as I've had other
things on my plate, but I'm in a similar situation here -- I'm running 4.0
(on EL7.3) on a single host and would rather not upgrade my ovirt
infrastructure to 4.1/4.2 just to get the security fixes for these CPU
bugs.

I don't mind upgrading my host (or engine) to el7.4, provided I can
continue to use ovirt 4.0

But I don't understand what "new CPU types" would be here, or even why
they would be required, to fix these security issues.  Perhaps I need a
more basic primer about what actually needs to be patched to fix an ovirt
system against these speculative execution bugs.

Obviously the host systems need to be patched, and KVM most likely needs
to be patched.  But do I then need to patch each of my guests?  Do I need
to reconfigure anything else?

Is there a minimalist "how to" here?

-derek

>
>> I believe you most upgrade to 4.1 first, and then to 4.2.
>>
>>
>>
>> On Jan 8, 2018 6:00 AM, "Marktvk"  wrote:
>>
>> Hello,
>>
>>
>> We have now running ovirt 4.0 for a specif reason we can not upgrade to
>> the new version.
>>
>> If possible for 1 time to upgrade qemu-kvm to the new version for the
>> fix with processors today ?
>>
>>
>> I hope so.
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>


-- 
   Derek Atkins 617-623-3745
   de...@ihtfp.com www.ihtfp.com
   Computer and Internet Security Consultant

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0

[Yaniv Kaul]

On Mon, Jan 8, 2018 at 4:27 PM, Marktvk  wrote:

> Hello Correct.
>
> But i can not do this for a reason. I hope ovirt will bring a kvm upgrade
> for 4.0 the security issue at this moment with CPU's ( intel)
>

You could upgrade your CPU firmware and get up-to-date packages, but what
about the new CPU types for the guests?
There are no plans to backport the patch for them[1] to 4.0 (though I
assume you could patch your own engine with it!).
Y.

[1] https://gerrit.ovirt.org/#/c/85998/


> I believe you most upgrade to 4.1 first, and then to 4.2.
>
>
>
> On Jan 8, 2018 6:00 AM, "Marktvk"  wrote:
>
> Hello,
>
>
> We have now running ovirt 4.0 for a specif reason we can not upgrade to
> the new version.
>
> If possible for 1 time to upgrade qemu-kvm to the new version for the
> fix with processors today ?
>
>
> I hope so.
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0

[Marktvk]

Hello Correct.

But i can not do this for a reason. I hope ovirt will bring a kvm
upgrade for 4.0 the security issue at this moment with CPU's ( intel)
> I believe you most upgrade to 4.1 first, and then to 4.2.
>
>
>
> On Jan 8, 2018 6:00 AM, "Marktvk"  > wrote:
>
> Hello,
>
>
> We have now running ovirt 4.0 for a specif reason we can not
> upgrade to
> the new version.
>
> If possible for 1 time to upgrade qemu-kvm to the new version for the
> fix with processors today ?
>
>
> I hope so.
>
>
> ___
> Users mailing list
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users
> 
>
>

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0

[Wesley Stewart]

I believe you most upgrade to 4.1 first, and then to 4.2.



On Jan 8, 2018 6:00 AM, "Marktvk"  wrote:

Hello,


We have now running ovirt 4.0 for a specif reason we can not upgrade to
the new version.

If possible for 1 time to upgrade qemu-kvm to the new version for the
fix with processors today ?


I hope so.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[VONDRA Alain]

Hi Pavel,
You wrote that vdsm has to be patch to run without issues, but where can I find 
the patch or which lines do I have to modify, because I still have issues like 
that :

vdsm vds ERROR failed to retrieve hardware info
Traceback (most recent call last):
File "/usr/share/vdsm/API.py", line 1344, in getHardwareInfo...
vdsm[3980]: vdsm vds.dispatcher ERROR SSL error during reading data: unexpected 
eof
vdsm[3980]: vdsm vds ERROR failed to retrieve hardware info
Traceback (most recent call last):
File "/usr/share/vdsm/API.py", line 1344, in getHardwareInfo...
vdsm[3980]: vdsm vds ERROR failed to retrieve hardware info
Traceback (most recent call last):
File "/usr/share/vdsm/API.py", line 1344, in getHardwareInfo...

Thanks





Alain VONDRA
Chargé d'Exploitation et de Sécurité des Systèmes d'Information
Direction Administrative et Financière
+33 1 44 39 77 76
UNICEF France
3 rue Duguay Trouin  75006 PARIS
www.unicef.fr<http://www.unicef.fr/>

<http://www.unicef.fr>

<http://www.unicef.fr/>

<http://www.unicef.fr/><http://www.unicef.fr/>[cid:20-NOV-2017_b6f93210-e459-4491-a078-a0ee02457f91.png]<http://www.unicef.fr/>







<http://www.unicef.fr>

De : users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] De la part de 
Jorick Astrego
Envoyé : mardi 10 octobre 2017 19:41
À : users@ovirt.org
Objet : Re: [ovirt-users] Ovirt 4.0 and EL 7.4


Hi,

I've redeployed a node with 7.3 to fix this issue but got the same errors with 
ovirt 4.0.

MainThread::DEBUG::2017-10-10 
18:30:30,945::upgrade::90::upgrade::(apply_upgrade) Running upgrade 
upgrade-unified-persistence
MainThread::DEBUG::2017-10-10 18:30:30,951::libvirtconnection::160::root::(get) 
trying to connect libvirt
MainThread::ERROR::2017-10-10 
18:30:41,125::upgrade::94::upgrade::(apply_upgrade) Failed to run 
upgrade-unified-persistence
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/tool/upgrade.py", line 92, in 
apply_upgrade
upgrade.run(ns, args)
  File "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py", 
line 195, in run
run()
  File "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py", 
line 46, in run
networks, bondings = _getNetInfo()
  File "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py", 
line 132, in _getNetInfo
netinfo = NetInfo(netswitch.netinfo())
  File "/usr/lib/python2.7/site-packages/vdsm/network/netswitch.py", line 298, 
in netinfo
_netinfo = netinfo_get(compatibility=compatibility)
  File "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py", line 
109, in get
return _get(vdsmnets)
  File "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py", line 
70, in _get
libvirt_nets = libvirt.networks()
  File "/usr/lib/python2.7/site-packages/vdsm/network/libvirt.py", line 113, in 
networks
conn = libvirtconnection.get()
  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 163, 
in get
password)
  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 99, 
in open_connection
return utils.retry(libvirtOpen, timeout=10, sleep=0.2)
  File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 547, in retry
return func()
  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 105, in openAuth
if ret is None:raise libvirtError('virConnectOpenAuth() failed')
libvirtError: authentication failed: authentication failed



Oct 10 19:35:55 host1 sasldblistusers2: _sasldb_getkeyhandle has failed

Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13660: error : 
virNetSASLSessionListMechanisms:390 : internal error: cannot list SASL 
mechanisms -4 (SASL(-4): no mechanism available: Internal Error -4 in server.c 
near line 1757)
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13660: error : 
remoteDispatchAuthSaslInit:3411 : authentication failed: authentication failed
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13650: error : 
virNetSocketReadWire:1808 : End of file while reading data: Input/output error
Oct 10 19:36:20 host1 vdsm-tool: libvirt: XML-RPC error : authentication 
failed: authentication failed
Oct 10 19:36:20 host1 systemd: vdsm-network.service: control process exited, 
code=exited status=1
Oct 10 19:36:20 host1 systemd: Failed to start Virtual Desktop Server Manager 
network restoration.
Oct 10 19:36:20 host1 systemd: Dependency failed for Virtual Desktop Server 
Manager.
Oct 10 19:36:20 host1 systemd: Dependency failed for MOM instance configured 
for VDSM purposes.
Oct 10 19:36:20 host1 systemd: Job mom-vdsm.service/start failed with result 
'dependency'.
Oct 10 19:36:20 host1 systemd: Job vdsmd.service/start failed with result 
'dependency'.
Oct

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[Jorick Astrego]

Fixed it by downgrading libvirt, I had the libvirt latest repo 
"http://mirror.centos.org/centos-7/7.3.1611/virt/x86_64/libvirt-latest/; 
configured on our Katello

Working packages:

libvirt-daemon-driver-network-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-qemu-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-lxc-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-interface-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-secret-2.0.0-10.el7_3.9.x86_64
libvirt-lock-sanlock-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-kvm-2.0.0-10.el7_3.9.x86_64
libvirt-client-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-driver-storage-2.0.0-10.el7_3.9.x86_64
libvirt-daemon-config-network-2.0.0-10.el7_3.9.x86_64
libvirt-2.0.0-10.el7_3.9.x86_64
libvirt-python-2.0.0-2.el7.x86_64

On 10/10/2017 07:41 PM, Jorick Astrego wrote:
>
> Hi,
>
> I've redeployed a node with 7.3 to fix this issue but got the same 
> errors with ovirt 4.0.
>
> MainThread::DEBUG::2017-10-10
> 18:30:30,945::upgrade::90::upgrade::(apply_upgrade) Running
> upgrade upgrade-unified-persistence
> MainThread::DEBUG::2017-10-10
> 18:30:30,951::libvirtconnection::160::root::(get) trying to
> connect libvirt
> MainThread::ERROR::2017-10-10
> 18:30:41,125::upgrade::94::upgrade::(apply_upgrade) Failed to run
> upgrade-unified-persistence
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/tool/upgrade.py",
> line 92, in apply_upgrade
> upgrade.run(ns, args)
>   File
> "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
> line 195, in run
> run()
>   File
> "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
> line 46, in run
> networks, bondings = _getNetInfo()
>   File
> "/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
> line 132, in _getNetInfo
> netinfo = NetInfo(netswitch.netinfo())
>   File
> "/usr/lib/python2.7/site-packages/vdsm/network/netswitch.py", line
> 298, in netinfo
> _netinfo = netinfo_get(compatibility=compatibility)
>   File
> "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
> line 109, in get
> return _get(vdsmnets)
>   File
> "/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
> line 70, in _get
> libvirt_nets = libvirt.networks()
>   File "/usr/lib/python2.7/site-packages/vdsm/network/libvirt.py",
> line 113, in networks
> conn = libvirtconnection.get()
>   File
> "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
> 163, in get
> password)
>   File
> "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
> 99, in open_connection
> return utils.retry(libvirtOpen, timeout=10, sleep=0.2)
>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 547,
> in retry
> return func()
>   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 105,
> in openAuth
> if ret is None:raise libvirtError('virConnectOpenAuth() failed')
> libvirtError: authentication failed: authentication failed
>
>
> Oct 10 19:35:55 host1 sasldblistusers2: _sasldb_getkeyhandle has
> failed
>
> Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+:
> 13660: error : virNetSASLSessionListMechanisms:390 : internal
> error: cannot list SASL mechanisms -4 (SASL(-4): no mechanism
> available: Internal Error -4 in server.c near line 1757)
> Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+:
> 13660: error : remoteDispatchAuthSaslInit:3411 : authentication
> failed: authentication failed
> Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+:
> 13650: error : virNetSocketReadWire:1808 : End of file while
> reading data: Input/output error
> Oct 10 19:36:20 host1 vdsm-tool: libvirt: XML-RPC error :
> authentication failed: authentication failed
> Oct 10 19:36:20 host1 systemd: vdsm-network.service: control
> process exited, code=exited status=1
> Oct 10 19:36:20 host1 systemd: Failed to start Virtual Desktop
> Server Manager network restoration.
> Oct 10 19:36:20 host1 systemd: Dependency failed for Virtual
> Desktop Server Manager.
> Oct 10 19:36:20 host1 systemd: Dependency failed for MOM instance
> configured for VDSM purposes.
> Oct 10 19:36:20 host1 systemd: Job mom-vdsm.service/start failed
> with result 'dependency'.
> Oct 10 19:36:20 host1 systemd: Job vdsmd.service/start failed with
> result 'dependency'.
> Oct 10 19:36:20 host1 systemd: Unit vdsm-network.service entered
> failed state.
>   

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[Jorick Astrego]

Hi,

I've redeployed a node with 7.3 to fix this issue but got the same 
errors with ovirt 4.0.

MainThread::DEBUG::2017-10-10
18:30:30,945::upgrade::90::upgrade::(apply_upgrade) Running upgrade
upgrade-unified-persistence
MainThread::DEBUG::2017-10-10
18:30:30,951::libvirtconnection::160::root::(get) trying to connect
libvirt
MainThread::ERROR::2017-10-10
18:30:41,125::upgrade::94::upgrade::(apply_upgrade) Failed to run
upgrade-unified-persistence
Traceback (most recent call last):
   File "/usr/lib/python2.7/site-packages/vdsm/tool/upgrade.py",
line 92, in apply_upgrade
 upgrade.run(ns, args)
   File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 195, in run
 run()
   File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 46, in run
 networks, bondings = _getNetInfo()
   File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 132, in _getNetInfo
 netinfo = NetInfo(netswitch.netinfo())
   File
"/usr/lib/python2.7/site-packages/vdsm/network/netswitch.py", line
298, in netinfo
 _netinfo = netinfo_get(compatibility=compatibility)
   File
"/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
line 109, in get
 return _get(vdsmnets)
   File
"/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
line 70, in _get
 libvirt_nets = libvirt.networks()
   File "/usr/lib/python2.7/site-packages/vdsm/network/libvirt.py",
line 113, in networks
 conn = libvirtconnection.get()
   File
"/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
163, in get
 password)
   File
"/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line
99, in open_connection
 return utils.retry(libvirtOpen, timeout=10, sleep=0.2)
   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 547,
in retry
 return func()
   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 105,
in openAuth
 if ret is None:raise libvirtError('virConnectOpenAuth() failed')
libvirtError: authentication failed: authentication failed


Oct 10 19:35:55 host1 sasldblistusers2: _sasldb_getkeyhandle has failed

Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13660:
error : virNetSASLSessionListMechanisms:390 : internal error: cannot
list SASL mechanisms -4 (SASL(-4): no mechanism available: Internal
Error -4 in server.c near line 1757)
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13660:
error : remoteDispatchAuthSaslInit:3411 : authentication failed:
authentication failed
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+: 13650:
error : virNetSocketReadWire:1808 : End of file while reading data:
Input/output error
Oct 10 19:36:20 host1 vdsm-tool: libvirt: XML-RPC error :
authentication failed: authentication failed
Oct 10 19:36:20 host1 systemd: vdsm-network.service: control process
exited, code=exited status=1
Oct 10 19:36:20 host1 systemd: Failed to start Virtual Desktop
Server Manager network restoration.
Oct 10 19:36:20 host1 systemd: Dependency failed for Virtual Desktop
Server Manager.
Oct 10 19:36:20 host1 systemd: Dependency failed for MOM instance
configured for VDSM purposes.
Oct 10 19:36:20 host1 systemd: Job mom-vdsm.service/start failed
with result 'dependency'.
Oct 10 19:36:20 host1 systemd: Job vdsmd.service/start failed with
result 'dependency'.
Oct 10 19:36:20 host1 systemd: Unit vdsm-network.service entered
failed state.
Oct 10 19:36:20 host1 systemd: vdsm-network.service failed.


cat /etc/redhat-release
CentOS Linux release 7.3.1611 (Core)

cat /etc/libvirt/passwd.db
cat: /etc/libvirt/passwd.db: No such file or directory

vdsm-4.18.21-1.el7.centos.x86_64
vdsm-api-4.18.21-1.el7.centos.noarch
vdsm-xmlrpc-4.18.21-1.el7.centos.noarch
vdsm-hook-vmfex-dev-4.18.21-1.el7.centos.noarch
vdsm-cli-4.18.21-1.el7.centos.noarch
vdsm-python-4.18.21-1.el7.centos.noarch
vdsm-yajsonrpc-4.18.21-1.el7.centos.noarch
vdsm-infra-4.18.21-1.el7.centos.noarch
vdsm-jsonrpc-4.18.21-1.el7.centos.noarch

libvirt-daemon-driver-storage-scsi-3.2.0-1.el7.x86_64
libvirt-daemon-driver-storage-rbd-3.2.0-1.el7.x86_64
libvirt-daemon-driver-nodedev-3.2.0-1.el7.x86_64
libvirt-client-3.2.0-1.el7.x86_64
libvirt-python-2.0.0-2.el7.x86_64
libvirt-daemon-driver-network-3.2.0-1.el7.x86_64
libvirt-daemon-driver-storage-mpath-3.2.0-1.el7.x86_64
libvirt-daemon-driver-storage-iscsi-3.2.0-1.el7.x86_64
libvirt-daemon-driver-storage-logical-3.2.0-1.el7.x86_64
libvirt-daemon-driver-storage-3.2.0-1.el7.x86_64
libvirt-daemon-driver-secret-3.2.0-1.el7.x86_64

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[Pavel Gashev]

Full /etc/sasl2/libvirt.conf:
mech_list: digest-md5
sasldb_path: /etc/libvirt/passwd.db

Also note that VDSM has to be patched to work on 7.4 with no issues. oVirt 3.6 
and 4.1 have required fixes, but oVirt 4.0 doesn’t. 

On 04/10/2017, 18:44, "users-boun...@ovirt.org on behalf of Alan Griffiths" 
 wrote:

That didn't seem to make any difference.

I can make it work by disabling authentication

auth_unix_rw="none"  in /etc/libvirt/libvirtd.conf

On 4 October 2017 at 15:05, VONDRA Alain  wrote:
> Hi,
> Did you modify your /etc/sasl2/libvirt.conf, because the update has 
modify the way to authenticate from md5 to gssapi.
>
> If not just change this line :
> mech_list: gssapi
> to
> mech_list: digest-md5
>
> And restart services
>
> As mentioned in the libvirt.conf file :
>
> # NB, previously DIGEST-MD5 was set as the default mechanism for
> # libvirt. Per RFC 6331 this is vulnerable to many serious security
> # flaws and should no longer be used. Thus GSSAPI is now the default.
> #
> # To use GSSAPI requires that a libvirtd service principal is
> # added to the Kerberos server for each host running libvirtd.
> # This principal needs to be exported to the keytab file listed below
>
> Alain
>
>
>
> Alain VONDRA
>
> Chargé d'Exploitation et de Sécurité des Systèmes d'Information
> Direction Administrative et Financière
> +33 1 44 39 77 76
>
> UNICEF France
> 3 rue Duguay Trouin  75006
> PARIS
> www.unicef.fr
> -Message d'origine-
> De : users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] De la part 
de Alan Griffiths
> Envoyé : mercredi 4 octobre 2017 15:50
> À : Ovirt Users 
> Objet : [ovirt-users] Ovirt 4.0 and EL 7.4
>
> Hi,
>
> Is 4.0 supported/known to work on CentOS 7.4?
>
> I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and 
now vdsm-network fails to start with
>
> vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication 
failed
>
> To even get this far I had to exclude gluster packages as 7.4 introduces 
3.8 but ovirt 4.0 repo is still on 3.7.
>
> So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is 
the best ordering for getting to ovirt 4.1 and EL 7.4?
>
> Thanks,
>
> Alan
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[Alan Griffiths]

That didn't seem to make any difference.

I can make it work by disabling authentication

auth_unix_rw="none"  in /etc/libvirt/libvirtd.conf

On 4 October 2017 at 15:05, VONDRA Alain  wrote:
> Hi,
> Did you modify your /etc/sasl2/libvirt.conf, because the update has modify 
> the way to authenticate from md5 to gssapi.
>
> If not just change this line :
> mech_list: gssapi
> to
> mech_list: digest-md5
>
> And restart services
>
> As mentioned in the libvirt.conf file :
>
> # NB, previously DIGEST-MD5 was set as the default mechanism for
> # libvirt. Per RFC 6331 this is vulnerable to many serious security
> # flaws and should no longer be used. Thus GSSAPI is now the default.
> #
> # To use GSSAPI requires that a libvirtd service principal is
> # added to the Kerberos server for each host running libvirtd.
> # This principal needs to be exported to the keytab file listed below
>
> Alain
>
>
>
> Alain VONDRA
>
> Chargé d'Exploitation et de Sécurité des Systèmes d'Information
> Direction Administrative et Financière
> +33 1 44 39 77 76
>
> UNICEF France
> 3 rue Duguay Trouin  75006
> PARIS
> www.unicef.fr
> -Message d'origine-
> De : users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] De la part de 
> Alan Griffiths
> Envoyé : mercredi 4 octobre 2017 15:50
> À : Ovirt Users 
> Objet : [ovirt-users] Ovirt 4.0 and EL 7.4
>
> Hi,
>
> Is 4.0 supported/known to work on CentOS 7.4?
>
> I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and now 
> vdsm-network fails to start with
>
> vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication 
> failed
>
> To even get this far I had to exclude gluster packages as 7.4 introduces 3.8 
> but ovirt 4.0 repo is still on 3.7.
>
> So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is the 
> best ordering for getting to ovirt 4.1 and EL 7.4?
>
> Thanks,
>
> Alan
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[VONDRA Alain]

Hi,
Did you modify your /etc/sasl2/libvirt.conf, because the update has modify the 
way to authenticate from md5 to gssapi.

If not just change this line :
mech_list: gssapi
to
mech_list: digest-md5

And restart services

As mentioned in the libvirt.conf file :

# NB, previously DIGEST-MD5 was set as the default mechanism for
# libvirt. Per RFC 6331 this is vulnerable to many serious security
# flaws and should no longer be used. Thus GSSAPI is now the default.
#
# To use GSSAPI requires that a libvirtd service principal is
# added to the Kerberos server for each host running libvirtd.
# This principal needs to be exported to the keytab file listed below

Alain



Alain VONDRA

Chargé d'Exploitation et de Sécurité des Systèmes d'Information
Direction Administrative et Financière
+33 1 44 39 77 76

UNICEF France
3 rue Duguay Trouin  75006
PARIS
www.unicef.fr
-Message d'origine-
De : users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] De la part de 
Alan Griffiths
Envoyé : mercredi 4 octobre 2017 15:50
À : Ovirt Users 
Objet : [ovirt-users] Ovirt 4.0 and EL 7.4

Hi,

Is 4.0 supported/known to work on CentOS 7.4?

I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and now 
vdsm-network fails to start with

vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication failed

To even get this far I had to exclude gluster packages as 7.4 introduces 3.8 
but ovirt 4.0 repo is still on 3.7.

So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is the 
best ordering for getting to ovirt 4.1 and EL 7.4?

Thanks,

Alan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 and EL 7.4

[Sandro Bonazzola]

Il 04 Ott 2017 15:51, "Alan Griffiths"  ha scritto:

Hi,

Is 4.0 supported/known to work on CentOS 7.4?

I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4
and now vdsm-network fails to start with

vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication
failed

To even get this far I had to exclude gluster packages as 7.4
introduces 3.8 but ovirt 4.0 repo is still on 3.7.

So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What
is the best ordering for getting to ovirt 4.1 and EL 7.4?


I would suggest to first upgrade to oVirt 4.1 and then complete the update
to CentOS 7.4


Thanks,

Alan
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 repos

[Yedidyah Bar David]

On Tue, Sep 26, 2017 at 2:21 AM, Edward Clay  wrote:
> Hello, I've recently ran into a couple of problems. One that I'm noticing
> right now is that when I do a yum check-update I'm getting a 404 .
>
> yum clean all
> yum check-update
> Loaded plugins: fastestmirror, versionlock
> base
> | 3.6 kB  00:00:00
> http://mirror.centos.org/centos/7/virt/x86_64/ovirt-4.0/repodata/repomd.xml:
> [Errno 14] HTTP Error 404 - Not Found
> Trying other mirror.
> To address this issue please refer to the below knowledge base article
>
> https://access.redhat.com/articles/1320623
>
> If above article doesn't help to resolve this issue please create a bug on
> https://bugs.centos.org/
>
>
>
>  One of the configured repositories failed (CentOS-7 - oVirt 4.0),
>  and yum doesn't have enough cached data to continue. At this point the only
>  safe thing yum can do is fail. There are a few ways to work "fix" this:
>
>  1. Contact the upstream for the repository and get them to fix the
> problem.
>
>  2. Reconfigure the baseurl/etc. for the repository, to point to a
> working
> upstream. This is most often useful if you are using a newer
> distribution release than is supported by the repository (and the
> packages for the previous distribution release still work).
>
>  3. Run the command with the repository temporarily disabled
> yum --disablerepo=centos-ovirt40-release ...
>
>  4. Disable the repository permanently, so yum won't use it by default.
> Yum
> will then just ignore the repository until you permanently enable it
> again or use --enablerepo for temporary usage:
>
> yum-config-manager --disable centos-ovirt40-release
> or
> subscription-manager repos --disable=centos-ovirt40-release
>
>  5. Configure the failing repository to be skipped, if it is
> unavailable.
> Note that yum will try to contact the repo. when it runs most
> commands,
> so will have to try and fail each time (and thus. yum will be be
> much
> slower). If it is a very temporary problem though, this is often a
> nice
> compromise:
>
> yum-config-manager --save
> --setopt=centos-ovirt40-release.skip_if_unavailable=true
>
> failure: repodata/repomd.xml from centos-ovirt40-release: [Errno 256] No
> more mirrors to try.
> http://mirror.centos.org/centos/7/virt/x86_64/ovirt-4.0/repodata/repomd.xml:
> [Errno 14] HTTP Error 404 - Not Found
> I have the following two files in /etc/yum.repo.d that I believe are used to
> point me at ovirt repos.
>
> -rw-r--r--. 1 root root 1672 Feb  7  2017 ovirt-4.0-dependencies.repo
> [ovirt-4.0-epel]
> name=Extra Packages for Enterprise Linux 7 - $basearch
> #baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
> mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7=$basearch
> failovermethod=priority
> enabled=1
> includepkgs=epel-release,python-uinput,puppet,python-lockfile,python-cpopen,python-ordereddict,python-pthreading,python-inotify,python-argparse,novnc,python-ply,python-kitchen,python-daemon,python-websockify,livecd-tools,spice-html5,mom,python-IPy,python-ioprocess,ioprocess,safelease,python-paramiko,python2-paramiko,python2-crypto,libtomcrypt,libtommath,python-cheetah,python-ecdsa,python2-ecdsa,python-markdown,rubygem-rgen,ovirt-guest-agent*,userspace-rcu,protobuf-java,objenesis,python34*
> gpgcheck=1
> gpgkey=https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7
>
> [ovirt-4.0-centos-gluster37]
> name=CentOS-7 - Gluster 3.7
> baseurl=http://mirror.centos.org/centos/7/storage/$basearch/gluster-3.7/
> gpgcheck=1
> enabled=1
> gpgkey=https://raw.githubusercontent.com/CentOS-Storage-SIG/centos-release-storage-common/master/RPM-GPG-KEY-CentOS-SIG-Storage
>
> [ovirt-4.0-patternfly1-noarch-epel]
> name=Copr repo for patternfly1 owned by patternfly
> baseurl=http://copr-be.cloud.fedoraproject.org/results/patternfly/patternfly1/epel-7-$basearch/
> enabled=1
> skip_if_unavailable=1
> gpgcheck=0
>
> [virtio-win-stable]
> name=virtio-win builds roughly matching what was shipped in latest RHEL
> baseurl=http://fedorapeople.org/groups/virt/virtio-win/repo/stable
> enabled=1
> skip_if_unavailable=1
> gpgcheck=0
>
> [centos-ovirt40-release]
> name=CentOS-7 - oVirt 4.0
> baseurl=http://mirror.centos.org/centos/7/virt/$basearch/ovirt-4.0/
> gpgcheck=0
> enabled=1
>
> -rw-r--r--. 1 root root  289 Feb  7  2017 ovirt-4.0.repo
> [ovirt-4.0]
> name=Latest oVirt 4.0 Release
> #baseurl=http://resources.ovirt.org/pub/ovirt-4.0/rpm/el$releasever/
> mirrorlist=http://resources.ovirt.org/pub/yum-repo/mirrorlist-ovirt-4.0-el$releasever
> enabled=1
> skip_if_unavailable=1
> gpgcheck=1
> gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-ovirt-4.0
>
> Should the 4.0 version/repos still be available and if so what's wrong with
> my curent config?

I think this was fixed by:

https://gerrit.ovirt.org/#/q/Iecea1ed38665d7e18adedc2ca07a4cd8f8a4de65,n,z

Can you 

Re: [ovirt-users] [Ovirt 4.0] Cluster : Scheduling policy

[Doron Fediuck]

Hi Rohit,
You have 2 ways to handle this case;

1. Use pin to multiple hosts [a]. This will force the VM to run on one of
the hosts you specify (1 or 2).
If the VM is defined as highly available, it'll automatically be restarted
on the other host in case the
current one goes down.

2. Use affinity labels [b]. You would like to set a hard affinity to host
1, and a soft affinity to host 2
to ensure host 1 is chosen if it's up.

HTH,
Doron

[a]
https://www.ovirt.org/develop/release-management/features/sla/vmpinningtomultiplehosts/
[b] https://www.ovirt.org/blog/2016/07/affinity-labels/

On 3 July 2017 at 16:37, TranceWorldLogic . 
wrote:

> I got it.
> It is under configure button at top right corner.
>
> I want to do below stuff please help me how can I make it possible using
> ovirt.
> (let assume 2 host system and 1 vm)
> 1> I want to pin Host for particular VM let say host is host1.
> 2> In some circumstances let say host1 goes down in that case vm migrate
> to host2.
> 3> After sometime host1 comes up.
> 4> I want vm to migrate back to its pin host (i.e host1)
>
> Please help me.
>
> Thanks,
> ~Rohit
>
> On Mon, Jul 3, 2017 at 6:27 PM, TranceWorldLogic . <
> tranceworldlo...@gmail.com> wrote:
>
>> Hi,
>>
>> Can some one help me how to select PinToHost policy in ovirt 4.0 ?
>> I am lost in GUI.
>>
>> http://www.ovirt.org/develop/release-management/features/sla
>> /scheduler-policies/
>>
>> Thanks,
>> ~Rohit
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0] Cluster : Scheduling policy

[TranceWorldLogic .]

I got it.
It is under configure button at top right corner.

I want to do below stuff please help me how can I make it possible using
ovirt.
(let assume 2 host system and 1 vm)
1> I want to pin Host for particular VM let say host is host1.
2> In some circumstances let say host1 goes down in that case vm migrate to
host2.
3> After sometime host1 comes up.
4> I want vm to migrate back to its pin host (i.e host1)

Please help me.

Thanks,
~Rohit

On Mon, Jul 3, 2017 at 6:27 PM, TranceWorldLogic . <
tranceworldlo...@gmail.com> wrote:

> Hi,
>
> Can some one help me how to select PinToHost policy in ovirt 4.0 ?
> I am lost in GUI.
>
> http://www.ovirt.org/develop/release-management/features/
> sla/scheduler-policies/
>
> Thanks,
> ~Rohit
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0] Multiple cluster and multiple storage possible ?

[Fred Rolland]

Hi,

Storage Domains are DC entities and are not related to clusters.
Every hosts in the DC should be able to access the Storage Domain.
Once the SD is first created on one of the hosts, all the other host are
trying to connect also.

Can you mount manually from host2 ?
It maybe a firewall/network issue.

On Wed, May 3, 2017 at 7:09 PM, TranceWorldLogic . <
tranceworldlo...@gmail.com> wrote:

> Hi,
>
> I am trying to setup ovirt as shown below.
>
> DataCenter1 -Cluster1 -host1  NFS1-Data Domain
>   |
>   |-Cluster2 --host2-NFS2-Data Domain
>
>
> As you see in above case I am trying to attach both NFS partition to
> Datacente1 and I got various behaviour:
>
> 1> Once one data domain attached to data center other is failing to
> attached
> (e.g. let say NFS1-Data Domain is attached to DataCenter1 then after that
> NFS2-Data Domain failing to attach DataCenter1)
>
> 2> And sometime both data domain successfully got attached but after that
> host2 is not coming up by saying "host1 cannot access to NFS2-Data Domain
> and hence moving host1 to Non-Operational"
> host1 firewall rules are :
> 
> --
> # iptables -L
> Chain INPUT (policy ACCEPT)
> target prot opt source   destination
> ACCEPT all  --  anywhere anywhere state
> RELATED,ESTABLISHED
> ACCEPT icmp --  anywhere anywhere
> ACCEPT all  --  anywhere anywhere
> ACCEPT tcp  --  anywhere anywhere tcp dpt:54321
> ACCEPT tcp  --  anywhere anywhere tcp dpt:54322
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:sunrpc
> ACCEPT udp  --  anywhere anywhere udp
> dpt:sunrpc
> ACCEPT tcp  --  anywhere anywhere tcp dpt:ssh
> ACCEPT udp  --  anywhere anywhere udp dpt:snmp
> ACCEPT tcp  --  anywhere anywhere tcp dpt:websm
> ACCEPT tcp  --  anywhere anywhere tcp dpt:16514
> ACCEPT tcp  --  anywhere anywhere multiport
> dports rockwell-csp2
> ACCEPT tcp  --  anywhere anywhere multiport
> dports rfb:6923
> ACCEPT tcp  --  anywhere anywhere multiport
> dports 49152:49216
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:sunrpc
> ACCEPT tcp  --  anywhere anywhere tcp dpt:nfs
> ACCEPT udp  --  anywhere anywhere udp dpt:nfs
> ACCEPT udp  --  anywhere anywhere udp
> dpt:sunrpc
> ACCEPT udp  --  anywhere anywhere udp dpt:892
> ACCEPT tcp  --  anywhere anywhere tcp dpt:892
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:ospf-lite
> REJECT all  --  anywhere anywhere reject-with
> icmp-host-prohibited
>
> Chain FORWARD (policy ACCEPT)
> target prot opt source   destination
> REJECT all  --  anywhere anywhere PHYSDEV
> match ! --physdev-is-bridged reject-with icmp-host-prohibited
>
> Chain OUTPUT (policy ACCEPT)
> target prot opt source   destination
> 
> --
>
> Please help me to understand this issue.
> 1> Do ovirt support multiple-cluster to multiple-storage data domain ?
> 2> Are those firewall rules correct or wrong ?
> 3> Can host1 access storage domain created on another cluster say host2
> m/c ? (NFS technology)
>
>
> Thanks,
> ~Rohit
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0] HA VM fail to start on another Host.

[Yaniv Kaul]

On Wed, Apr 26, 2017 at 8:44 AM, knarra  wrote:

> On 04/26/2017 10:39 AM, TranceWorldLogic . wrote:
>
> Hi,
>
> VM have guest agent install but power management is disable.
>
> Just want to confirm my understanding "HA will not work without power
> management", please say yes or no.
>
> yes.
>
>
> We have Dell server and it access through idrac, I am not sure how to
> setup power management for idrac.
> I tried with drac5 and drac7 and both case while testing I got error
> saying *"*
> *Test failed: [Connection timed out, , ]" *
> But ping is working from ovirt-engine.
>
> Would you please point me to some link how to setup power management for
> DELL idrac ?
>
>
> Thanks,
> ~Rohit
>
> Hi,
>
> With out configuring powermanagement HA will not work. Below are the
> steps to setup power management. I do not have the link handy but below are
> the steps.
>

4.1 can perform VM HA without power fencing via storage leases, btw.
Y.


>
> 1) Move the host to maintenance
> 2) click on edit button -> select Power Management -> select check box
> 'Enable power management'
> 3) click on "+" button near Add fence agent
> 4) In the address field provide IPMI port which is the ip used for
> accessing your mm console of the server.
> 5) Provide USERName and password to access the console of that machine.
> 6) select the correct provider type.
> 7) click "ok".
>
> you should be able to set it up. AFAIK, drac5 / 7 needs to be used for
> dell.
>
> Thanks
> kasturi.
>
>
>
>
>
> On Tue, Apr 25, 2017 at 10:29 PM, knarra  wrote:
>
>> On 04/25/2017 08:45 PM, TranceWorldLogic . wrote:
>>
>> Hi,
>>
>> This is regarding HA VM fail to restart on other host.
>>
>> I have setup, which has 2 host in a cluster let say host1 and host2.
>> And one HA VM (with High priority), say vm1.
>> And also not storage domain is configure on host3 and it available all
>> time.
>>
>> 1> Initially vm1 was running on host2.
>> 2> Then I power OFF host2 to see whether ovirt start vm1 on host1.
>>
>> I found two result in this case as below:
>> 1> Sometime vm1 retrying to start but retrying on host2 itself.
>> 2> Sometime vm1 move in down state without retrying.
>>
>> Can anyone explain about this behaviour ? Or Is this an issue ?
>>
>> Note : I am using Ovirt 4.0.
>>
>> Thanks,
>> ~Rohit
>>
>>
>> ___
>> Users mailing 
>> listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>>
>> Hi,
>>
>>   If a host is powered off and if powermanagment is enabled engine
>> will fence the host and restarts it. During this process host residing on
>> the vm  will be shutdown and will be restarted on another node. All the
>> events can be seen in the engine UI.
>>
>> Hope you have not missed to enable power management on the hosts.
>> with out enabling power management even if the vm is marked to be Highly
>> available it will not  be.
>>
>> Second thing to check for is if the vm has guest-agent installed on
>> it. If the vm does not have guest-agent installed then it wont be restarted
>> on different host. More info on this can be found at  [1].
>>
>>  [1] https://bugzilla.redhat.com/show_bug.cgi?id=1341106#c35
>>
>> Thanks
>>
>> kasturi
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0] HA VM fail to start on another Host.

[knarra]

On 04/25/2017 08:45 PM, TranceWorldLogic . wrote:

Hi,

This is regarding HA VM fail to restart on other host.

I have setup, which has 2 host in a cluster let say host1 and host2.
And one HA VM (with High priority), say vm1.
And also not storage domain is configure on host3 and it available all 
time.


1> Initially vm1 was running on host2.
2> Then I power OFF host2 to see whether ovirt start vm1 on host1.

I found two result in this case as below:
1> Sometime vm1 retrying to start but retrying on host2 itself.
2> Sometime vm1 move in down state without retrying.

Can anyone explain about this behaviour ? Or Is this an issue ?

Note : I am using Ovirt 4.0.

Thanks,
~Rohit


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Hi,

  If a host is powered off and if powermanagment is enabled engine 
will fence the host and restarts it. During this process host residing 
on the vm  will be shutdown and will be restarted on another node. All 
the events can be seen in the engine UI.


Hope you have not missed to enable power management on the hosts.  
with out enabling power management even if the vm is marked to be Highly 
available it will not  be.


Second thing to check for is if the vm has guest-agent installed on 
it. If the vm does not have guest-agent installed then it wont be 
restarted on different host. More info on this can be found at  [1].


 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1341106#c35

Thanks

kasturi

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Yaniv Kaul]

On Fri, Apr 21, 2017 at 4:38 PM, Rafał Wojciechowski <
i...@rafalwojciechowski.pl> wrote:

> hi,
>
> my issue was related to bug in libvirtd.
> it was found in core dump by libvirt team
>
> "
>
> I'll send a patch to upstream libvirt to fix this crash.  However it can take
> a while to get it back to CentOS/RHEL.  The source of this crash is that you
> have a "tun0" network interface without IP address and that interface is
> checked before "ovirtmgmt" and it causes the crash.  You can workaround it
> by removing the "tun0" interface if it doesn't have any IP address.
>
> Pavel
>
> "
>
> workaround is working fine for me.
>

Thanks for following this!
Any idea how did you get to have the tun0 there in the first place?
Y.

Regards,
> Rafal Wojciechowski
>
> W dniu 18.04.2017 o 16:55, Rafał Wojciechowski pisze:
>
> hi,
>
> I was unable to just remove glibc and install it again - I have
> reinstalled it and rebooted the machine but it was not fixed anything
> Thanks anyway.
>
> Regards,
> Rafal Wojciechowski
> W dniu 18.04.2017 o 10:53, Yanir Quinn pisze:
>
> Hi Rafal
> not sure it relates to your issue, but i experienced a similar issue with
> segfault (running on fedora 25)
> to resolve it i had to remove glibc packages and then install them again
> (maybe a same workaround for libvirt will do the job here)
>
> Regards
> Yanir Quinn
>
> On Tue, Apr 18, 2017 at 9:32 AM, Francesco Romani 
> wrote:
>
>>
>>
>> On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
>> >
>> > hello,
>> >
>> > I made comparison(+diff) between xml passing through vdsm which is
>> > working and another one which cause libvirtd segfault
>> >
>> > https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl
>> 5M1UNdIGYhyRLivL9gydE=
>> >
>> >
>> > I am not sure if below setting are fine but I dont know how to change
>> them
>> >
>> > 
>> > (I dont have so much ram and vgamem)
>> >
>>
>> those are kibibytes though
>> (https://libvirt.org/formatdomain.html#elementsVideo), are pretty
>> conservarvative settings
>> >
>> > > > passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1"
>> type="spice">
>> > (ports with "-"? maybe it is fine because of autoport settings...)
>> >
>>
>> Yes, "-1" means "autoallocation from libvirt".
>> I don't see obvious issues in this XML, and, most importantly, one
>> invalid XML should never cause libvirtd to segfault.
>>
>> I'd file a libvirt bug.
>>
>>
>> --
>> Francesco Romani
>> Senior SW Eng., Virtualization R
>> Red Hat
>> IRC: fromani github: @fromanirh
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
>
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hello,

I am not sure.
I have simple openvpn client profile with systemd enabled on boot time, 
but I think I was not included it anywhere for libvirt/ovirt purpose.


also strange for me was statement that this interface was without IP - 
this interface should be up with IP after connection established... but 
anyway even if some dependencies occurs, then it should be handled 
somehow with proper error.


Regards,

Rafal Wojciechowski


W dniu 21.04.2017 o 17:41, Yaniv Kaul pisze:



On Fri, Apr 21, 2017 at 4:38 PM, Rafał Wojciechowski 
> wrote:


hi,

my issue was related to bug in libvirtd.
it was found in core dump by libvirt team

"

I'll send a patch to upstream libvirt to fix this crash.  However it can 
take
a while to get it back to CentOS/RHEL.  The source of this crash is that you
have a "tun0" network interface without IP address and that interface is
checked before "ovirtmgmt" and it causes the crash.  You can workaround it
by removing the "tun0" interface if it doesn't have any IP address.

Pavel

"

workaround is working fine for me.


Thanks for following this!
Any idea how did you get to have the tun0 there in the first place?
Y.

Regards,
Rafal Wojciechowski

W dniu 18.04.2017 o 16:55, Rafał Wojciechowski pisze:


hi,

I was unable to just remove glibc and install it again - I have
reinstalled it and rebooted the machine but it was not fixed anything
Thanks anyway.

Regards,
Rafal Wojciechowski

W dniu 18.04.2017 o 10:53, Yanir Quinn pisze:

Hi Rafal
not sure it relates to your issue, but i experienced a similar
issue with segfault (running on fedora 25)
to resolve it i had to remove glibc packages and then install
them again (maybe a same workaround for libvirt will do the job
here)

Regards
Yanir Quinn

On Tue, Apr 18, 2017 at 9:32 AM, Francesco Romani
> wrote:



On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
>
> hello,
>
> I made comparison(+diff) between xml passing through vdsm
which is
> working and another one which cause libvirtd segfault
>
>

https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE=


>
>
> I am not sure if below setting are fine but I dont know
how to change them
>
> 
> (I dont have so much ram and vgamem)
>

those are kibibytes though
(https://libvirt.org/formatdomain.html#elementsVideo
), are
pretty
conservarvative settings
>
>  passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1"
type="spice">
> (ports with "-"? maybe it is fine because of autoport
settings...)
>

Yes, "-1" means "autoallocation from libvirt".
I don't see obvious issues in this XML, and, most
importantly, one
invalid XML should never cause libvirtd to segfault.

I'd file a libvirt bug.


--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users







___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users


___ Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users
 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hi,

my issue was related to bug in libvirtd.
it was found in core dump by libvirt team

"

I'll send a patch to upstream libvirt to fix this crash.  However it can take
a while to get it back to CentOS/RHEL.  The source of this crash is that you
have a "tun0" network interface without IP address and that interface is
checked before "ovirtmgmt" and it causes the crash.  You can workaround it
by removing the "tun0" interface if it doesn't have any IP address.

Pavel

"

workaround is working fine for me.

Regards,
Rafal Wojciechowski

W dniu 18.04.2017 o 16:55, Rafał Wojciechowski pisze:


hi,

I was unable to just remove glibc and install it again - I have 
reinstalled it and rebooted the machine but it was not fixed anything

Thanks anyway.

Regards,
Rafal Wojciechowski

W dniu 18.04.2017 o 10:53, Yanir Quinn pisze:

Hi Rafal
not sure it relates to your issue, but i experienced a similar issue 
with segfault (running on fedora 25)
to resolve it i had to remove glibc packages and then install them 
again (maybe a same workaround for libvirt will do the job here)


Regards
Yanir Quinn

On Tue, Apr 18, 2017 at 9:32 AM, Francesco Romani > wrote:




On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
>
> hello,
>
> I made comparison(+diff) between xml passing through vdsm which is
> working and another one which cause libvirtd segfault
>
>

https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE=


>
>
> I am not sure if below setting are fine but I dont know how to
change them
>
> 
> (I dont have so much ram and vgamem)
>

those are kibibytes though
(https://libvirt.org/formatdomain.html#elementsVideo
), are pretty
conservarvative settings
>
>  passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1"
type="spice">
> (ports with "-"? maybe it is fine because of autoport settings...)
>

Yes, "-1" means "autoallocation from libvirt".
I don't see obvious issues in this XML, and, most importantly, one
invalid XML should never cause libvirtd to segfault.

I'd file a libvirt bug.


--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users







___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hi,

I was unable to just remove glibc and install it again - I have 
reinstalled it and rebooted the machine but it was not fixed anything

Thanks anyway.

Regards,
Rafal Wojciechowski

W dniu 18.04.2017 o 10:53, Yanir Quinn pisze:

Hi Rafal
not sure it relates to your issue, but i experienced a similar issue 
with segfault (running on fedora 25)
to resolve it i had to remove glibc packages and then install them 
again (maybe a same workaround for libvirt will do the job here)


Regards
Yanir Quinn

On Tue, Apr 18, 2017 at 9:32 AM, Francesco Romani > wrote:




On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
>
> hello,
>
> I made comparison(+diff) between xml passing through vdsm which is
> working and another one which cause libvirtd segfault
>
>

https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE=


>
>
> I am not sure if below setting are fine but I dont know how to
change them
>
> 
> (I dont have so much ram and vgamem)
>

those are kibibytes though
(https://libvirt.org/formatdomain.html#elementsVideo
), are pretty
conservarvative settings
>
>  passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1"
type="spice">
> (ports with "-"? maybe it is fine because of autoport settings...)
>

Yes, "-1" means "autoallocation from libvirt".
I don't see obvious issues in this XML, and, most importantly, one
invalid XML should never cause libvirtd to segfault.

I'd file a libvirt bug.


--
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Yanir Quinn]

Hi Rafal
not sure it relates to your issue, but i experienced a similar issue with
segfault (running on fedora 25)
to resolve it i had to remove glibc packages and then install them again
(maybe a same workaround for libvirt will do the job here)

Regards
Yanir Quinn

On Tue, Apr 18, 2017 at 9:32 AM, Francesco Romani 
wrote:

>
>
> On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
> >
> > hello,
> >
> > I made comparison(+diff) between xml passing through vdsm which is
> > working and another one which cause libvirtd segfault
> >
> > https://paste.fedoraproject.org/paste/eqpe8Byu2l-
> 3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE=
> >
> >
> > I am not sure if below setting are fine but I dont know how to change
> them
> >
> > 
> > (I dont have so much ram and vgamem)
> >
>
> those are kibibytes though
> (https://libvirt.org/formatdomain.html#elementsVideo), are pretty
> conservarvative settings
> >
> >  > passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1" type="spice">
> > (ports with "-"? maybe it is fine because of autoport settings...)
> >
>
> Yes, "-1" means "autoallocation from libvirt".
> I don't see obvious issues in this XML, and, most importantly, one
> invalid XML should never cause libvirtd to segfault.
>
> I'd file a libvirt bug.
>
>
> --
> Francesco Romani
> Senior SW Eng., Virtualization R
> Red Hat
> IRC: fromani github: @fromanirh
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Francesco Romani]

On 04/18/2017 08:09 AM, Rafał Wojciechowski wrote:
>
> hello,
>
> I made comparison(+diff) between xml passing through vdsm which is
> working and another one which cause libvirtd segfault
>
> https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE=
>
>
> I am not sure if below setting are fine but I dont know how to change them
>
> 
> (I dont have so much ram and vgamem)
>

those are kibibytes though
(https://libvirt.org/formatdomain.html#elementsVideo), are pretty
conservarvative settings
>
>  passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1" type="spice">
> (ports with "-"? maybe it is fine because of autoport settings...)
>

Yes, "-1" means "autoallocation from libvirt".
I don't see obvious issues in this XML, and, most importantly, one
invalid XML should never cause libvirtd to segfault.

I'd file a libvirt bug.


-- 
Francesco Romani
Senior SW Eng., Virtualization R
Red Hat
IRC: fromani github: @fromanirh

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hello,

I made comparison(+diff) between xml passing through vdsm which is 
working and another one which cause libvirtd segfault


https://paste.fedoraproject.org/paste/eqpe8Byu2l-3SRdXc6LTLl5M1UNdIGYhyRLivL9gydE= 



I am not sure if below setting are fine but I dont know how to change them


(I dont have so much ram and vgamem)

passwdValidTo="1970-01-01T00:00:01" port="-1" tlsPort="-1" type="spice">

(ports with "-"? maybe it is fine because of autoport settings...)


Regards,
Rafal Wojciechowski


hello,

I extracted xml from /var/log/core for some test VM and tried to 
validy via virt-xml-validate

maybe it could help in this case

https://paste.fedoraproject.org/paste/F878jO-16OEQZAQX0imQx15M1UNdIGYhyRLivL9gydE=


Regards,
Rafal Wojciechowski



hi,

I will add few informations:

currently I am using:

libvirt-daemon-kvm-2.0.0-10.el7_3.5.x86_64
libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.x86_64
qemu-kvm-ev-2.6.0-28.el7_3.6.1.x86_64
ovirt-engine-4.1.1.8-1.el7.centos.noarch(I tried update, to see if it 
will help but nothing has changed)


same problem exists with SELinux and without SELinux(now it is in 
permissive mode; after the reboot)


Regards,
Rafal Wojciechowski

W dniu 14.04.2017 o 15:39, Sandro Bonazzola pisze:

Adding Francesco and Michal

On Sun, Apr 9, 2017 at 1:05 PM, Rafał Wojciechowski 
> wrote:


hi, I am having some problems after upgrade Ovirt from 4.0 to 4.1
version. I made full reinstall of Ovirt, but it seems to be not
ovirt upgrade related problem(libvirt)
strange thing is that I am able to run any VM in headless mode
without console
and with Console(spice) it it throwing error like here

https://paste.fedoraproject.org/paste/4WZIackx7ndzv2Kg-ucybl5M1UNdIGYhyRLivL9gydE=


if someone knows the resolution here I will be very happy to apply it


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





--

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R

Red Hat EMEA 

  
TRIED. TESTED. TRUSTED. 





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hello,

I extracted xml from /var/log/core for some test VM and tried to validy 
via virt-xml-validate

maybe it could help in this case

https://paste.fedoraproject.org/paste/F878jO-16OEQZAQX0imQx15M1UNdIGYhyRLivL9gydE=


Regards,
Rafal Wojciechowski


hi,

I will add few informations:

currently I am using:

libvirt-daemon-kvm-2.0.0-10.el7_3.5.x86_64
libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.x86_64
qemu-kvm-ev-2.6.0-28.el7_3.6.1.x86_64
ovirt-engine-4.1.1.8-1.el7.centos.noarch(I tried update, to see if it 
will help but nothing has changed)


same problem exists with SELinux and without SELinux(now it is in 
permissive mode; after the reboot)


Regards,
Rafal Wojciechowski

W dniu 14.04.2017 o 15:39, Sandro Bonazzola pisze:

Adding Francesco and Michal

On Sun, Apr 9, 2017 at 1:05 PM, Rafał Wojciechowski 
> wrote:


hi, I am having some problems after upgrade Ovirt from 4.0 to 4.1
version. I made full reinstall of Ovirt, but it seems to be not
ovirt upgrade related problem(libvirt)
strange thing is that I am able to run any VM in headless mode
without console
and with Console(spice) it it throwing error like here

https://paste.fedoraproject.org/paste/4WZIackx7ndzv2Kg-ucybl5M1UNdIGYhyRLivL9gydE=


if someone knows the resolution here I will be very happy to apply it


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





--

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R

Red Hat EMEA 

  
TRIED. TESTED. TRUSTED. 





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Rafał Wojciechowski]

hi,

I will add few informations:

currently I am using:

libvirt-daemon-kvm-2.0.0-10.el7_3.5.x86_64
libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.x86_64
qemu-kvm-ev-2.6.0-28.el7_3.6.1.x86_64
ovirt-engine-4.1.1.8-1.el7.centos.noarch(I tried update, to see if it 
will help but nothing has changed)


same problem exists with SELinux and without SELinux(now it is in 
permissive mode; after the reboot)


Regards,
Rafal Wojciechowski

W dniu 14.04.2017 o 15:39, Sandro Bonazzola pisze:

Adding Francesco and Michal

On Sun, Apr 9, 2017 at 1:05 PM, Rafał Wojciechowski 
> wrote:


hi, I am having some problems after upgrade Ovirt from 4.0 to 4.1
version. I made full reinstall of Ovirt, but it seems to be not
ovirt upgrade related problem(libvirt)
strange thing is that I am able to run any VM in headless mode
without console
and with Console(spice) it it throwing error like here

https://paste.fedoraproject.org/paste/4WZIackx7ndzv2Kg-ucybl5M1UNdIGYhyRLivL9gydE=


if someone knows the resolution here I will be very happy to apply it


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





--

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R

Red Hat EMEA 

  
TRIED. TESTED. TRUSTED. 



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 to 4.1 CentOS7.3 and libvirtd 2.0.0 segfault issue

[Sandro Bonazzola]

Adding Francesco and Michal

On Sun, Apr 9, 2017 at 1:05 PM, Rafał Wojciechowski <
i...@rafalwojciechowski.pl> wrote:

> hi, I am having some problems after upgrade Ovirt from 4.0 to 4.1 version.
> I made full reinstall of Ovirt, but it seems to be not ovirt upgrade
> related problem(libvirt)
> strange thing is that I am able to run any VM in headless mode without
> console
> and with Console(spice) it it throwing error like here
> https://paste.fedoraproject.org/paste/4WZIackx7ndzv2Kg-
> ucybl5M1UNdIGYhyRLivL9gydE=
> if someone knows the resolution here I will be very happy to apply it
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R

Red Hat EMEA 

TRIED. TESTED. TRUSTED. 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0 Python SDK] Host fail to move in Maintenance State

[Juan Hernández]

On 04/07/2017 12:06 PM, TranceWorldLogic . wrote:
> Hi,
> 
> I was trying to deactivate host via python SDK but found that host is
> not moving in Maintenance State.
> 
> In this scenario, I found that I have one additional network added in
> cluster but not setup on Host.
> Hence it retrying in background for network sync.
> Because of this I suspect host is fail to move in maintenance state.
> 
> Can someone help me how to force via python API to deactivate host ?
> Or
> Can I stop background sync of host ?
> 
> Thanks,
> ~Rohit
> 

As far as I know there is no way to "force" moving the host to
maintenance, at least not with the API. I'd suggest that you check the
logs (/var/log/ovirt-engine/engine.log and
/var/log/ovirt-engine/server.log) and see if there is some relevant
message when you try that. If so, share those messages.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Ovirt 4.0 - Storage Domain] Fail to upload ISO using engine-iso-uploader

[Sandro Bonazzola]

Adding Rafael who is maintaining the tool.

On Tue, Jan 10, 2017 at 8:19 AM, TranceWorldLogic . <
tranceworldlo...@gmail.com> wrote:

> Hi,
>
> I am trying to upload ISO image using engine-iso-uploader command as shown
> below.
> I have received error as shown below.
>
> # engine-iso-uploader -i vms_isos_myHost -u admin@internal -r
> ovirt.lab.com:443 upload /tmp/ubuntu.iso
> Uploading, please wait...
> ERROR: mount.nfs: access denied by server while mounting 190.68.5.100:
> /nfs_share/iso
>

Can you please run with --verbose and attach logs?
At first sight, your server configuration has some issue. Does manual mount
of the nfs share work for you?


>
> My NFS configuration as shown below:
> # cat /etc/exports
> /nfs_share/iso 190.68.5.100(rw,sync,no_subtree_check,all_squash,
> anonuid=36,anongid=36)
> /nfs_share/data190.68.5.100(rw,sync,no_subtree_check,all_squash,
> anonuid=36,anongid=36)
>
> And please note that I have provided proper file and folder permission as
> mention in below link.
> http://www.ovirt.org/documentation/how-to/troubleshooting/
> troubleshooting-nfs-storage-issues/
>
> Please help !!!
>
> Thanks,
> ~Rohit
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 spice console attempting to connect to HV private IP

[Edward Clay]

We just found the issue.  In the cluster logical networks it has a
display network that was pointing to the management netowrk(private not
accessible network).

system > data center > cluster > logical networks tab

I changed the display network to the public network. Now I'm able to
access the console on new vms.  That is after I restart them.

Thanks for taking some time to respond.


On 12/16/2016 12:51 PM, Michal Skrivanek wrote:
>> On 16 Dec 2016, at 19:57, Edward Clay  wrote:
>>
>> Hello,
>>
>> I've recently upgraded from ovirt 3.6 to 4.0 and have run into an issue
>> that I'm not finding an explanation or solution to.  Currently when I
>> create a new VM and start it up and attempt to connect to the console I
>> get the following error.
>>
>> "Unable to connect to the graphic server Could not connect to 10.1.1.1:
>> Socket I/O timed out"
>>
>> If I attempt to launch a console for a VM created before the upgrade it
>> opens successfully. If I save the console.vv file I can see that the HV
>> public IP address is in this file.  If I do the same thing for the
>> failing vm and I see the HV private mgmnt network IP.  I'm not finding
>> where I can change which IP is used for console access or a difference
>> in how the VMs created before the upgrade are configured compared to the
>> new VMs.
>>
>> I should also note that I attempted to change the IP in the failing VMs
>> console.vv file and then use it with the remove-viewer spice client and
>> it fails to connect to the port.
>>
>> Any guidance on how to identify what's wrong is greatly appreciated.
> Hi,
> I wonder if you have anything special around resolving the hosts. Do
> you use names in engine? Are both engine and hosts using same dns? How
> does host's networking look like? What IP is the qemu procces bind to?
>
> You can also try to use Display IP Override in Host dialog
>
>
> Thanks,
> michal
>> --
>> Best regards,
>> Edward Clay
>> Systems Administrator
>> UK2 Group - US Operations
>> Phone: 1-800-222-2165
>> FAX: 435-755-3449
>> E-mail: edward.c...@uk2group.com
>>
>> Believe in Better Hosting
>> http://www.westhost.com
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>

-- 
Best regards,
Edward Clay
Systems Administrator
UK2 Group - US Operations
Phone: 1-800-222-2165
FAX: 435-755-3449
E-mail: edward.c...@uk2group.com
 
Believe in Better Hosting
http://www.westhost.com

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 spice console attempting to connect to HV private IP

[Cameron Christensen]

For the cluster that the VM is in check the logical networks and make sure
that the role display is set on the proper network interface.


On Fri, Dec 16, 2016 at 11:51 AM, Michal Skrivanek 
wrote:

> > On 16 Dec 2016, at 19:57, Edward Clay  wrote:
> >
> > Hello,
> >
> > I've recently upgraded from ovirt 3.6 to 4.0 and have run into an issue
> > that I'm not finding an explanation or solution to.  Currently when I
> > create a new VM and start it up and attempt to connect to the console I
> > get the following error.
> >
> > "Unable to connect to the graphic server Could not connect to 10.1.1.1:
> > Socket I/O timed out"
> >
> > If I attempt to launch a console for a VM created before the upgrade it
> > opens successfully. If I save the console.vv file I can see that the HV
> > public IP address is in this file.  If I do the same thing for the
> > failing vm and I see the HV private mgmnt network IP.  I'm not finding
> > where I can change which IP is used for console access or a difference
> > in how the VMs created before the upgrade are configured compared to the
> > new VMs.
> >
> > I should also note that I attempted to change the IP in the failing VMs
> > console.vv file and then use it with the remove-viewer spice client and
> > it fails to connect to the port.
> >
> > Any guidance on how to identify what's wrong is greatly appreciated.
>
> Hi,
> I wonder if you have anything special around resolving the hosts. Do
> you use names in engine? Are both engine and hosts using same dns? How
> does host's networking look like? What IP is the qemu procces bind to?
>
> You can also try to use Display IP Override in Host dialog
>
>
> Thanks,
> michal
> >
> > --
> > Best regards,
> > Edward Clay
> > Systems Administrator
> > UK2 Group - US Operations
> > Phone: 1-800-222-2165
> > FAX: 435-755-3449
> > E-mail: edward.c...@uk2group.com
> >
> > Believe in Better Hosting
> > http://www.westhost.com
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Regards,

Cameron Christensen
Manager, Security and Infrastructure
UK2 Group
Phone: 1-800-222-2165
E-mail: cameron.christen...@uk2group.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 spice console attempting to connect to HV private IP

[Michal Skrivanek]

> On 16 Dec 2016, at 19:57, Edward Clay  wrote:
>
> Hello,
>
> I've recently upgraded from ovirt 3.6 to 4.0 and have run into an issue
> that I'm not finding an explanation or solution to.  Currently when I
> create a new VM and start it up and attempt to connect to the console I
> get the following error.
>
> "Unable to connect to the graphic server Could not connect to 10.1.1.1:
> Socket I/O timed out"
>
> If I attempt to launch a console for a VM created before the upgrade it
> opens successfully. If I save the console.vv file I can see that the HV
> public IP address is in this file.  If I do the same thing for the
> failing vm and I see the HV private mgmnt network IP.  I'm not finding
> where I can change which IP is used for console access or a difference
> in how the VMs created before the upgrade are configured compared to the
> new VMs.
>
> I should also note that I attempted to change the IP in the failing VMs
> console.vv file and then use it with the remove-viewer spice client and
> it fails to connect to the port.
>
> Any guidance on how to identify what's wrong is greatly appreciated.

Hi,
I wonder if you have anything special around resolving the hosts. Do
you use names in engine? Are both engine and hosts using same dns? How
does host's networking look like? What IP is the qemu procces bind to?

You can also try to use Display IP Override in Host dialog


Thanks,
michal
>
> --
> Best regards,
> Edward Clay
> Systems Administrator
> UK2 Group - US Operations
> Phone: 1-800-222-2165
> FAX: 435-755-3449
> E-mail: edward.c...@uk2group.com
>
> Believe in Better Hosting
> http://www.westhost.com
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Reporting

[Yedidyah Bar David]

On Sat, Oct 29, 2016 at 12:09 PM,   wrote:
> Hello oVirt guru`s!
>
> In the first half of 2016 was the following information: 
> http://lists.ovirt.org/pipermail/users/2016-June/040549.html
>
> Are there any news about the built-in oVirt 4.0 reporting mechanism?

It's called now "Dashboard". It's the default first screen you see after
admin login in 4.0, you can't miss it.

> Is there any chance that we will see reports in the oVirt web console?

If you refer to the ovirt-engine-reports that was available in 3.6, then
the answer is No. If that's exactly what you need, you should stay in
3.6 for now. In principle you can setup a 3.6 ovirt-engine-reports machine
to work against a 4.0 engine+dwh, it might work, I am not aware of anyone
doing this.

Please check the following for 4.1+ plans in this area:

http://www.ovirt.org/develop/release-management/features/engine/metrics-store/

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Gervais de Montbrun]

Hi Simone,

Thanks for the info. I'll look at the solution that you suggested.

Cheers,
Gervais



> On Sep 29, 2016, at 10:01 AM, Simone Tiraboschi  wrote:
> 
> 
> 
> On Thu, Sep 29, 2016 at 2:51 PM, Gervais de Montbrun  > wrote:
> Hi Martin,
> 
> The entropy was super low. Somewhere around 140. I installed and configured 
> haveged.service to start at bootup, reverted my apache changes... After a 
> reboot, my systemctl status still says that there are 7 services queued (note 
> that I erroneously said degraded in my previous email - the services are, in 
> fact, queued), but the oVirt GUI comes up almost immediately and everything 
> seems to be great.
> 
> 
> Take care that using havaged on a VM should not be considered a good source 
> of entropy and the oVirt PKi is managed by the engine.
> http://security.stackexchange.com/questions/34523/is-it-appropriate-to-use-haveged-as-a-source-of-entropy-on-virtual-machines
>  
> 
> 
> A better approach is the virtio-rng paravirtualised rng driver as for patch 
> https://gerrit.ovirt.org/#/c/62334/ 
> 
>  
> Thank you for the tip. You solved my issue.
> 
> Cheers,
> Gervais
> 
> 
> 
>> On Sep 29, 2016, at 7:47 AM, Martin Perina > > wrote:
>> 
>> Hi,
>> 
>> please take a look at my inline comments:
>> 
>> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun > > wrote:
>> Hey All,
>> 
>> Since updating to 4.0.x of oVirt, I have had an issue with my hosted engine. 
>> After a some poking around, I think I have figured out my issue and thought 
>> I would share to see what others think.
>> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in 
>> 4.0.4.
>> 
>> Description:
>> When my hosted engine starts it reports that it is in a degraded state with 
>> 7 or 8 services still not started when I run systemctl status. It takes 
>> about 6 or 7 minutes to eventually start all the services and come online. 
>> If I don't set my cluster to Global-Maintenance mode it eventually thinks 
>> that my hosted-engine needs to be rebooted and restarts it before it can 
>> start everything.
>> 
>> ​Could you please share with us logs gathered by ovirt-log-collector?
>> 
>> It's just a guess but could you please take a look if you HE VM has enough 
>> entropy?
>> 
>>   cat /proc/sys/kernel/random/entropy_avail
>> 
>> If the value is low (below or around 200),  you really need to install and 
>> configure some entropy generator such as haveged
>> 
>> 
>> Solution:
>> I realized that Apache was the culprit and found that the proxy to the 
>> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super long 
>> timeout with many retries. I changed the settings and now everything works 
>> for me.
>> 
>> -> Before change:
>> > ^/(ovirt-engine($|/)|api($|/)|RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|rhevm.ssh.key.txt$)>
>> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=3600 retry=5
>> 
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
>> text/xml text/json application/xml application/json application/x-yaml
>> 
>> 
>> 
>> -> After change:
>> 
>> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=5 retry=2
>> 
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
>> text/xml text/json application/xml application/json application/x-yaml
>> 
>> 
>> 
>> ​This one is correct for 4.0​​, not sure why it was not updated during 
>> upgrade from 3.6. @Simone?
>> ​ 
>> 
>> If I read the timeout settings correctly, it will wait 60 minutes with 5 
>> retries. 5 hours is way too long for my little server to hold onto all those 
>> apache processes.
>> The change I made allows for there to be an error, and also releases 
>> apache's hold on the process. Once everything is ready, apache is ready to 
>> serve requests and everything/everyone is happy. Before making the change, I 
>> just get a whitescreen in my browser and then nothing works until I restart 
>> Apache (or I end up in an endless loop of ovirt-ha services restarting my 
>> hosted-engine.
>> 
>> ​Well, if you have an issue with too many apache processes waiting for 
>> engine to respond, then there's some issue in engine. As I wrote above 
>> please share the logs with us and check entropy.
>> 
>> Thanks
>> 
>> Martin Perina
>> ​ 
>> 
>> I noticed that this setting reverts to the original setting, so oVirt must 
>> be writing this file. Perhaps these number can be changed in oVirt? If not, 
>> I will just setup and ansible play to revert the settings with working 
>> values and restart apache on my engine.
>> :-)
>> 
>> 

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Gervais de Montbrun]

Hi Simone,

Yes... I guess it was not clear in my original email. I changed the numbers 
myself to lower the timeout and retries. With them set as they were set by 
ovirt (timeout=3600 retry=5) things were not working for me. 

Cheers,
Gervais



> On Sep 29, 2016, at 10:04 AM, Simone Tiraboschi  wrote:
> 
> 
> 
> On Thu, Sep 29, 2016 at 12:47 PM, Martin Perina  > wrote:
> Hi,
> 
> please take a look at my inline comments:
> 
> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun  > wrote:
> Hey All,
> 
> Since updating to 4.0.x of oVirt, I have had an issue with my hosted engine. 
> After a some poking around, I think I have figured out my issue and thought I 
> would share to see what others think.
> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in 
> 4.0.4.
> 
> Description:
> When my hosted engine starts it reports that it is in a degraded state with 7 
> or 8 services still not started when I run systemctl status. It takes about 6 
> or 7 minutes to eventually start all the services and come online. If I don't 
> set my cluster to Global-Maintenance mode it eventually thinks that my 
> hosted-engine needs to be rebooted and restarts it before it can start 
> everything.
> 
> ​Could you please share with us logs gathered by ovirt-log-collector?
> 
> It's just a guess but could you please take a look if you HE VM has enough 
> entropy?
> 
>   cat /proc/sys/kernel/random/entropy_avail
> 
> If the value is low (below or around 200),  you really need to install and 
> configure some entropy generator such as haveged
> 
> 
> Solution:
> I realized that Apache was the culprit and found that the proxy to the 
> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super long 
> timeout with many retries. I changed the settings and now everything works 
> for me.
> 
> -> Before change:
>  ^/(ovirt-engine($|/)|api($|/)|RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|rhevm.ssh.key.txt$)>
> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=3600 retry=5
> 
> 
> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
> text/xml text/json application/xml application/json application/x-yaml
> 
> 
> 
> -> After change:
> 
> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=5 retry=2
> 
> 
> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
> text/xml text/json application/xml application/json application/x-yaml
> 
> 
> 
> ​This one is correct for 4.0​​, not sure why it was not updated during 
> upgrade from 3.6. @Simone?
> ​
> 
> Honestly it's
> 
> ProxyPassMatch ajp://127.0.0.1:8702  
> timeout=3600 retry=5
> 
> 
> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
> text/xml text/json application/xml application/json application/x-yaml
> 
> 
> also on a fresh 4.0 engine from our latest engine-appliance.
>  
> 
> If I read the timeout settings correctly, it will wait 60 minutes with 5 
> retries. 5 hours is way too long for my little server to hold onto all those 
> apache processes.
> The change I made allows for there to be an error, and also releases apache's 
> hold on the process. Once everything is ready, apache is ready to serve 
> requests and everything/everyone is happy. Before making the change, I just 
> get a whitescreen in my browser and then nothing works until I restart Apache 
> (or I end up in an endless loop of ovirt-ha services restarting my 
> hosted-engine.
> 
> ​Well, if you have an issue with too many apache processes waiting for engine 
> to respond, then there's some issue in engine. As I wrote above please share 
> the logs with us and check entropy.
> 
> Thanks
> 
> Martin Perina
> ​ 
> 
> I noticed that this setting reverts to the original setting, so oVirt must be 
> writing this file. Perhaps these number can be changed in oVirt? If not, I 
> will just setup and ansible play to revert the settings with working values 
> and restart apache on my engine.
> :-)
> 
> Cheers,
> Gervais
> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users 
> 
> 
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Martin Perina]

On Thu, Sep 29, 2016 at 3:04 PM, Simone Tiraboschi 
wrote:

>
>
> On Thu, Sep 29, 2016 at 12:47 PM, Martin Perina 
> wrote:
>
>> Hi,
>>
>> please take a look at my inline comments:
>>
>> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun <
>> gerv...@demontbrun.com> wrote:
>>
>>> Hey All,
>>>
>>> Since updating to 4.0.x of oVirt, I have had an issue with my hosted
>>> engine. After a some poking around, I think I have figured out my issue and
>>> thought I would share to see what others think.
>>> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in
>>> 4.0.4.
>>>
>>> Description:
>>> When my hosted engine starts it reports that it is in a degraded state
>>> with 7 or 8 services still not started when I run systemctl status. It
>>> takes about 6 or 7 minutes to eventually start all the services and come
>>> online. If I don't set my cluster to Global-Maintenance mode it eventually
>>> thinks that my hosted-engine needs to be rebooted and restarts it before it
>>> can start everything.
>>>
>>
>> ​Could you please share with us logs gathered by ovirt-log-collector?
>>
>> It's just a guess but could you please take a look if you HE VM has
>> enough entropy?
>>
>>   cat /proc/sys/kernel/random/entropy_avail
>>
>> If the value is low (below or around 200),  you really need to install
>> and configure some entropy generator such as haveged
>>
>>
>>> Solution:
>>> I realized that Apache was the culprit and found that the proxy to the
>>> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super
>>> long timeout with many retries. I changed the settings and now everything
>>> works for me.
>>>
>>> -> Before change:
>>>
>>> >> RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|
>>> rhevm.ssh.key.txt$)>
>>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>>>
>>> 
>>> AddOutputFilterByType DEFLATE text/javascript text/css
>>> text/html text/xml text/json application/xml application/json
>>> application/x-yaml
>>> 
>>> 
>>>
>>>
>>> -> After change:
>>>
>>> 
>>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2
>>>
>>> 
>>> AddOutputFilterByType DEFLATE text/javascript text/css
>>> text/html text/xml text/json application/xml application/json
>>> application/x-yaml
>>> 
>>> 
>>>
>>>
>> ​This one is correct for 4.0​
>> ​, not sure why it was not updated during upgrade from 3.6. @Simone?
>> ​
>>
>
> Honestly it's
> 
> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>
> 
> AddOutputFilterByType DEFLATE text/javascript text/css
> text/html text/xml text/json application/xml application/json
> application/x-yaml
> 
> 
> also on a fresh 4.0 engine from our latest engine-appliance.
>

​Right, I missed the timeout​/retry option changes. But the important part
is why old configuration (with different LocationMatch) was not overwritten
during upgrade.


>
>>
>>> If I read the timeout settings correctly, it will wait 60 minutes with 5
>>> retries. 5 hours is way too long for my little server to hold onto all
>>> those apache processes.
>>>
>> The change I made allows for there to be an error, and also releases
>>> apache's hold on the process. Once everything is ready, apache is ready to
>>> serve requests and everything/everyone is happy. Before making the change,
>>> I just get a whitescreen in my browser and then nothing works until I
>>> restart Apache (or I end up in an endless loop of ovirt-ha services
>>> restarting my hosted-engine.
>>>
>>
>> ​Well, if you have an issue with too many apache processes waiting for
>> engine to respond, then there's some issue in engine. As I wrote above
>> please share the logs with us and check entropy.
>>
>> Thanks
>>
>> Martin Perina
>> ​
>>
>>
>>>
>>> I noticed that this setting reverts to the original setting, so oVirt
>>> must be writing this file. Perhaps these number can be changed in oVirt? If
>>> not, I will just setup and ansible play to revert the settings with working
>>> values and restart apache on my engine.
>>> :-)
>>>
>>> Cheers,
>>> Gervais
>>>
>>>
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Simone Tiraboschi]

On Thu, Sep 29, 2016 at 3:11 PM, Martin Perina  wrote:

>
>
> On Thu, Sep 29, 2016 at 3:04 PM, Simone Tiraboschi 
> wrote:
>
>>
>>
>> On Thu, Sep 29, 2016 at 12:47 PM, Martin Perina 
>> wrote:
>>
>>> Hi,
>>>
>>> please take a look at my inline comments:
>>>
>>> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun <
>>> gerv...@demontbrun.com> wrote:
>>>
 Hey All,

 Since updating to 4.0.x of oVirt, I have had an issue with my hosted
 engine. After a some poking around, I think I have figured out my issue and
 thought I would share to see what others think.
 The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists
 in 4.0.4.

 Description:
 When my hosted engine starts it reports that it is in a degraded state
 with 7 or 8 services still not started when I run systemctl status. It
 takes about 6 or 7 minutes to eventually start all the services and come
 online. If I don't set my cluster to Global-Maintenance mode it eventually
 thinks that my hosted-engine needs to be rebooted and restarts it before it
 can start everything.

>>>
>>> ​Could you please share with us logs gathered by ovirt-log-collector?
>>>
>>> It's just a guess but could you please take a look if you HE VM has
>>> enough entropy?
>>>
>>>   cat /proc/sys/kernel/random/entropy_avail
>>>
>>> If the value is low (below or around 200),  you really need to install
>>> and configure some entropy generator such as haveged
>>>
>>>
 Solution:
 I realized that Apache was the culprit and found that the proxy to the
 ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a
 super long timeout with many retries. I changed the settings and now
 everything works for me.

 -> Before change:

 >>> RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|
 rhevm.ssh.key.txt$)>
 ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5

 
 AddOutputFilterByType DEFLATE text/javascript text/css
 text/html text/xml text/json application/xml application/json
 application/x-yaml
 
 


 -> After change:

 
 ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2

 
 AddOutputFilterByType DEFLATE text/javascript text/css
 text/html text/xml text/json application/xml application/json
 application/x-yaml
 
 


>>> ​This one is correct for 4.0​
>>> ​, not sure why it was not updated during upgrade from 3.6. @Simone?
>>> ​
>>>
>>
>> Honestly it's
>> 
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>> also on a fresh 4.0 engine from our latest engine-appliance.
>>
>
> ​Right, I missed the timeout​/retry option changes. But the important part
> is why old configuration (with different LocationMatch) was not overwritten
> during upgrade.
>
>
I suspect that it could got overwritten a second time to its 3.6 value in
our backup/restore procedure.
Adding Didi here.


>
>>
>>>
 If I read the timeout settings correctly, it will wait 60 minutes with
 5 retries. 5 hours is way too long for my little server to hold onto all
 those apache processes.

>>> The change I made allows for there to be an error, and also releases
 apache's hold on the process. Once everything is ready, apache is ready to
 serve requests and everything/everyone is happy. Before making the change,
 I just get a whitescreen in my browser and then nothing works until I
 restart Apache (or I end up in an endless loop of ovirt-ha services
 restarting my hosted-engine.

>>>
>>> ​Well, if you have an issue with too many apache processes waiting for
>>> engine to respond, then there's some issue in engine. As I wrote above
>>> please share the logs with us and check entropy.
>>>
>>> Thanks
>>>
>>> Martin Perina
>>> ​
>>>
>>>

 I noticed that this setting reverts to the original setting, so oVirt
 must be writing this file. Perhaps these number can be changed in oVirt? If
 not, I will just setup and ansible play to revert the settings with working
 values and restart apache on my engine.
 :-)

 Cheers,
 Gervais




 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Simone Tiraboschi]

On Thu, Sep 29, 2016 at 12:47 PM, Martin Perina  wrote:

> Hi,
>
> please take a look at my inline comments:
>
> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun <
> gerv...@demontbrun.com> wrote:
>
>> Hey All,
>>
>> Since updating to 4.0.x of oVirt, I have had an issue with my hosted
>> engine. After a some poking around, I think I have figured out my issue and
>> thought I would share to see what others think.
>> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in
>> 4.0.4.
>>
>> Description:
>> When my hosted engine starts it reports that it is in a degraded state
>> with 7 or 8 services still not started when I run systemctl status. It
>> takes about 6 or 7 minutes to eventually start all the services and come
>> online. If I don't set my cluster to Global-Maintenance mode it eventually
>> thinks that my hosted-engine needs to be rebooted and restarts it before it
>> can start everything.
>>
>
> ​Could you please share with us logs gathered by ovirt-log-collector?
>
> It's just a guess but could you please take a look if you HE VM has enough
> entropy?
>
>   cat /proc/sys/kernel/random/entropy_avail
>
> If the value is low (below or around 200),  you really need to install and
> configure some entropy generator such as haveged
>
>
>> Solution:
>> I realized that Apache was the culprit and found that the proxy to the
>> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super
>> long timeout with many retries. I changed the settings and now everything
>> works for me.
>>
>> -> Before change:
>>
>> > RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|
>> rhevm.ssh.key.txt$)>
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
>> -> After change:
>>
>> 
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
> ​This one is correct for 4.0​
> ​, not sure why it was not updated during upgrade from 3.6. @Simone?
> ​
>

Honestly it's

ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5


AddOutputFilterByType DEFLATE text/javascript text/css
text/html text/xml text/json application/xml application/json
application/x-yaml


also on a fresh 4.0 engine from our latest engine-appliance.


>
>> If I read the timeout settings correctly, it will wait 60 minutes with 5
>> retries. 5 hours is way too long for my little server to hold onto all
>> those apache processes.
>>
> The change I made allows for there to be an error, and also releases
>> apache's hold on the process. Once everything is ready, apache is ready to
>> serve requests and everything/everyone is happy. Before making the change,
>> I just get a whitescreen in my browser and then nothing works until I
>> restart Apache (or I end up in an endless loop of ovirt-ha services
>> restarting my hosted-engine.
>>
>
> ​Well, if you have an issue with too many apache processes waiting for
> engine to respond, then there's some issue in engine. As I wrote above
> please share the logs with us and check entropy.
>
> Thanks
>
> Martin Perina
> ​
>
>
>>
>> I noticed that this setting reverts to the original setting, so oVirt
>> must be writing this file. Perhaps these number can be changed in oVirt? If
>> not, I will just setup and ansible play to revert the settings with working
>> values and restart apache on my engine.
>> :-)
>>
>> Cheers,
>> Gervais
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Simone Tiraboschi]

On Thu, Sep 29, 2016 at 2:51 PM, Gervais de Montbrun  wrote:

> Hi Martin,
>
> The entropy was super low. Somewhere around 140. I installed and
> configured haveged.service to start at bootup, reverted my apache
> changes... After a reboot, my systemctl status still says that there are 7
> services queued (note that I erroneously said degraded in my previous email
> - the services are, in fact, queued), but the oVirt GUI comes up almost
> immediately and everything seems to be great.
>
>
Take care that using havaged on a VM should not be considered a good source
of entropy and the oVirt PKi is managed by the engine.
http://security.stackexchange.com/questions/34523/is-it-
appropriate-to-use-haveged-as-a-source-of-entropy-on-virtual-machines

A better approach is the virtio-rng paravirtualised rng driver as for patch
https://gerrit.ovirt.org/#/c/62334/



> Thank you for the tip. You solved my issue.
>
> Cheers,
> Gervais
>
>
>
> On Sep 29, 2016, at 7:47 AM, Martin Perina  wrote:
>
> Hi,
>
> please take a look at my inline comments:
>
> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun <
> gerv...@demontbrun.com> wrote:
>
>> Hey All,
>>
>> Since updating to 4.0.x of oVirt, I have had an issue with my hosted
>> engine. After a some poking around, I think I have figured out my issue and
>> thought I would share to see what others think.
>> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in
>> 4.0.4.
>>
>> Description:
>> When my hosted engine starts it reports that it is in a degraded state
>> with 7 or 8 services still not started when I run systemctl status. It
>> takes about 6 or 7 minutes to eventually start all the services and come
>> online. If I don't set my cluster to Global-Maintenance mode it eventually
>> thinks that my hosted-engine needs to be rebooted and restarts it before it
>> can start everything.
>>
>
> ​Could you please share with us logs gathered by ovirt-log-collector?
>
> It's just a guess but could you please take a look if you HE VM has enough
> entropy?
>
>   cat /proc/sys/kernel/random/entropy_avail
>
> If the value is low (below or around 200),  you really need to install and
> configure some entropy generator such as haveged
>
>
>> Solution:
>> I realized that Apache was the culprit and found that the proxy to the
>> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super
>> long timeout with many retries. I changed the settings and now everything
>> works for me.
>>
>> -> Before change:
>>
>> > RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|
>> rhevm.ssh.key.txt$)>
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
>> -> After change:
>>
>> 
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
> ​This one is correct for 4.0​
> ​, not sure why it was not updated during upgrade from 3.6. @Simone?
> ​
>
>
>>
>> If I read the timeout settings correctly, it will wait 60 minutes with 5
>> retries. 5 hours is way too long for my little server to hold onto all
>> those apache processes.
>>
> The change I made allows for there to be an error, and also releases
>> apache's hold on the process. Once everything is ready, apache is ready to
>> serve requests and everything/everyone is happy. Before making the change,
>> I just get a whitescreen in my browser and then nothing works until I
>> restart Apache (or I end up in an endless loop of ovirt-ha services
>> restarting my hosted-engine.
>>
>
> ​Well, if you have an issue with too many apache processes waiting for
> engine to respond, then there's some issue in engine. As I wrote above
> please share the logs with us and check entropy.
>
> Thanks
>
> Martin Perina
> ​
>
>
>>
>> I noticed that this setting reverts to the original setting, so oVirt
>> must be writing this file. Perhaps these number can be changed in oVirt? If
>> not, I will just setup and ansible play to revert the settings with working
>> values and restart apache on my engine.
>> :-)
>>
>> Cheers,
>> Gervais
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Gervais de Montbrun]

Hi Martin,

The entropy was super low. Somewhere around 140. I installed and configured 
haveged.service to start at bootup, reverted my apache changes... After a 
reboot, my systemctl status still says that there are 7 services queued (note 
that I erroneously said degraded in my previous email - the services are, in 
fact, queued), but the oVirt GUI comes up almost immediately and everything 
seems to be great.

Thank you for the tip. You solved my issue.

Cheers,
Gervais



> On Sep 29, 2016, at 7:47 AM, Martin Perina  wrote:
> 
> Hi,
> 
> please take a look at my inline comments:
> 
> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun  > wrote:
> Hey All,
> 
> Since updating to 4.0.x of oVirt, I have had an issue with my hosted engine. 
> After a some poking around, I think I have figured out my issue and thought I 
> would share to see what others think.
> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in 
> 4.0.4.
> 
> Description:
> When my hosted engine starts it reports that it is in a degraded state with 7 
> or 8 services still not started when I run systemctl status. It takes about 6 
> or 7 minutes to eventually start all the services and come online. If I don't 
> set my cluster to Global-Maintenance mode it eventually thinks that my 
> hosted-engine needs to be rebooted and restarts it before it can start 
> everything.
> 
> ​Could you please share with us logs gathered by ovirt-log-collector?
> 
> It's just a guess but could you please take a look if you HE VM has enough 
> entropy?
> 
>   cat /proc/sys/kernel/random/entropy_avail
> 
> If the value is low (below or around 200),  you really need to install and 
> configure some entropy generator such as haveged
> 
> 
> Solution:
> I realized that Apache was the culprit and found that the proxy to the 
> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super long 
> timeout with many retries. I changed the settings and now everything works 
> for me.
> 
> -> Before change:
>  ^/(ovirt-engine($|/)|api($|/)|RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|rhevm.ssh.key.txt$)>
> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=3600 retry=5
> 
> 
> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
> text/xml text/json application/xml application/json application/x-yaml
> 
> 
> 
> -> After change:
> 
> ProxyPassMatch ajp://127.0.0.1:8702 <> timeout=5 retry=2
> 
> 
> AddOutputFilterByType DEFLATE text/javascript text/css text/html 
> text/xml text/json application/xml application/json application/x-yaml
> 
> 
> 
> ​This one is correct for 4.0​​, not sure why it was not updated during 
> upgrade from 3.6. @Simone?
> ​ 
> 
> If I read the timeout settings correctly, it will wait 60 minutes with 5 
> retries. 5 hours is way too long for my little server to hold onto all those 
> apache processes.
> The change I made allows for there to be an error, and also releases apache's 
> hold on the process. Once everything is ready, apache is ready to serve 
> requests and everything/everyone is happy. Before making the change, I just 
> get a whitescreen in my browser and then nothing works until I restart Apache 
> (or I end up in an endless loop of ovirt-ha services restarting my 
> hosted-engine.
> 
> ​Well, if you have an issue with too many apache processes waiting for engine 
> to respond, then there's some issue in engine. As I wrote above please share 
> the logs with us and check entropy.
> 
> Thanks
> 
> Martin Perina
> ​ 
> 
> I noticed that this setting reverts to the original setting, so oVirt must be 
> writing this file. Perhaps these number can be changed in oVirt? If not, I 
> will just setup and ansible play to revert the settings with working values 
> and restart apache on my engine.
> :-)
> 
> Cheers,
> Gervais
> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users 
> 
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Artyom Lukianov]

We have the same configuration under the file
/etc/httpd/conf.d/z-ovirt-engine-proxy.conf  for the regular engine under
3.6 and 4.0, so I do not sure if it relates to the problem.
About entropy level check the bug
https://bugzilla.redhat.com/show_bug.cgi?id=1357246.
Best Regards

On Thu, Sep 29, 2016 at 1:47 PM, Martin Perina  wrote:

> Hi,
>
> please take a look at my inline comments:
>
> On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun <
> gerv...@demontbrun.com> wrote:
>
>> Hey All,
>>
>> Since updating to 4.0.x of oVirt, I have had an issue with my hosted
>> engine. After a some poking around, I think I have figured out my issue and
>> thought I would share to see what others think.
>> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in
>> 4.0.4.
>>
>> Description:
>> When my hosted engine starts it reports that it is in a degraded state
>> with 7 or 8 services still not started when I run systemctl status. It
>> takes about 6 or 7 minutes to eventually start all the services and come
>> online. If I don't set my cluster to Global-Maintenance mode it eventually
>> thinks that my hosted-engine needs to be rebooted and restarts it before it
>> can start everything.
>>
>
> ​Could you please share with us logs gathered by ovirt-log-collector?
>
> It's just a guess but could you please take a look if you HE VM has enough
> entropy?
>
>   cat /proc/sys/kernel/random/entropy_avail
>
> If the value is low (below or around 200),  you really need to install and
> configure some entropy generator such as haveged
>
>
>> Solution:
>> I realized that Apache was the culprit and found that the proxy to the
>> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super
>> long timeout with many retries. I changed the settings and now everything
>> works for me.
>>
>> -> Before change:
>>
>> > RHEVManagerWeb/|OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|
>> rhevm.ssh.key.txt$)>
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
>> -> After change:
>>
>> 
>> ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2
>>
>> 
>> AddOutputFilterByType DEFLATE text/javascript text/css
>> text/html text/xml text/json application/xml application/json
>> application/x-yaml
>> 
>> 
>>
>>
> ​This one is correct for 4.0​
> ​, not sure why it was not updated during upgrade from 3.6. @Simone?
> ​
>
>
>>
>> If I read the timeout settings correctly, it will wait 60 minutes with 5
>> retries. 5 hours is way too long for my little server to hold onto all
>> those apache processes.
>>
> The change I made allows for there to be an error, and also releases
>> apache's hold on the process. Once everything is ready, apache is ready to
>> serve requests and everything/everyone is happy. Before making the change,
>> I just get a whitescreen in my browser and then nothing works until I
>> restart Apache (or I end up in an endless loop of ovirt-ha services
>> restarting my hosted-engine.
>>
>
> ​Well, if you have an issue with too many apache processes waiting for
> engine to respond, then there's some issue in engine. As I wrote above
> please share the logs with us and check entropy.
>
> Thanks
>
> Martin Perina
> ​
>
>
>>
>> I noticed that this setting reverts to the original setting, so oVirt
>> must be writing this file. Perhaps these number can be changed in oVirt? If
>> not, I will just setup and ansible play to revert the settings with working
>> values and restart apache on my engine.
>> :-)
>>
>> Cheers,
>> Gervais
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.x - hosted-engine was not starting properly

[Martin Perina]

Hi,

please take a look at my inline comments:

On Tue, Sep 27, 2016 at 7:23 PM, Gervais de Montbrun  wrote:

> Hey All,
>
> Since updating to 4.0.x of oVirt, I have had an issue with my hosted
> engine. After a some poking around, I think I have figured out my issue and
> thought I would share to see what others think.
> The issue has existed with 4.0, 4.0.1, 4.0.2, 4.0.3, and still exists in
> 4.0.4.
>
> Description:
> When my hosted engine starts it reports that it is in a degraded state
> with 7 or 8 services still not started when I run systemctl status. It
> takes about 6 or 7 minutes to eventually start all the services and come
> online. If I don't set my cluster to Global-Maintenance mode it eventually
> thinks that my hosted-engine needs to be rebooted and restarts it before it
> can start everything.
>

​Could you please share with us logs gathered by ovirt-log-collector?

It's just a guess but could you please take a look if you HE VM has enough
entropy?

  cat /proc/sys/kernel/random/entropy_avail

If the value is low (below or around 200),  you really need to install and
configure some entropy generator such as haveged


> Solution:
> I realized that Apache was the culprit and found that the proxy to the
> ovirt-engine in /etc/httpd/conf.d/z-ovirt-engine-proxy.conf has a super
> long timeout with many retries. I changed the settings and now everything
> works for me.
>
> -> Before change:
>
>  OvirtEngineWeb/|ca.crt$|engine.ssh.key.txt$|rhevm.ssh.key.txt$)>
> ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5
>
> 
> AddOutputFilterByType DEFLATE text/javascript text/css
> text/html text/xml text/json application/xml application/json
> application/x-yaml
> 
> 
>
>
> -> After change:
>
> 
> ProxyPassMatch ajp://127.0.0.1:8702 timeout=5 retry=2
>
> 
> AddOutputFilterByType DEFLATE text/javascript text/css
> text/html text/xml text/json application/xml application/json
> application/x-yaml
> 
> 
>
>
​This one is correct for 4.0​
​, not sure why it was not updated during upgrade from 3.6. @Simone?
​


>
> If I read the timeout settings correctly, it will wait 60 minutes with 5
> retries. 5 hours is way too long for my little server to hold onto all
> those apache processes.
>
The change I made allows for there to be an error, and also releases
> apache's hold on the process. Once everything is ready, apache is ready to
> serve requests and everything/everyone is happy. Before making the change,
> I just get a whitescreen in my browser and then nothing works until I
> restart Apache (or I end up in an endless loop of ovirt-ha services
> restarting my hosted-engine.
>

​Well, if you have an issue with too many apache processes waiting for
engine to respond, then there's some issue in engine. As I wrote above
please share the logs with us and check entropy.

Thanks

Martin Perina
​


>
> I noticed that this setting reverts to the original setting, so oVirt must
> be writing this file. Perhaps these number can be changed in oVirt? If not,
> I will just setup and ansible play to revert the settings with working
> values and restart apache on my engine.
> :-)
>
> Cheers,
> Gervais
>
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 & virt-viewer & SSO token

[Martin Perina]

Adding Tomas.


On Tue, Sep 13, 2016 at 11:36 AM, Ondra Machacek 
wrote:

> Hi,
>
> we don't support it. What oVirt does is, that it pass the
> username/password to the VM, not the token.
>
> You can read more here[1]. But I doubt the proposed solution will be
> implemented. So you need to use it as is for now.
>
> [1] http://www.ovirt.org/develop/release-management/features/infra/sso/
>
> Ondra
>
> On 09/12/2016 06:17 PM, KY LO wrote:
>
>> Hi all,
>>
>> How can I use SSO token for authentication with Ovirt 4 when using
>> virt-viewer? Any special configuration needed? I can't seem to find much
>> information on the use of SSO token with Ovirt4. Thanks.
>>
>> regards,
>> Philip Lo
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 & virt-viewer & SSO token

[Ondra Machacek]

Hi,

we don't support it. What oVirt does is, that it pass the
username/password to the VM, not the token.

You can read more here[1]. But I doubt the proposed solution will be
implemented. So you need to use it as is for now.

[1] http://www.ovirt.org/develop/release-management/features/infra/sso/

Ondra

On 09/12/2016 06:17 PM, KY LO wrote:

Hi all,

How can I use SSO token for authentication with Ovirt 4 when using
virt-viewer? Any special configuration needed? I can't seem to find much
information on the use of SSO token with Ovirt4. Thanks.

regards,
Philip Lo




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Greg Sheremeta]

Hi all,

This is a usability bug. If I let my engine time out, and then I'm
presented with a login form and I correctly submit it, I should immediately
be logged in.

[I think there may be some misunderstanding in the thread that this was
more of a normal or expected "your session timed out" message after the
timeout. But that's not the case.]

I opened https://bugzilla.redhat.com/show_bug.cgi?id=1367921

Best wishes,
Greg


On Wed, Jul 6, 2016 at 11:31 AM, Melissa Mesler 
wrote:

> A, okay. I never had this happen prior to 4.0 obviously so it threw me
> off. Thank you!
>
>
> On Wed, Jul 6, 2016, at 10:23 AM, Ravi Nori wrote:
>
> This happens when you are on the login screen and the server is restarted
> or the session times out due to inactivity.
> The welcome page maintains a session state which is passed to and back
> from SSO module. The error is raised when the state is lost due to session
> timeout/engine restart
> Ravi
>
> On Wed, Jul 6, 2016 at 11:00 AM, Ralf Schenk  wrote:
>
> Hello,
>
> I've got this, too. But I thought this to be normal since the
> session-timeout was reached.
>
> Bye
>
> Am 06.07.2016 um 04:08 schrieb Melissa Mesler:
>
> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
> admin page, it will give me and error that says "Request state does not
> match session state." Then if I go through the process of logging in
> again, it will go through with no issue. It doesn't do this every time
> but it does do it quite often. Any ideas on why?
>
> - MeLLy
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
> --
>
>
>
>
>
> *Ralf Schenk*
> fon +49 (0) 24 05 / 40 83 70
> fax +49 (0) 24 05 / 40 83 759
> mail *r...@databay.de* 
>
> *Databay AG*
> Jens-Otto-Krag-Straße 11
> D-52146 Würselen
> *www.databay.de* 
>
> Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
> Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
> Philipp Hermanns
> Aufsichtsratsvorsitzender: Wilhelm Dohmen
> --
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
> *___*
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
> Email had 1 attachment:
>
>- logo_databay_email.gif
>  2k (image/gif)
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Greg Sheremeta, MBA
Red Hat, Inc.
Sr. Software Engineer
gsher...@redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 installation

[Ramesh Nachimuthu]

- Original Message -
> From: "Piotr Kliczewski" <pklic...@redhat.com>
> To: "knarra" <kna...@redhat.com>
> Cc: users@ovirt.org
> Sent: Wednesday, August 17, 2016 5:12:52 PM
> Subject: Re: [ovirt-users] ovirt 4.0 installation
> 
> 
> 
> On Wed, Aug 17, 2016 at 1:35 PM, knarra < kna...@redhat.com > wrote:
> 
> 
> 
> On 08/17/2016 04:57 PM, Nir Soffer wrote:
> 
> 
> On Wed, Aug 17, 2016 at 10:16 AM, knarra < kna...@redhat.com > wrote:
> 
> 
> Hi,
> 
> I see the below error logged in vdsm.log file . can some one help me
> understand what this error is and do we have any bug for this error?
> 
> 
> This is not a failure. This line is logged when client closes the connection.
> I can happen at anytime and from vdsm perspective the closure occurred
> during reading data.
> 
> Please check the engine logs to understand who the connection was closed.
> 
> 
> 
> 
> 
> 
> 
> JsonRpc (StompReactor)::ERROR::2016-08-17
> 12:32:05,348::betterAsyncore::113::vds.dispatcher::(recv) SSL error during
> reading data: unexpected eof
> This means the client disconnected in unclean way, Is this a hosted engine
> setup?
> 
> Nir
> 
> yes, this is a hosted engine setup.

I saw similar error in vdsm-4.17.33-1.0 in a gluster only setup when gluster 
nodes are managed by Ovirt 4.0 as well ad Ovirt 3.5.

Kasturi, Can you tell the vdsm and ovirt engine versions used in your setup?


Regards,
Ramesh

> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 installation

[Piotr Kliczewski]

On Wed, Aug 17, 2016 at 1:35 PM, knarra  wrote:

> On 08/17/2016 04:57 PM, Nir Soffer wrote:
>
>> On Wed, Aug 17, 2016 at 10:16 AM, knarra  wrote:
>>
>>> Hi,
>>>
>>>I see the below error  logged in vdsm.log file . can some one help me
>>> understand what this error is and do we have any bug for this error?
>>>
>>>
This is not a failure. This line is logged when client closes the
connection.
I can happen at anytime and from vdsm perspective the closure occurred
during reading data.

Please check the engine logs to understand who the connection was closed.


>   JsonRpc (StompReactor)::ERROR::2016-08-17
>>> 12:32:05,348::betterAsyncore::113::vds.dispatcher::(recv) SSL error
>>> during
>>> reading data: unexpected eof
>>>
>> This means the client disconnected in unclean way, Is this a hosted engine
>> setup?
>>
>> Nir
>>
>
> yes, this is  a hosted engine setup.
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 installation

[knarra]

On 08/17/2016 04:57 PM, Nir Soffer wrote:

On Wed, Aug 17, 2016 at 10:16 AM, knarra  wrote:

Hi,

   I see the below error  logged in vdsm.log file . can some one help me
understand what this error is and do we have any bug for this error?

  JsonRpc (StompReactor)::ERROR::2016-08-17
12:32:05,348::betterAsyncore::113::vds.dispatcher::(recv) SSL error during
reading data: unexpected eof

This means the client disconnected in unclean way, Is this a hosted engine
setup?

Nir


yes, this is  a hosted engine setup.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 installation

[Nir Soffer]

On Wed, Aug 17, 2016 at 10:16 AM, knarra  wrote:
> Hi,
>
>   I see the below error  logged in vdsm.log file . can some one help me
> understand what this error is and do we have any bug for this error?
>
>  JsonRpc (StompReactor)::ERROR::2016-08-17
> 12:32:05,348::betterAsyncore::113::vds.dispatcher::(recv) SSL error during
> reading data: unexpected eof

This means the client disconnected in unclean way, Is this a hosted engine
setup?

Nir
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 and multipath.conf for HPE 3PAR. What do you advise?

[Nir Soffer]

On Sat, Aug 13, 2016 at 4:03 PM,   wrote:
> Hello, oVirt guru's !
>
> I installed oVirt 4.0 on several servers HP ProLiant DL360 G5 with 
> QLogic/Emulex 4G dual-port HBAs.
> These servers have multipath connection to the storage system HP 3PAR 7200.
>
> Before installing oVirt to servers I set up the configuration file 
> /etc/multipath.conf according to the vendor recommendations from document 
> "HPE 3PAR Red Hat Enterprise Linux and Oracle Linux Implementation Guide 
> (emr_na-c04448818-9.pdf)"
> https://blog.it-kb.ru/2016/06/12/configuring-device-mapper-multipathing-dm-multipat-mpio-in-centos-linux-7-2-with-emulex-and-qlogic-fc-hba-connecting-over-san-storage-hp-3par-7200-3par-os-3-2-2/
>
> Before installing oVirt my multipath.conf was the:
>
> ---> start of /etc/multipath.conf <-
>
> defaults {
> polling_interval 10

This will cause delays in path checking, better use the default from vdsm conf

> user_friendly_names no
> find_multipaths yes

This ensures that devices with single path will not be detected by ovirt, unless
the device is listed in the "multipaths" section. This means you will have to
update multipath.conf manually on all hosts each time you want to add
a new device.
It is recommended to keep the default from vdsm.conf

> }
> blacklist {
> devnode "^cciss\/c[0-9]d[0-9]*"

Not sure why you need this, but this seems harmless

> }
> multipaths {
>multipath {
>wwid   360002ac00016cec9
>alias  3par-vv2
>}
>multipath {
>wwid   360002ac00017cec9
>alias  3par-vv1
>   }
> }
> devices {
> device {
> vendor "3PARdata"
> product "VV"
> path_grouping_policy group_by_prio
> path_selector "round-robin 0"
> path_checker tur
> features "0"
> hardware_handler "1 alua"
> prio alua
> failback immediate
> rr_weight uniform
> no_path_retry 18

This means 18 retries, and with polling internal of 10 seconds, 180 second
timeout when all paths has become faulty. This will cause long timeouts in
various vdsm operations, leading to timeouts on engine side, and also
increase the chance of a host becoming non-operational because of delay
in storage monitoring.

It is recommended to use small number of retries, like 4, to avoid long delays
in vdsm.

> rr_min_io_rq 1
> detect_prio yes
> }
> }
> ---> end of /etc/multipath.conf <-
>
> But after installing oVirt file multipath.conf has changed to:
>
> ---> start of /etc/multipath.conf <-
> defaults {
> polling_interval5
> no_path_retry   fail

You can change this to small number like 4, to match other configuration.

> user_friendly_names no
> flush_on_last_del   yes
> fast_io_fail_tmo5
> dev_loss_tmo30
> max_fds 4096

You should keep these values, unless the storage vendor has
a good reason to change them.

> }
> devices {
> device {
> all_devsyes
> no_path_retry   fail

I would change this to:

no_path_retry 4

> }
> }
> ---> end of /etc/multipath.conf <-
>
> Now I'm not sure that this configuration is optimal. What do you advise?

1. Add your changes to the file created by vdsm
2. Update no_path_retry to small number (e.g 4)
3. Add "# VDSM PRIVATE" to the second line - the first 2 lines should be:

# VDSM REVISION 1.2
# VDSM PRIVATE

With the "# VDSM PRIVATE" tag, vdsm will never overwrite multipath.conf.
You need to update this file on all hosts manually.

4. Copy multipath.conf to all hosts
5. Reload multipathd on all hosts:

systemctl reload multipathd

Nir
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 and multipath.conf for HPE 3PAR. What do you advise?

[Yaniv Dary]

Changing multpath  conf is not supported, since this file is managed by
VDSM.
It should work well for the oVirt use case. Configuration should be changed
via the manager if needed and not via the conf.

Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109

Tel : +972 (9) 7692306
8272306
Email: yd...@redhat.com
IRC : ydary


On Sat, Aug 13, 2016 at 4:03 PM,  wrote:

> Hello, oVirt guru's !
>
> I installed oVirt 4.0 on several servers HP ProLiant DL360 G5 with
> QLogic/Emulex 4G dual-port HBAs.
> These servers have multipath connection to the storage system HP 3PAR 7200.
>
> Before installing oVirt to servers I set up the configuration file
> /etc/multipath.conf according to the vendor recommendations from document
> "HPE 3PAR Red Hat Enterprise Linux and Oracle Linux Implementation Guide
> (emr_na-c04448818-9.pdf)"
> https://blog.it-kb.ru/2016/06/12/configuring-device-mapper-
> multipathing-dm-multipat-mpio-in-centos-linux-7-2-with-
> emulex-and-qlogic-fc-hba-connecting-over-san-storage-
> hp-3par-7200-3par-os-3-2-2/
>
> Before installing oVirt my multipath.conf was the:
>
> ---> start of /etc/multipath.conf <-
>
> defaults {
> polling_interval 10
> user_friendly_names no
> find_multipaths yes
> }
> blacklist {
> devnode "^cciss\/c[0-9]d[0-9]*"
> }
> multipaths {
>multipath {
>wwid   360002ac00016cec9
>alias  3par-vv2
>}
>multipath {
>wwid   360002ac00017cec9
>alias  3par-vv1
>   }
> }
> devices {
> device {
> vendor "3PARdata"
> product "VV"
> path_grouping_policy group_by_prio
> path_selector "round-robin 0"
> path_checker tur
> features "0"
> hardware_handler "1 alua"
> prio alua
> failback immediate
> rr_weight uniform
> no_path_retry 18
> rr_min_io_rq 1
> detect_prio yes
> }
> }
> ---> end of /etc/multipath.conf <-
>
> But after installing oVirt file multipath.conf has changed to:
>
> ---> start of /etc/multipath.conf <-
> defaults {
> polling_interval5
> no_path_retry   fail
> user_friendly_names no
> flush_on_last_del   yes
> fast_io_fail_tmo5
> dev_loss_tmo30
> max_fds 4096
> }
> devices {
> device {
> all_devsyes
> no_path_retry   fail
> }
> }
> ---> end of /etc/multipath.conf <-
>
> Now I'm not sure that this configuration is optimal. What do you advise?
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Arsène Gschwind]

I think I've found the problem, a typo in hostname and the certificate 
are also created with the wrong FQDN.

Sometime you just don't see the problem on first approach.

Many thanks for your help
Regards,
Arsène


On 08/08/2016 10:58 AM, Simone Tiraboschi wrote:

On Mon, Aug 8, 2016 at 10:54 AM, Arsène Gschwind
 wrote:

Status up-to-date  : False
Hostname   : 
Host ID: 1

The issue is that on both the host you just see the status of host 1,
which is also not up-to-date at host 2 eyes, and you miss host 2.

Can you please check the status of ovirt-ha-agent and ovirt-ha-broker
services and share your /var/log/ovirt-hosted-engine-ha/agent.log from
the problematic host?


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Simone Tiraboschi]

On Mon, Aug 8, 2016 at 10:54 AM, Arsène Gschwind
 wrote:
> Status up-to-date  : False
> Hostname   : 
> Host ID: 1

The issue is that on both the host you just see the status of host 1,
which is also not up-to-date at host 2 eyes, and you miss host 2.

Can you please check the status of ovirt-ha-agent and ovirt-ha-broker
services and share your /var/log/ovirt-hosted-engine-ha/agent.log from
the problematic host?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Arsène Gschwind]

On 08/08/2016 10:22 AM, Simone Tiraboschi wrote:

On Sun, Aug 7, 2016 at 3:42 PM, Arsène Gschwind
 wrote:

Hi,

I have an oVirt setup with 2 server using hosted-engine, both server
resgistered properly the hosted-engine using :
# hosted-engine --deploy

but for some reason the second isn't recognized as a host for hosted-engine
and I'm not able to migrate the hosted-engine.
The error I get when trying to migrate:

Cannot migrate VM. There is no host that satisfies current scheduling
constraints. See below for details:
The host xx did not satisfy internal filter HA because it is not a
Hosted Engine host..

I've tried to redeploy the hosted-engine but this will fail since the host
already exists in the management DB.
I've tried to redeploy the host using the GUI when editing the Host and set
DEPLOY at Hosted Engine but in that case the Event just says the
configuration was updated but nothing happens.

Is there a way to check if the host is registered as hosted-engine host?

Can you please execute hosted-engine --vm-status on the problematic host?

Here's the result from the host where hosted engine is running:

Status up-to-date  : True
Hostname   : xx
Host ID: 1
Engine status  : {"health": "good", "vm": "up", 
"detail": "up"}

Score  : 3400
stopped: False
Local maintenance  : False
crc32  : 3c9dd013
Host timestamp : 82115
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=82115 (Mon Aug  8 10:44:12 2016)
host-id=1
score=3400
maintenance=False
state=EngineUp
stopped=False

And this is from the problematic host:

Status up-to-date  : False
Hostname   : 
Host ID: 1
Engine status  : unknown stale-data
Score  : 3400
stopped: False
Local maintenance  : False
crc32  : 6c959fce
Host timestamp : 82149
Extra metadata (valid at timestamp):
metadata_parse_version=1
metadata_feature_version=1
timestamp=82149 (Mon Aug  8 10:44:45 2016)
host-id=1
score=3400
maintenance=False
state=EngineUp
stopped=False



Do you see any hosted-engine score for it in the engine?

It seems the score is the same on both host

Thanks,
Arsène



How could I register it correctly?

Let me know if you need any logs.
Thanks for any hint.

Regards,
Arsène


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Simone Tiraboschi]

On Sun, Aug 7, 2016 at 3:42 PM, Arsène Gschwind
 wrote:
> Hi,
>
> I have an oVirt setup with 2 server using hosted-engine, both server
> resgistered properly the hosted-engine using :
> # hosted-engine --deploy
>
> but for some reason the second isn't recognized as a host for hosted-engine
> and I'm not able to migrate the hosted-engine.
> The error I get when trying to migrate:
>
> Cannot migrate VM. There is no host that satisfies current scheduling
> constraints. See below for details:
> The host xx did not satisfy internal filter HA because it is not a
> Hosted Engine host..
>
> I've tried to redeploy the hosted-engine but this will fail since the host
> already exists in the management DB.
> I've tried to redeploy the host using the GUI when editing the Host and set
> DEPLOY at Hosted Engine but in that case the Event just says the
> configuration was updated but nothing happens.
>
> Is there a way to check if the host is registered as hosted-engine host?

Can you please execute hosted-engine --vm-status on the problematic host?

Do you see any hosted-engine score for it in the engine?

> How could I register it correctly?
>
> Let me know if you need any logs.
> Thanks for any hint.
>
> Regards,
> Arsène
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Arsène Gschwind]

Hi,

Thanks for your help...

The scheduling policy is set to none
I've set the "Enable HA Reservation" property and also install the 
macspoof hook and power management is configured correctly and seems to 
work but all that didn't help .


Regargs,

Arsène


On 08/07/2016 04:50 PM, Yanir Quinn wrote:

Hi,

Under Clusters-> your cluster -> Scheduling policy :
1. What is your selected policy and what properties does it contains ?
2. Under Additional Properties , is "Enable HA Reservation" selected ?

Also check if your host has the necessary hooks (e.g. macspoof) as in 
the first host you deployed the hosted engine on

and that it has power management enabled.

Regards,
Yanir Quinn




On Sun, Aug 7, 2016 at 4:42 PM, Arsène Gschwind 
> wrote:


Hi,

I have an oVirt setup with 2 server using hosted-engine, both
server resgistered properly the hosted-engine using :
# hosted-engine --deploy

but for some reason the second isn't recognized as a host for
hosted-engine and I'm not able to migrate the hosted-engine.
The error I get when trying to migrate:

  * Cannot migrate VM. There is no host that satisfies current
scheduling constraints. See below for details:
  * The host xx did not satisfy internal filter HA because it
is not a Hosted Engine host..

I've tried to redeploy the hosted-engine but this will fail since
the host already exists in the management DB.
I've tried to redeploy the host using the GUI when editing the
Host and set DEPLOY at Hosted Engine but in that case the Event
just says the configuration was updated but nothing happens.

Is there a way to check if the host is registered as hosted-engine
host?
How could I register it correctly?

Let me know if you need any logs.
Thanks for any hint.

Regards,
Arsène


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Hosted Engine

[Yanir Quinn]

Hi,

Under Clusters-> your cluster -> Scheduling policy :
1. What is your selected policy and what properties does it contains ?
2. Under Additional Properties , is "Enable HA Reservation" selected ?

Also check if your host has the necessary hooks (e.g. macspoof) as in the
first host you deployed the hosted engine on
and that it has power management enabled.

Regards,
Yanir Quinn




On Sun, Aug 7, 2016 at 4:42 PM, Arsène Gschwind 
wrote:

> Hi,
>
> I have an oVirt setup with 2 server using hosted-engine, both server
> resgistered properly the hosted-engine using :
> # hosted-engine --deploy
>
> but for some reason the second isn't recognized as a host for
> hosted-engine and I'm not able to migrate the hosted-engine.
> The error I get when trying to migrate:
>
>
>- Cannot migrate VM. There is no host that satisfies current
>scheduling constraints. See below for details:
>- The host xx did not satisfy internal filter HA because it is not
>a Hosted Engine host..
>
> I've tried to redeploy the hosted-engine but this will fail since the host
> already exists in the management DB.
> I've tried to redeploy the host using the GUI when editing the Host and
> set DEPLOY at Hosted Engine but in that case the Event just says the
> configuration was updated but nothing happens.
>
> Is there a way to check if the host is registered as hosted-engine host?
> How could I register it correctly?
>
> Let me know if you need any logs.
> Thanks for any hint.
>
> Regards,
> Arsène
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 hosted engine deploy

[Edward Haas]

On Mon, Jul 4, 2016 at 12:36 PM, Roy Golan  wrote:

>
>
> On Mon, Jul 4, 2016 at 12:23 PM, qinglong.d...@horebdata.cn <
> qinglong.d...@horebdata.cn> wrote:
>
>> Hi, all
>> I got an error when I excuted "hosted-engine --deploy" on centos
>> 7.0
>>
>
> We don't support 7.0 you need Centos 7.2
>
> If you are running 7.2 look at /var/log/vdsm/vdsm.log to see why it isn't
> functional
>
>>
>>
>
>> [root@node ~]# hosted-engine --deploy
>> [ INFO  ] Stage: Initializing
>> [ INFO  ] Generating a temporary VNC password.
>> [ INFO  ] Stage: Environment setup
>>   During customization use CTRL-D to abort.
>>
>>   Continuing will configure this host for serving as hypervisor and 
>> create a VM where you have to install the engine afterwards.
>>   Are you sure you want to continue? (Yes, No)[Yes]:
>> [ INFO  ] Hardware supports virtualization
>>   Configuration files: []
>>
>>   Log file: 
>> /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.log
>>   Version: otopi-1.5.0 (otopi-1.5.0-1.el7.centos)
>> [ INFO  ] Stage: Environment packages setup
>> [ INFO  ] Stage: Programs detection
>> [ INFO  ] Stage: Environment setup
>> [ INFO  ] Waiting for VDSM to reply
>> ..
>> [ INFO  ] Waiting for VDSM to reply
>>
>> [ ERROR ] Failed to execute stage 'Environment setup': Couldnt  connect to 
>> VDSM within 240 seconds
>> [ INFO  ] Stage: Clean up
>>
>> [ INFO  ] Generating answer file 
>> '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160704171138.conf'
>> [ INFO  ] Stage: Pre-termination
>> [ INFO  ] Stage: Termination
>>
>> [ ERROR ] Hosted Engine deployment failed: this system is not reliable, 
>> please check the issue, fix and redeploy
>>
>>   Log file is located at 
>> /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.log
>>
>
Could you please send the setup log?
Disabling IPv6 is just a workaround, everything should work fine when IPv6
is enabled.


>
>> Anyone can help? Thanks!
>> --
>>
>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 /patternfly contrast?

[SGhosh]

https://bugzilla.redhat.com/show_bug.cgi?id=1354140


On 07/09/2016 08:04 AM, Sandro Bonazzola wrote:


Can you please open a bz attaching the screenshot?

Il 08/Lug/2016 04:25, "SGhosh" > ha scritto:


Hi

Running ovirt 4.0 on CentOS 7 - and the gui color contrast seems
to be off.

I am seeing very low readability with the white text on light blue
selection bar (attached).

Any tweaks?

-subhendu


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 /patternfly contrast?

[Sandro Bonazzola]

Can you please open a bz attaching the screenshot?
Il 08/Lug/2016 04:25, "SGhosh"  ha scritto:

> Hi
>
> Running ovirt 4.0 on CentOS 7 - and the gui color contrast seems to be off.
>
> I am seeing very low readability with the white text on light blue
> selection bar (attached).
>
> Any tweaks?
>
> -subhendu
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 /patternfly contrast?

[Alastair Neil]

Absolutely +1

On 7 July 2016 at 22:25, SGhosh  wrote:

> Hi
>
> Running ovirt 4.0 on CentOS 7 - and the gui color contrast seems to be off.
>
> I am seeing very low readability with the white text on light blue
> selection bar (attached).
>
> Any tweaks?
>
> -subhendu
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 hosted-engine deploy fail on fc domain

[Simone Tiraboschi]

On Fri, Jul 8, 2016 at 12:17 PM, NUNIN Roberto  wrote:
> Hello
>
> I’m in trouble deploying hosted-engine on a fresh-installed Centos7.2
> server, chosing fc domain:
>
>
>
> [ ERROR ] Failed to execute stage 'Environment customization': 'devList'
>
>
>
> Installation ends with error, following the versions of ovirt installed
> software:
>
>
>
> ovirt-hosted-engine-setup-2.0.0.2-1.el7.centos.noarch
>
> ovirt-engine-sdk-python-3.6.7.0-1.el7.centos.noarch
>
> ovirt-setup-lib-1.0.2-1.el7.centos.noarch
>
> ovirt-host-deploy-1.5.0-1.el7.centos.noarch
>
> ovirt-imageio-daemon-0.3.0-0.201606191345.git9f3d6d4.el7.centos.noarch
>
> ovirt-vmconsole-host-1.0.3-1.el7.centos.noarch
>
> ovirt-release40-4.0.0-5.noarch
>
> ovirt-vmconsole-1.0.3-1.el7.centos.noarch
>
> ovirt-hosted-engine-ha-2.0.0-1.el7.centos.noarch
>
> libgovirt-0.3.3-1.el7_2.1.x86_64
>
> ovirt-imageio-common-0.3.0-0.201606191345.git9f3d6d4.el7.centos.noarch
>
>
>
> Here part of the log:
>
>
>
> 2016-07-08 11:46:08 DEBUG otopi.plugins.otopi.dialog.human
> dialog.__logString:204 DIALOG:SEND Please specify the
> storage you would like to use (glusterfs, iscsi, fc, nfs3, nfs4)[nfs3]:
>
> 2016-07-08 11:46:11 DEBUG otopi.plugins.otopi.dialog.human
> dialog.__logString:204 DIALOG:RECEIVEfc
>
> 2016-07-08 11:46:11 DEBUG otopi.context context.dumpEnvironment:760
> ENVIRONMENT DUMP - BEGIN
>
> 2016-07-08 11:46:11 DEBUG otopi.context context.dumpEnvironment:770 ENV
> OVEHOSTED_STORAGE/domainType=str:'fc'
>
> 2016-07-08 11:46:11 DEBUG otopi.context context.dumpEnvironment:774
> ENVIRONMENT DUMP - END
>
> 2016-07-08 11:46:11 DEBUG otopi.context context._executeMethod:128 Stage
> customization METHOD
> otopi.plugins.gr_he_setup.storage.blockd.Plugin._customization
>
> 2016-07-08 11:46:11 DEBUG otopi.plugins.gr_he_setup.storage.blockd
> blockd._fc_get_lun_list:404 {'status': {'message': 'Done', 'code': 0},
> 'items': [{u'status': u'free', u'vendorID': u'3PARdata', u'capacity':
> u'1099511627776', u'fwrev': u'3122', u'vgUUID': u'', u'pvsize': u'',
> u'pathlist': [], u'logicalblocksize': u'512', u'pathstatus': [{u'capacity':
> u'1099511627776', u'physdev': u'sdb', u'type': u'FCP', u'state': u'active',
> u'lun': u'1'}, {u'capacity': u'1099511627776', u'physdev': u'sdc', u'type':
> u'FCP', u'state': u'active', u'lun': u'1'}, {u'capacity': u'1099511627776',
> u'physdev': u'sdd', u'type': u'FCP', u'state': u'active', u'lun': u'1'},
> {u'capacity': u'1099511627776', u'physdev': u'sde', u'type': u'FCP',
> u'state': u'active', u'lun': u'1'}, {u'capacity': u'1099511627776',
> u'physdev': u'sdf', u'type': u'FCP', u'state': u'active', u'lun': u'1'},
> {u'capacity': u'1099511627776', u'physdev': u'sdg', u'type': u'FCP',
> u'state': u'active', u'lun': u'1'}, {u'capacity': u'1099511627776',
> u'physdev': u'sdh', u'type': u'FCP', u'state': u'active', u'lun': u'1'},
> {u'capacity': u'1099511627776', u'physdev': u'sdi', u'type': u'FCP',
> u'state': u'active', u'lun': u'1'}], u'devtype': u'FCP',
> u'physicalblocksize': u'512', u'pvUUID': u'', u'serial':
> u'S3PARdataVV_1619775', u'GUID': u'360002ac01d0060964d3f',
> u'productID': u'VV'}]}
>
> 2016-07-08 11:46:11 DEBUG otopi.context context._executeMethod:142 method
> exception
>
> Traceback (most recent call last):
>
>   File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in
> _executeMethod
>
> method['method']()
>
>   File
> "/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/gr-he-setup/storage/blockd.py",
> line 612, in _customization
>
> lunGUID = self._customize_lun(self.domainType, target)
>
>   File
> "/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/gr-he-setup/storage/blockd.py",
> line 212, in _customize_lun
>
> available_luns = self._fc_get_lun_list()
>
>   File
> "/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/gr-he-setup/storage/blockd.py",
> line 407, in _fc_get_lun_list
>
> for device in devices['devList']:
>
> KeyError: 'devList'
>
> ERROR otopi.context context._executeMethod:151 Failed to execute stage
> 'Environment customization': 'devList'
>
> ….
>
> FC volume is hosted on an HP 3PAR storage array.
>
>
>
> It is available, under multipathd, to the OS:
>
>
>
> [root@xxx-yyy-xxx ~]# multipath -l
>
> 360002ac01d0060964d3f dm-2 3PARdata,VV
>
> size=1.0T features='1 queue_if_no_path' hwhandler='0' wp=rw
>
> `-+- policy='round-robin 0' prio=0 status=active
>
>   |- 2:0:11:1 sdi 8:128 active undef running
>
>   |- 1:0:9:1  sdd 8:48  active undef running
>
>   |- 2:0:7:1  sdg 8:96  active undef running
>
>   |- 1:0:1:1  sdc 8:32  active undef running
>
>   |- 2:0:6:1  sdf 8:80  active undef running
>
>   |- 1:0:0:1  sdb 8:16  active undef running
>
>   |- 2:0:8:1  sdh 8:112 active undef running
>
>   `- 1:0:10:1 sde 8:64  active undef running
>
> [root@xxx-yyy-xxx ~]#
>
>
>
> Must I submit other relevant logs ? Which one ?
>
> Thanks in advance.

Hi Roberto,
we already opened a bug on it:

Re: [ovirt-users] ovirt 4.0 /patternfly contrast?

[Gianluca Cecchi]

On Fri, Jul 8, 2016 at 4:25 AM, SGhosh  wrote:

> Hi
>
> Running ovirt 4.0 on CentOS 7 - and the gui color contrast seems to be off.
>
> I am seeing very low readability with the white text on light blue
> selection bar (attached).
>
> Any tweaks?
>
> -subhendu
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
I agree.
Yes, the problem is with selected lines (see also my screenshot that
confirms it) and it happens by default if you have only one line in the
pane (es only one datacenter and you are in datacenters pane).
I think the black could be kept also for selected lines, or not?
Or at least to change the overlay color.

https://drive.google.com/file/d/0BwoPbcrMv8mvbnhVMnp2M1NWdEU/view?usp=sharing

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Melissa Mesler]

A, okay. I never had this happen prior to 4.0 obviously so it threw
me off. Thank you!
 
 
On Wed, Jul 6, 2016, at 10:23 AM, Ravi Nori wrote:
> This happens when you are on the login screen and the server is
> restarted or the session times out due to inactivity.
> The welcome page maintains a session state which is passed to and back
> from SSO module. The error is raised when the state is lost due to
> session timeout/engine restart
> Ravi
>
> On Wed, Jul 6, 2016 at 11:00 AM, Ralf Schenk  wrote:
>> Hello,
>> I've got this, too. But I thought this to be normal since the session-
>> timeout was reached.
>> Bye
>>
>> Am 06.07.2016 um 04:08 schrieb Melissa Mesler:
>>> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
>>> admin page, it will give me and error that says "Request state does
>>> not match session state." Then if I go through the process of
>>> logging in again, it will go through with no issue. It doesn't do
>>> this every time but it does do it quite often. Any ideas on why?  -
>>> MeLLy ___ Users mailing
>>> list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
>>>
>>
>> --
>>
>>


>>
>>
>> *Ralf Schenk* fon +49 (0) 24 05 / 40 83 70[1] fax +49 (0) 24 05 / 40
>> 83 759[2]  mail *r...@databay.de*
>>
>> *Databay AG* Jens-Otto-Krag-Straße 11 D-52146 Würselen
>> *www.databay.de* Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE
>> 210844202 Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch
>> Yavari, Dipl.-Kfm. Philipp Hermanns Aufsichtsratsvorsitzender:
>> Wilhelm Dohmen
>>
>>
>> ___
>>  Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
> _
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> Email had 1 attachment:


>  * logo_databay_email.gif 2k (image/gif)
 

Links:

  1. tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%2070
  2. tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%20759
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Ravi Nori]

This happens when you are on the login screen and the server is restarted
or the session times out due to inactivity.

The welcome page maintains a session state which is passed to and back from
SSO module. The error is raised when the state is lost due to session
timeout/engine restart

Ravi

On Wed, Jul 6, 2016 at 11:00 AM, Ralf Schenk  wrote:

> Hello,
>
> I've got this, too. But I thought this to be normal since the
> session-timeout was reached.
>
> Bye
>
> Am 06.07.2016 um 04:08 schrieb Melissa Mesler:
>
> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
> admin page, it will give me and error that says "Request state does not
> match session state." Then if I go through the process of logging in
> again, it will go through with no issue. It doesn't do this every time
> but it does do it quite often. Any ideas on why?
>
> - MeLLy
> ___
> Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>
>
> --
>
>
> *Ralf Schenk*
> fon +49 (0) 24 05 / 40 83 70
> fax +49 (0) 24 05 / 40 83 759
> mail *r...@databay.de* 
>
> *Databay AG*
> Jens-Otto-Krag-Straße 11
> D-52146 Würselen
> *www.databay.de* 
>
> Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
> Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
> Philipp Hermanns
> Aufsichtsratsvorsitzender: Wilhelm Dohmen
> --
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Ralf Schenk]

Hello,

I've got this, too. But I thought this to be normal since the
session-timeout was reached.

Bye


Am 06.07.2016 um 04:08 schrieb Melissa Mesler:
> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
> admin page, it will give me and error that says "Request state does not
> match session state." Then if I go through the process of logging in
> again, it will go through with no issue. It doesn't do this every time
> but it does do it quite often. Any ideas on why?
>
> - MeLLy
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

-- 


*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
fax +49 (0) 24 05 / 40 83 759
mail *r...@databay.de* 

*Databay AG*
Jens-Otto-Krag-Straße 11
D-52146 Würselen
*www.databay.de* 

Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
Philipp Hermanns
Aufsichtsratsvorsitzender: Wilhelm Dohmen


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Oved Ourfali]

Ravi - thoughts on this one?

On Wed, Jul 6, 2016 at 4:34 PM, Melissa Mesler 
wrote:

> here is the engine.log: http://pastebin.com/bTPWYi9x
> server.log:http://pastebin.com/2KfjvWF3
> console.log: http://pastebin.com/T4seBaNX
>
>
> On Wed, Jul 6, 2016, at 01:33 AM, Oved Ourfali wrote:
>
> Hi Melissa
>
> Can you attach the engine logs?
>
> Thanks,
> Oved
>
> On Wed, Jul 6, 2016 at 5:08 AM, Melissa Mesler 
> wrote:
>
> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
> admin page, it will give me and error that says "Request state does not
> match session state." Then if I go through the process of logging in
> again, it will go through with no issue. It doesn't do this every time
> but it does do it quite often. Any ideas on why?
>
> - MeLLy
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Melissa Mesler]

here is the engine.log: http://pastebin.com/bTPWYi9x
server.log:http://pastebin.com/2KfjvWF3
console.log: http://pastebin.com/T4seBaNX
 
 
On Wed, Jul 6, 2016, at 01:33 AM, Oved Ourfali wrote:
> Hi Melissa
>
> Can you attach the engine logs?
>
> Thanks,
> Oved
>
> On Wed, Jul 6, 2016 at 5:08 AM, Melissa Mesler
>  wrote:
>> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
>>  admin page, it will give me and error that says "Request state
>>  does not
>>  match session state." Then if I go through the process of logging in
>>  again, it will go through with no issue. It doesn't do this
>>  every time
>>  but it does do it quite often. Any ideas on why?
>>
>>  - MeLLy
>>  ___
>>  Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 engine access

[qinglong.d...@horebdata.cn]

Thanks! No specific reasons. I use IP in ovirt 3.6 and it seems simple to use 
an IP address in some cases.




From: Yedidyah Bar David
Date: 2016-07-06 14:26
To: qinglong.d...@horebdata.cn
CC: users; 胡茂荣; 胡晓宇
Subject: Re: [ovirt-users] ovirt 4.0 engine access
On Wed, Jul 6, 2016 at 9:13 AM, qinglong.d...@horebdata.cn
<qinglong.d...@horebdata.cn> wrote:
> Hi, all
> I am using ovirt 4.0. It seems that I could only use FQDN to access
> the website of engine. Is it possible to use IP to access the website?
 
No.
 
You can only access the engine using the FQDN you input when running
engine-setup.
You should add it to the DNS if it's not there already. You can also add it to
your local hosts file.
 
You can also change the FQDN using [1], but this will still not allow using an
IP address.
 
Any specific reason you need to access it using an IP address?
 
[1] 
https://www.ovirt.org/documentation/how-to/networking/changing-engine-hostname/
 
Best,
-- 
Didi
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Login Issue

[Oved Ourfali]

Hi Melissa

Can you attach the engine logs?

Thanks,
Oved

On Wed, Jul 6, 2016 at 5:08 AM, Melissa Mesler 
wrote:

> I am running 4.0 on CentOS 7.2. Sometimes when I first log in to the
> admin page, it will give me and error that says "Request state does not
> match session state." Then if I go through the process of logging in
> again, it will go through with no issue. It doesn't do this every time
> but it does do it quite often. Any ideas on why?
>
> - MeLLy
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 engine access

[Yedidyah Bar David]

On Wed, Jul 6, 2016 at 9:13 AM, qinglong.d...@horebdata.cn
 wrote:
> Hi, all
> I am using ovirt 4.0. It seems that I could only use FQDN to access
> the website of engine. Is it possible to use IP to access the website?

No.

You can only access the engine using the FQDN you input when running
engine-setup.
You should add it to the DNS if it's not there already. You can also add it to
your local hosts file.

You can also change the FQDN using [1], but this will still not allow using an
IP address.

Any specific reason you need to access it using an IP address?

[1] 
https://www.ovirt.org/documentation/how-to/networking/changing-engine-hostname/

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 hosted engine deploy

[qinglong.d...@horebdata.cn]

Thanks, I have solved this problem. It seems that IPv6 has not been disabled 
actually.
 
From: qinglong.d...@horebdata.cn
Date: 2016-07-05 14:57
To: Roy Golan
CC: users
Subject: Re: Re: [ovirt-users] ovirt 4.0 hosted engine deploy
Yes, IPv6 was enabled before. Now I think it has been disabled.

output of  "vdsClient -s 0 getVdsCaps":

[root@node ~]# vdsClient -s 0 getVdsCaps
HBAInventory = {'FC': [], 'iSCSI': [{'InitiatorName': 
'iqn.1994-05.com.redhat:2bcb704cbce4'}]}
ISCSIInitiatorName = 'iqn.1994-05.com.redhat:2bcb704cbce4'
additionalFeatures = []
autoNumaBalancing = 0
bondings = {'bond0': {'active_slave': '',
  'addr': '',
  'cfg': {'BONDING_OPTS': 'mode=0', 'BOOTPROTO': 
'none'},
  'dhcpv4': False,
  'dhcpv6': False,
  'gateway': '',
  'hwaddr': 'd2:96:d0:98:31:62',
  'ipv4addrs': [],
  'ipv6addrs': [],
  'ipv6autoconf': True,
  'ipv6gateway': '::',
  'mtu': '1500',
  'netmask': '',
  'opts': {'mode': '0'},
  'slaves': [],
  'switch': 'legacy'}}
bridges = {}
clusterLevels = ['3.5', '3.6', '4.0']
cpuCores = '4'
cpuFlags = 
'fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,ht,tm,pbe,syscall,nx,pdpe1gb,rdtscp,lm,constant_tsc,arch_perfmon,pebs,bts,rep_good,nopl,xtopology,nonstop_tsc,aperfmperf,eagerfpu,pni,pclmulqdq,dtes64,monitor,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm,pcid,dca,sse4_1,sse4_2,x2apic,popcnt,tsc_deadline_timer,aes,xsave,avx,f16c,rdrand,lahf_lm,ida,arat,epb,pln,pts,dtherm,tpr_shadow,vnmi,flexpriority,ept,vpid,fsgsbase,smep,erms,xsaveopt,model_Nehalem,model_Conroe,model_coreduo,model_core2duo,model_Penryn,model_IvyBridge,model_Westmere,model_n270,model_SandyBridge'
cpuModel = 'Intel(R) Xeon(R) CPU E5-1620 v2 @ 3.70GHz'
cpuSockets = '1'
cpuSpeed = '2324.496'
cpuThreads = '8'
dnss = ['140.207.198.6']
emulatedMachines = ['pc-i440fx-rhel7.1.0',
'rhel6.3.0',
'pc-q35-rhel7.2.0',
'pc-i440fx-rhel7.0.0',
'rhel6.1.0',
'rhel6.6.0',
'rhel6.2.0',
'pc',
'pc-q35-rhel7.0.0',
'pc-q35-rhel7.1.0',
'q35',
'pc-i440fx-rhel7.2.0',
'rhel6.4.0',
'rhel6.0.0',
'rhel6.5.0']
guestOverhead = '65'
hooks = {'before_device_create': {'50_vmfex': {'md5': 
'e05994261acaea7dcf4b88ea0e81f1f5'}},
 'before_device_migrate_destination': {'50_vmfex': {'md5': 
'e05994261acaea7dcf4b88ea0e81f1f5'}},
 'before_nic_hotplug': {'50_vmfex': {'md5': 
'e05994261acaea7dcf4b88ea0e81f1f5'}},
 'before_vm_start': {'50_hostedengine': {'md5': 
'2a6d96c26a3599812be6cf1a13d9f485'}}}
hostdevPassthrough = 'false'
kdumpStatus = 0
kernelArgs = 'BOOT_IMAGE=/vmlinuz-3.10.0-327.22.2.el7.x86_64 
root=UUID=de9c1960-b3a0-435c-9e77-05b08ebda832 ro crashkernel=auto rhgb quiet 
LANG=en_US.UTF-8'
kvmEnabled = 'true'
lastClient = '::1'
lastClientIface = 'lo'
liveMerge = 'true'
liveSnapshot = 'true'
memSize = '31907'
netConfigDirty = 'False'
networks = {}
nics = {'enp6s0f0': {'addr': '192.168.128.60',
 'cfg': {'BOOTPROTO': 'none',
 'DEFROUTE': 'yes',
 'DEVICE': 'enp6s0f0',
 'IPADDR': '192.168.128.60',
 'IPV4_FAILURE_FATAL': 'no',
 'IPV6INIT': 'no',
 'NAME': 'enp6s0f0',
 'NETMASK': '255.255.255.0',
 'ONBOOT': 'yes',
 'PEERDNS': 'yes',
 'PEERROUTES': 'yes',
 'TYPE': 'Ethernet',
 'UUID': 
'64215e21-e12e-4a2b-9c1e-3e636df61487'},
 'dhcpv4': False,
 'dhcpv6': False,
 'gateway': '',
 'hwaddr': '00:1e:67:a5:1b:ee',
 'ipv4addrs': ['192.168

Re: [ovirt-users] ovirt 4.0 hosted engine deploy

[qinglong.d...@horebdata.cn]

e': '2.el7',
   'version': '3.7.12'},
 'kernel': {'buildtime': 1466672711.0,
'release': '327.22.2.el7.x86_64',
'version': '3.10.0'},
 'librbd1': {'buildtime': 1448036424, 'release': '3.el7', 
'version': '0.80.7'},
 'libvirt': {'buildtime': 1466692118,
 'release': '13.el7_2.5',
 'version': '1.2.17'},
 'mom': {'buildtime': 1464686497,
 'release': '1.el7.centos',
 'version': '0.5.4'},
 'qemu-img': {'buildtime': 1461573104,
  'release': '31.el7_2.10.1',
  'version': '2.3.0'},
 'qemu-kvm': {'buildtime': 1461573104,
  'release': '31.el7_2.10.1',
  'version': '2.3.0'},
 'spice-server': {'buildtime': 1465308266,
  'release': '15.el7_2.1',
  'version': '0.12.4'},
 'vdsm': {'buildtime': 1466710303,
  'release': '0.el7.centos',
  'version': '4.18.4.1'}}
reservedMem = '321'
rngSources = ['random']
selinux = {'mode': '1'}
software_revision = '0'
software_version = '4.18'
supportedENGINEs = ['3.5', '3.6', '4.0']
supportsIPv6 = True
uuid = '617DC761-B9B4-E311-AF6C-001E67A51BEE'
version_name = 'Snow Man'
vlans = {}
vmTypes = ['kvm']
 
From: Roy Golan
Date: 2016-07-05 14:30
To: qinglong.d...@horebdata.cn
CC: users
Subject: Re: Re: [ovirt-users] ovirt 4.0 hosted engine deploy

On Tue, Jul 5, 2016 at 5:37 AM, qinglong.d...@horebdata.cn 
<qinglong.d...@horebdata.cn> wrote:
Reactor thread::INFO::2016-07-04 
17:52:04,607::protocoldetector::72::ProtocolDetector.AcceptorImpl::(handle_accept)
 Accepting connection from ::1:45016

I see you are getting connections from IPv6 and I think it should be disabled. 
Make sure you follow the vdsm install guidelines. 

Also can you share the output of 
```bash
vdsClient -s 0 getVdsCaps
```



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through a reverse proxy

[Colin Coe]

Hi all

I've logged case 01662585 with GSS.

I see that RHEV 4.0 beta is in the customer support portal, I'm going to
see if we can upgrade our current DEV RHEV environment to 4.0 BETA so we
can start testing early.

Thanks



On Mon, Jul 4, 2016 at 5:39 PM, Martin Perina  wrote:

> Hi,
>
> first let me explain more thoroughly how things works in 4.0. Here's a bit
> simplified login flow:
>
> 1. Let's assume that ovirt.example.com was set as FQDN during engine-setup
> 2. User tries to access http://ovirt.example.com/ovirt-engine/webadmin
> 3. SSO authentication filters checks if user is authenticated and if not,
> user is redirected to
> https://ovirt.example.com/ovirt-engine/sso/login.html
> 4. User enters its username/password and if successfully authenticated,
> user is redirected back to original URL:
> http://ovirt.example.com/ovirt-engine/webadmin
>
> Here are installation use cases which we assumed to be mostly used for
> oVirt (let's assume that engine is installed at host1.example.com, your
> proxy host is proxy1.example.com and you want you oVirt instance to
> accessed using alias ovirt.example.com):
>
> 1. Most users don't use any proxy, so the easiest method is to setup DNS
> alias ovirt.example.com pointing to host1.example.com and after that use
> ovirt.example.com during engine-setup as engine FQDN
>
> 2. If host1.example.com is in your internal network and you want
> ovirt.example.com to be accessible from both internal network and
> Internet you need to do the following:
>   - For you internal clients you need to do the same steps as in 1. in
> your internal DNS server
>   - For your external (Internet) clients you need to create another
> DNS alias ovirt.example.com pointing to your firewall (for example to
> host firewall.example.com) in your external DNS server and setup proper
> port forwarding from firewall.example.com to host1.example.com
>
> 3. If you need to use different FQDN for engine (for example you want to
> use proxy proxy1.example.com), then some manual config is required:
>   - Execute engine-setup and use host1.example.com as engine FQDN
>   - Setup you proxy in proxy1.example.com as in previous versions
>   - Setup your DNS and add DNS alias ovirt.example.com pointing to
> proxy1.example.com
>   - Go to host1.example.com and create new file
> /etc/ovirt-engine/engine.conf.d/99-setup-http-proxy.conf with following
> content
>ENGINE_SSO_AUTH_URL="
> https://ovirt.example.com:443/ovirt-engine/sso;
>SSO_CALLBACK_PREFIX_CHECK=false
>
>   - Restart ovirt-engine service
>
> After above steps your oVirt instance can be accessed using
> http://ovirt.example.com, but all traffic to it will be redirected
> through your proxy at proxy1.example.com.
>
>
> If none of above scenarios are usable for you, then please describe
> thoroughly your current setup. We may be help you with additional manual
> configuration or we will need to create an RFE bug for oVirt.
>
> Thanks
>
> Martin Perina
>
>
>
> On Mon, Jul 4, 2016 at 1:36 AM, Colin Coe  wrote:
>
>> Hi all
>>
>> If this is correct, it is a massive problem for us.  We're still on RHEV
>> v3.5 ATM but have plans to move to RHEV v4 when it looks production ready.
>>
>> Many of our users are external parties that access the RHEV user portal
>> externally via a (Juniper) reverse proxy appliance.  The RHEV user
>> portal URL gets rewritten to the URL of the Juniper appliance.
>>
>> Should I file a bug on this, or an RFE?
>>
>> Thanks
>>
>> On Sun, Jul 3, 2016 at 5:16 PM, Martin Perina  wrote:
>>
>>> Hi,
>>> In 4.0 you can access oVirt engine only with the same FQDN that was
>>> specified during engine-setup. If you have used different FQDN, you may
>>> change it using ovirt-engine-rename tool.
>>>
>>> Martin Perina
>>>
>>>
>>> On Sunday, July 3, 2016, Yaniv Dary  wrote:
>>> >
>>> > Yaniv Dary
>>> > Technical Product Manager
>>> > Red Hat Israel Ltd.
>>> > 34 Jerusalem Road
>>> > Building A, 4th floor
>>> > Ra'anana, Israel 4350109
>>> >
>>> > Tel : +972 (9) 7692306
>>> > 8272306
>>> > Email: yd...@redhat.com
>>> > IRC : ydary
>>>
>>> >
>>> > -- Forwarded message --
>>> > From: COUSIN Kevin 
>>> > Date: Thu, Jun 30, 2016 at 5:31 PM
>>> > Subject: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt
>>> through a reverse proxy
>>> > To: users@ovirt.org
>>> >
>>> >
>>> > Hi list,
>>> >
>>> > I upgraded to oVirt 4.0 and it works fine. However, I used HAProxy to
>>> > access oVirt outside my LAN. It doesn't work anymore since I upgraded
>>> > to 4.0. It seems the oVirt Manager URL is rewritten by the SSO engine.
>>> > eg: ovirt.externaldomain.tld -> ovirtmanager.internaldomain.tld.
>>> >
>>> > Is it possible to disable this  behaviour and stay with
>>> > ovirt.externaldomain.tld ?
>>> >
>>> > Regards
>>> >
>>> > --
>>> > COUSIN Kevin 

Re: [ovirt-users] ovirt 4.0 hosted engine deploy

[qinglong.d...@horebdata.cn]

Yes, I am running 7.2. Here are the vdsm logs when I excuted "hosted-engine 
--deploy"

Reactor thread::INFO::2016-07-04 
17:51:49,584::protocoldetector::72::ProtocolDetector.AcceptorImpl::(handle_accept)
 Accepting connection from ::1:45014
Reactor thread::DEBUG::2016-07-04 
17:51:49,589::protocoldetector::85::ProtocolDetector.Detector::(__init__) Using 
required_size=11
Reactor thread::INFO::2016-07-04 
17:51:49,589::protocoldetector::121::ProtocolDetector.Detector::(handle_read) 
Detected protocol xml from ::1:45014
Reactor thread::DEBUG::2016-07-04 
17:51:49,589::bindingxmlrpc::1275::XmlDetector::(handle_socket) xml over http 
detected from ('::1', 45014)
BindingXMLRPC::INFO::2016-07-04 
17:51:49,589::xmlrpc::73::vds.XMLRPCServer::(handle_request) Starting request 
handler for ::1:45014
Thread-32::INFO::2016-07-04 
17:51:49,590::xmlrpc::83::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45014 started
Thread-32::INFO::2016-07-04 
17:51:49,591::xmlrpc::91::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45014 stopped
Reactor thread::INFO::2016-07-04 
17:52:04,607::protocoldetector::72::ProtocolDetector.AcceptorImpl::(handle_accept)
 Accepting connection from ::1:45016
Reactor thread::DEBUG::2016-07-04 
17:52:04,611::protocoldetector::85::ProtocolDetector.Detector::(__init__) Using 
required_size=11
Reactor thread::INFO::2016-07-04 
17:52:04,611::protocoldetector::121::ProtocolDetector.Detector::(handle_read) 
Detected protocol xml from ::1:45016
Reactor thread::DEBUG::2016-07-04 
17:52:04,611::bindingxmlrpc::1275::XmlDetector::(handle_socket) xml over http 
detected from ('::1', 45016)
BindingXMLRPC::INFO::2016-07-04 
17:52:04,612::xmlrpc::73::vds.XMLRPCServer::(handle_request) Starting request 
handler for ::1:45016
Thread-33::INFO::2016-07-04 
17:52:04,612::xmlrpc::83::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45016 started
Thread-33::INFO::2016-07-04 
17:52:04,613::xmlrpc::91::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45016 stopped
Reactor thread::INFO::2016-07-04 
17:52:19,616::protocoldetector::72::ProtocolDetector.AcceptorImpl::(handle_accept)
 Accepting connection from ::1:45018
Reactor thread::DEBUG::2016-07-04 
17:52:19,620::protocoldetector::85::ProtocolDetector.Detector::(__init__) Using 
required_size=11
Reactor thread::INFO::2016-07-04 
17:52:19,621::protocoldetector::121::ProtocolDetector.Detector::(handle_read) 
Detected protocol xml from ::1:45018
Reactor thread::DEBUG::2016-07-04 
17:52:19,621::bindingxmlrpc::1275::XmlDetector::(handle_socket) xml over http 
detected from ('::1', 45018)
BindingXMLRPC::INFO::2016-07-04 
17:52:19,621::xmlrpc::73::vds.XMLRPCServer::(handle_request) Starting request 
handler for ::1:45018
Thread-34::INFO::2016-07-04 
17:52:19,621::xmlrpc::83::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45018 started
Thread-34::INFO::2016-07-04 
17:52:19,622::xmlrpc::91::vds.XMLRPCServer::(_process_requests) Request handler 
for ::1:45018 stopped
..

It seems that a few messages come out every 15 seconds. Is vdsmd running at a 
healthy status?




 
From: Roy Golan
Date: 2016-07-04 17:36
To: qinglong.d...@horebdata.cn
CC: users
Subject: Re: [ovirt-users] ovirt 4.0 hosted engine deploy


On Mon, Jul 4, 2016 at 12:23 PM, qinglong.d...@horebdata.cn 
<qinglong.d...@horebdata.cn> wrote:
Hi, all
I got an error when I excuted "hosted-engine --deploy" on centos 7.0

We don't support 7.0 you need Centos 7.2  

If you are running 7.2 look at /var/log/vdsm/vdsm.log to see why it isn't 
functional  
 

[root@node ~]# hosted-engine --deploy
[ INFO  ] Stage: Initializing
[ INFO  ] Generating a temporary VNC password.
[ INFO  ] Stage: Environment setup
  During customization use CTRL-D to abort.
  Continuing will configure this host for serving as hypervisor and 
create a VM where you have to install the engine afterwards.
  Are you sure you want to continue? (Yes, No)[Yes]: 
[ INFO  ] Hardware supports virtualization
  Configuration files: []
  Log file: 
/var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.log
  Version: otopi-1.5.0 (otopi-1.5.0-1.el7.centos)
[ INFO  ] Stage: Environment packages setup
[ INFO  ] Stage: Programs detection
[ INFO  ] Stage: Environment setup
[ INFO  ] Waiting for VDSM to reply
..
[ INFO  ] Waiting for VDSM to reply
[ ERROR ] Failed to execute stage 'Environment setup': Couldnt  connect to VDSM 
within 240 seconds
[ INFO  ] Stage: Clean up
[ INFO  ] Generating answer file 
'/var/lib/ovirt-hosted-engine-setup/answers/answers-20160704171138.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ ERROR ] Hosted Engine deployment failed: this system is not reliable, please 
check the issue, fix and redeploy
  Log file is located at 
/var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.lo

Re: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through a reverse proxy

[Martin Perina]

Hi,

first let me explain more thoroughly how things works in 4.0. Here's a bit
simplified login flow:

1. Let's assume that ovirt.example.com was set as FQDN during engine-setup
2. User tries to access http://ovirt.example.com/ovirt-engine/webadmin
3. SSO authentication filters checks if user is authenticated and if not,
user is redirected to https://ovirt.example.com/ovirt-engine/sso/login.html
4. User enters its username/password and if successfully authenticated,
user is redirected back to original URL:
http://ovirt.example.com/ovirt-engine/webadmin

Here are installation use cases which we assumed to be mostly used for
oVirt (let's assume that engine is installed at host1.example.com, your
proxy host is proxy1.example.com and you want you oVirt instance to
accessed using alias ovirt.example.com):

1. Most users don't use any proxy, so the easiest method is to setup DNS
alias ovirt.example.com pointing to host1.example.com and after that use
ovirt.example.com during engine-setup as engine FQDN

2. If host1.example.com is in your internal network and you want
ovirt.example.com to be accessible from both internal network and Internet
you need to do the following:
  - For you internal clients you need to do the same steps as in 1. in
your internal DNS server
  - For your external (Internet) clients you need to create another DNS
alias ovirt.example.com pointing to your firewall (for example to host
firewall.example.com) in your external DNS server and setup proper port
forwarding from firewall.example.com to host1.example.com

3. If you need to use different FQDN for engine (for example you want to
use proxy proxy1.example.com), then some manual config is required:
  - Execute engine-setup and use host1.example.com as engine FQDN
  - Setup you proxy in proxy1.example.com as in previous versions
  - Setup your DNS and add DNS alias ovirt.example.com pointing to
proxy1.example.com
  - Go to host1.example.com and create new file
/etc/ovirt-engine/engine.conf.d/99-setup-http-proxy.conf with following
content
   ENGINE_SSO_AUTH_URL="
https://ovirt.example.com:443/ovirt-engine/sso;
   SSO_CALLBACK_PREFIX_CHECK=false

  - Restart ovirt-engine service

After above steps your oVirt instance can be accessed using
http://ovirt.example.com, but all traffic to it will be redirected through
your proxy at proxy1.example.com.


If none of above scenarios are usable for you, then please describe
thoroughly your current setup. We may be help you with additional manual
configuration or we will need to create an RFE bug for oVirt.

Thanks

Martin Perina



On Mon, Jul 4, 2016 at 1:36 AM, Colin Coe  wrote:

> Hi all
>
> If this is correct, it is a massive problem for us.  We're still on RHEV
> v3.5 ATM but have plans to move to RHEV v4 when it looks production ready.
>
> Many of our users are external parties that access the RHEV user portal
> externally via a (Juniper) reverse proxy appliance.  The RHEV user
> portal URL gets rewritten to the URL of the Juniper appliance.
>
> Should I file a bug on this, or an RFE?
>
> Thanks
>
> On Sun, Jul 3, 2016 at 5:16 PM, Martin Perina  wrote:
>
>> Hi,
>> In 4.0 you can access oVirt engine only with the same FQDN that was
>> specified during engine-setup. If you have used different FQDN, you may
>> change it using ovirt-engine-rename tool.
>>
>> Martin Perina
>>
>>
>> On Sunday, July 3, 2016, Yaniv Dary  wrote:
>> >
>> > Yaniv Dary
>> > Technical Product Manager
>> > Red Hat Israel Ltd.
>> > 34 Jerusalem Road
>> > Building A, 4th floor
>> > Ra'anana, Israel 4350109
>> >
>> > Tel : +972 (9) 7692306
>> > 8272306
>> > Email: yd...@redhat.com
>> > IRC : ydary
>>
>> >
>> > -- Forwarded message --
>> > From: COUSIN Kevin 
>> > Date: Thu, Jun 30, 2016 at 5:31 PM
>> > Subject: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt
>> through a reverse proxy
>> > To: users@ovirt.org
>> >
>> >
>> > Hi list,
>> >
>> > I upgraded to oVirt 4.0 and it works fine. However, I used HAProxy to
>> > access oVirt outside my LAN. It doesn't work anymore since I upgraded
>> > to 4.0. It seems the oVirt Manager URL is rewritten by the SSO engine.
>> > eg: ovirt.externaldomain.tld -> ovirtmanager.internaldomain.tld.
>> >
>> > Is it possible to disable this  behaviour and stay with
>> > ovirt.externaldomain.tld ?
>> >
>> > Regards
>> >
>> > --
>> > COUSIN Kevin 
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.0 hosted engine deploy

[Roy Golan]

On Mon, Jul 4, 2016 at 12:23 PM, qinglong.d...@horebdata.cn <
qinglong.d...@horebdata.cn> wrote:

> Hi, all
> I got an error when I excuted "hosted-engine --deploy" on centos
> 7.0
>

We don't support 7.0 you need Centos 7.2

If you are running 7.2 look at /var/log/vdsm/vdsm.log to see why it isn't
functional

>
>

> [root@node ~]# hosted-engine --deploy
> [ INFO  ] Stage: Initializing
> [ INFO  ] Generating a temporary VNC password.
> [ INFO  ] Stage: Environment setup
>   During customization use CTRL-D to abort.
>
>   Continuing will configure this host for serving as hypervisor and 
> create a VM where you have to install the engine afterwards.
>   Are you sure you want to continue? (Yes, No)[Yes]:
> [ INFO  ] Hardware supports virtualization
>   Configuration files: []
>
>   Log file: 
> /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.log
>   Version: otopi-1.5.0 (otopi-1.5.0-1.el7.centos)
> [ INFO  ] Stage: Environment packages setup
> [ INFO  ] Stage: Programs detection
> [ INFO  ] Stage: Environment setup
> [ INFO  ] Waiting for VDSM to reply
> ..
> [ INFO  ] Waiting for VDSM to reply
>
> [ ERROR ] Failed to execute stage 'Environment setup': Couldnt  connect to 
> VDSM within 240 seconds
> [ INFO  ] Stage: Clean up
>
> [ INFO  ] Generating answer file 
> '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160704171138.conf'
> [ INFO  ] Stage: Pre-termination
> [ INFO  ] Stage: Termination
>
> [ ERROR ] Hosted Engine deployment failed: this system is not reliable, 
> please check the issue, fix and redeploy
>
>   Log file is located at 
> /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160704170730-e6bm6x.log
>
> Anyone can help? Thanks!
> --
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through a reverse proxy

[Yaniv Dary]

RFE is the correct ticket type.

Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109

Tel : +972 (9) 7692306
8272306
Email: yd...@redhat.com
IRC : ydary

On Jul 4, 2016 02:36, "Colin Coe"  wrote:

> Hi all
>
> If this is correct, it is a massive problem for us.  We're still on RHEV
> v3.5 ATM but have plans to move to RHEV v4 when it looks production ready.
>
> Many of our users are external parties that access the RHEV user portal
> externally via a (Juniper) reverse proxy appliance.  The RHEV user
> portal URL gets rewritten to the URL of the Juniper appliance.
>
> Should I file a bug on this, or an RFE?
>
> Thanks
>
> On Sun, Jul 3, 2016 at 5:16 PM, Martin Perina  wrote:
>
>> Hi,
>> In 4.0 you can access oVirt engine only with the same FQDN that was
>> specified during engine-setup. If you have used different FQDN, you may
>> change it using ovirt-engine-rename tool.
>>
>> Martin Perina
>>
>>
>> On Sunday, July 3, 2016, Yaniv Dary  wrote:
>> >
>> > Yaniv Dary
>> > Technical Product Manager
>> > Red Hat Israel Ltd.
>> > 34 Jerusalem Road
>> > Building A, 4th floor
>> > Ra'anana, Israel 4350109
>> >
>> > Tel : +972 (9) 7692306
>> > 8272306
>> > Email: yd...@redhat.com
>> > IRC : ydary
>>
>> >
>> > -- Forwarded message --
>> > From: COUSIN Kevin 
>> > Date: Thu, Jun 30, 2016 at 5:31 PM
>> > Subject: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt
>> through a reverse proxy
>> > To: users@ovirt.org
>> >
>> >
>> > Hi list,
>> >
>> > I upgraded to oVirt 4.0 and it works fine. However, I used HAProxy to
>> > access oVirt outside my LAN. It doesn't work anymore since I upgraded
>> > to 4.0. It seems the oVirt Manager URL is rewritten by the SSO engine.
>> > eg: ovirt.externaldomain.tld -> ovirtmanager.internaldomain.tld.
>> >
>> > Is it possible to disable this  behaviour and stay with
>> > ovirt.externaldomain.tld ?
>> >
>> > Regards
>> >
>> > --
>> > COUSIN Kevin 
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through a reverse proxy

[Colin Coe]

Hi all

If this is correct, it is a massive problem for us.  We're still on RHEV
v3.5 ATM but have plans to move to RHEV v4 when it looks production ready.

Many of our users are external parties that access the RHEV user portal
externally via a (Juniper) reverse proxy appliance.  The RHEV user
portal URL gets rewritten to the URL of the Juniper appliance.

Should I file a bug on this, or an RFE?

Thanks

On Sun, Jul 3, 2016 at 5:16 PM, Martin Perina  wrote:

> Hi,
> In 4.0 you can access oVirt engine only with the same FQDN that was
> specified during engine-setup. If you have used different FQDN, you may
> change it using ovirt-engine-rename tool.
>
> Martin Perina
>
>
> On Sunday, July 3, 2016, Yaniv Dary  wrote:
> >
> > Yaniv Dary
> > Technical Product Manager
> > Red Hat Israel Ltd.
> > 34 Jerusalem Road
> > Building A, 4th floor
> > Ra'anana, Israel 4350109
> >
> > Tel : +972 (9) 7692306
> > 8272306
> > Email: yd...@redhat.com
> > IRC : ydary
>
> >
> > -- Forwarded message --
> > From: COUSIN Kevin 
> > Date: Thu, Jun 30, 2016 at 5:31 PM
> > Subject: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt
> through a reverse proxy
> > To: users@ovirt.org
> >
> >
> > Hi list,
> >
> > I upgraded to oVirt 4.0 and it works fine. However, I used HAProxy to
> > access oVirt outside my LAN. It doesn't work anymore since I upgraded
> > to 4.0. It seems the oVirt Manager URL is rewritten by the SSO engine.
> > eg: ovirt.externaldomain.tld -> ovirtmanager.internaldomain.tld.
> >
> > Is it possible to disable this  behaviour and stay with
> > ovirt.externaldomain.tld ?
> >
> > Regards
> >
> > --
> > COUSIN Kevin 
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> >
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through a reverse proxy

[Martin Perina]

Hi,
In 4.0 you can access oVirt engine only with the same FQDN that was
specified during engine-setup. If you have used different FQDN, you may
change it using ovirt-engine-rename tool.

Martin Perina


On Sunday, July 3, 2016, Yaniv Dary  wrote:
>
> Yaniv Dary
> Technical Product Manager
> Red Hat Israel Ltd.
> 34 Jerusalem Road
> Building A, 4th floor
> Ra'anana, Israel 4350109
>
> Tel : +972 (9) 7692306
> 8272306
> Email: yd...@redhat.com
> IRC : ydary
>
> -- Forwarded message --
> From: COUSIN Kevin 
> Date: Thu, Jun 30, 2016 at 5:31 PM
> Subject: [ovirt-users] [oVirt 4.0] Is it possible to access oVirt through
a reverse proxy
> To: users@ovirt.org
>
>
> Hi list,
>
> I upgraded to oVirt 4.0 and it works fine. However, I used HAProxy to
> access oVirt outside my LAN. It doesn't work anymore since I upgraded
> to 4.0. It seems the oVirt Manager URL is rewritten by the SSO engine.
> eg: ovirt.externaldomain.tld -> ovirtmanager.internaldomain.tld.
>
> Is it possible to disable this  behaviour and stay with
> ovirt.externaldomain.tld ?
>
> Regards
>
> --
> COUSIN Kevin 
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Host install fail cause of dnf api

[Yedidyah Bar David]

On Sun, Jun 26, 2016 at 11:47 AM, Pilař Vojtěch <pi...@nconzo.cz> wrote:
> Thank you for confirming my thoughts.
>
> There is an easier way, than to use completely different build - i used 
> gerrit [1] repo and found the minidnf.py file, where the signture checking is 
> and simply removed it for the time being.
>
> If anyone is interested you can "fix" it in:
>
> /usr/lib/python2.7/site-packages/otopi/minidnf.py and remove L:626-638
>
>
> [1] https://gerrit.ovirt.org/#/c/59494/1/src/otopi/minidnf.py

Well, some people might disagree about what's "easier", but thanks for
your report anyway!

You can also check the git log of otopi-1.5 branch in [1], to see other
changes you get from the nightly snapshot:

[1] 
https://gerrit.ovirt.org/gitweb?p=otopi.git;a=shortlog;h=refs/heads/otopi-1.5

Best,

>
> Best Regards,
> Vojtech
>
>
> 
> Od: Yedidyah Bar David <d...@redhat.com>
> Odesláno: 26. června 2016 8:50
> Komu: Pilař Vojtěch
> Kopie: users@ovirt.org
> Předmět: Re: [ovirt-users] oVirt 4.0 Host install fail cause of dnf api
>
> On Sat, Jun 25, 2016 at 9:22 PM, Pilař Vojtěch <pi...@nconzo.cz> wrote:
>>
>> Hi all,
>>
>> iam trying to install host from oVirt Engine Web Admin, but with no success
>> so far. Everything dies on sigCheckPkg bug from dnf
>> (https://bugzilla.redhat.com/show_bug.cgi?id=1344270).
>
> Indeed.
>
> Above bug can only be fixed once dnf publishes an official api for
> checking signatures. For now we just dropped the check, see this bug:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1343382
>
> which is targeted to 4.0.1.
>
>>
>> 2016-06-25 19:36:22 INFO otopi.plugins.otopi.packagers.dnfpackager
>> dnfpackager.info:79 DNF Downloaded libselinux-python-2.4-4.fc23.x86_64.rpm
>> The 'sigCheckPkg' function is not a part of DNF API and will be removed in
>> the upcoming DNF release. Please use only officially supported API
>> functions. DNF API documentation is available at
>> https://dnf.readthedocs.org/en/latest/api.html.
>> 2016-06-25 19:36:22 ERROR otopi.plugins.otopi.packagers.dnfpackager
>> dnfpackager.error:84 DNF 'NoneType' object is not iterable
>> 2016-06-25 19:36:22 DEBUG otopi.plugins.otopi.packagers.dnfpackager
>> dnfpackager.verbose:75 DNF Closing transaction with rollback
>>
>> Is there any workaround? I see no way to deploy hosts.
>
> For now the only workaround I am aware of is to use a fixed
> build, which you can get from jenkins [1] or from the nightly snapshots [2].
>
> [1] http://jenkins.ovirt.org/job/otopi_4.0_build-artifacts-el7-x86_64/
> [2] 
> https://www.ovirt.org/develop/dev-process/install-nightly-snapshot/#from-40-branches
>
> Best,
> --
> Didi



-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Host install fail cause of dnf api

[Pilař Vojtěch]

Thank you for confirming my thoughts. 

There is an easier way, than to use completely different build - i used gerrit 
[1] repo and found the minidnf.py file, where the signture checking is and 
simply removed it for the time being.

If anyone is interested you can "fix" it in:

/usr/lib/python2.7/site-packages/otopi/minidnf.py and remove L:626-638  


[1] https://gerrit.ovirt.org/#/c/59494/1/src/otopi/minidnf.py

Best Regards,
Vojtech



Od: Yedidyah Bar David <d...@redhat.com>
Odesláno: 26. června 2016 8:50
Komu: Pilař Vojtěch
Kopie: users@ovirt.org
Předmět: Re: [ovirt-users] oVirt 4.0 Host install fail cause of dnf api

On Sat, Jun 25, 2016 at 9:22 PM, Pilař Vojtěch <pi...@nconzo.cz> wrote:
>
> Hi all,
>
> iam trying to install host from oVirt Engine Web Admin, but with no success
> so far. Everything dies on sigCheckPkg bug from dnf
> (https://bugzilla.redhat.com/show_bug.cgi?id=1344270).

Indeed.

Above bug can only be fixed once dnf publishes an official api for
checking signatures. For now we just dropped the check, see this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1343382

which is targeted to 4.0.1.

>
> 2016-06-25 19:36:22 INFO otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.info:79 DNF Downloaded libselinux-python-2.4-4.fc23.x86_64.rpm
> The 'sigCheckPkg' function is not a part of DNF API and will be removed in
> the upcoming DNF release. Please use only officially supported API
> functions. DNF API documentation is available at
> https://dnf.readthedocs.org/en/latest/api.html.
> 2016-06-25 19:36:22 ERROR otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.error:84 DNF 'NoneType' object is not iterable
> 2016-06-25 19:36:22 DEBUG otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.verbose:75 DNF Closing transaction with rollback
>
> Is there any workaround? I see no way to deploy hosts.

For now the only workaround I am aware of is to use a fixed
build, which you can get from jenkins [1] or from the nightly snapshots [2].

[1] http://jenkins.ovirt.org/job/otopi_4.0_build-artifacts-el7-x86_64/
[2] 
https://www.ovirt.org/develop/dev-process/install-nightly-snapshot/#from-40-branches

Best,
--
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 Host install fail cause of dnf api

[Yedidyah Bar David]

On Sat, Jun 25, 2016 at 9:22 PM, Pilař Vojtěch  wrote:
>
> Hi all,
>
> iam trying to install host from oVirt Engine Web Admin, but with no success
> so far. Everything dies on sigCheckPkg bug from dnf
> (https://bugzilla.redhat.com/show_bug.cgi?id=1344270).

Indeed.

Above bug can only be fixed once dnf publishes an official api for
checking signatures. For now we just dropped the check, see this bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1343382

which is targeted to 4.0.1.

>
> 2016-06-25 19:36:22 INFO otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.info:79 DNF Downloaded libselinux-python-2.4-4.fc23.x86_64.rpm
> The 'sigCheckPkg' function is not a part of DNF API and will be removed in
> the upcoming DNF release. Please use only officially supported API
> functions. DNF API documentation is available at
> https://dnf.readthedocs.org/en/latest/api.html.
> 2016-06-25 19:36:22 ERROR otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.error:84 DNF 'NoneType' object is not iterable
> 2016-06-25 19:36:22 DEBUG otopi.plugins.otopi.packagers.dnfpackager
> dnfpackager.verbose:75 DNF Closing transaction with rollback
>
> Is there any workaround? I see no way to deploy hosts.

For now the only workaround I am aware of is to use a fixed
build, which you can get from jenkins [1] or from the nightly snapshots [2].

[1] http://jenkins.ovirt.org/job/otopi_4.0_build-artifacts-el7-x86_64/
[2] 
https://www.ovirt.org/develop/dev-process/install-nightly-snapshot/#from-40-branches

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Melissa Mesler]

Okay so I deleted the certificate and added it again. The login page
works for now. I'll report back any more issues.
 
 
On Sat, Jun 25, 2016, at 01:45 PM, Melissa Mesler wrote:
> Pardon my ignorance on the sos report but how do I run one of those?
>
>
> On Sat, Jun 25, 2016, at 01:52 AM, Sandro Bonazzola wrote:
>>
>>
>> Il 25/Giu/2016 01:38, "Melissa Mesler"  ha
>> scritto:
>> >
>> > Okay I finally got past the install.. Everything went fine. I then
>> > bring it up in the web browser, add the certs, confirm security
>> > exception and then nothing. There is nothing in the ovirt-
>> > engine/engine.log to help guide me.
>> >
>>
>>
>> Can you please share a sos report?
>>
>>
>> >
>> > On Fri, Jun 24, 2016, at 01:59 PM, Martin Perina wrote:
>> >>
>> >> Could you please share installation log from /var/log/ovirt-
>> >> engine/setup ?
>> >> Thanks
>> >> Martin Perina
>> >>
>> >> On Fri, Jun 24, 2016 at 6:31 PM, Melissa Mesler
>> >>  wrote:
>> >>>
>> >>> Also, this is in the engine-setup logs:
>> >>> 2016-06-24 11:04:08 ERROR
>> >>> otopi.plugins.ovirt_engine_common.base.core.misc
>> >>> misc._terminate:148
>> >>> Execution of setup failed
>> >>>
>> >>> On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
>> >>> > I am doing a clean install of Ovirt 4.0. Upon executing engine-
>> >>> > setup
>> >>> > with all default values, it fails. This is the error during
>> >>> > setup:
>> >>> >
>> >>> > [ ERROR ] Failed to execute stage 'Misc configuration': Command
>> >>> > '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
>> >>> >
>> >>> >
>> >>> > Any ideas?
>> >>> ___
>> >>> Users mailing list
>> >>> Users@ovirt.org
>> >>> http://lists.ovirt.org/mailman/listinfo/users
>> >
>> >
>> >
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>> >
>>
>
> _
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Melissa Mesler]

Pardon my ignorance on the sos report but how do I run one of those?
 
 
On Sat, Jun 25, 2016, at 01:52 AM, Sandro Bonazzola wrote:
>
> Il 25/Giu/2016 01:38, "Melissa Mesler"  ha
> scritto:
>  >
>  > Okay I finally got past the install.. Everything went fine. I then
>  > bring it up in the web browser, add the certs, confirm security
>  > exception and then nothing. There is nothing in the ovirt-
>  > engine/engine.log to help guide me.
>  >
> Can you please share a sos report?
> >
>  > On Fri, Jun 24, 2016, at 01:59 PM, Martin Perina wrote:
>  >>
>  >> Could you please share installation log from /var/log/ovirt-
>  >> engine/setup ?
>  >> Thanks
>  >> Martin Perina
>  >>
>  >> On Fri, Jun 24, 2016 at 6:31 PM, Melissa Mesler
>  >>  wrote:
>  >>>
>  >>> Also, this is in the engine-setup logs:
>  >>> 2016-06-24 11:04:08 ERROR
>  >>> otopi.plugins.ovirt_engine_common.base.core.misc
>  >>> misc._terminate:148
>  >>> Execution of setup failed
>  >>>
>  >>> On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
>  >>> > I am doing a clean install of Ovirt 4.0. Upon executing engine-
>  >>> > setup
>  >>> > with all default values, it fails. This is the error during
>  >>> > setup:
>  >>> >
>  >>> > [ ERROR ] Failed to execute stage 'Misc configuration': Command
>  >>> > '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
>  >>> >
>  >>> >
>  >>> > Any ideas?
>  >>> ___
>  >>> Users mailing list
>  >>> Users@ovirt.org
>  >>> http://lists.ovirt.org/mailman/listinfo/users
>  >
>  >
>  >
>  > ___
>  > Users mailing list
>  > Users@ovirt.org
>  > http://lists.ovirt.org/mailman/listinfo/users
>  >
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Sandro Bonazzola]

Il 25/Giu/2016 01:38, "Melissa Mesler"  ha scritto:
>
> Okay I finally got past the install.. Everything went fine. I then bring
it up in the web browser, add the certs, confirm security exception and
then nothing. There is nothing in the ovirt-engine/engine.log to help guide
me.
>

Can you please share a sos report?

>
> On Fri, Jun 24, 2016, at 01:59 PM, Martin Perina wrote:
>>
>> Could you please share installation log from /var/log/ovirt-engine/setup
?
>> Thanks
>> Martin Perina
>>
>> On Fri, Jun 24, 2016 at 6:31 PM, Melissa Mesler 
wrote:
>>>
>>> Also, this is in the engine-setup logs:
>>> 2016-06-24 11:04:08 ERROR
>>> otopi.plugins.ovirt_engine_common.base.core.misc misc._terminate:148
>>> Execution of setup failed
>>>
>>> On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
>>> > I am doing a clean install of Ovirt 4.0. Upon executing engine-setup
>>> > with all default values, it fails. This is the error during setup:
>>> >
>>> > [ ERROR ] Failed to execute stage 'Misc configuration': Command
>>> > '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
>>> >
>>> >
>>> > Any ideas?
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Melissa Mesler]

Okay I finally got past the install.. Everything went fine. I then
bring it up in the web browser, add the certs, confirm security
exception and then nothing. There is nothing in the ovirt-
engine/engine.log to help guide me.
 
 
On Fri, Jun 24, 2016, at 01:59 PM, Martin Perina wrote:
> Could you please share installation log from /var/log/ovirt-
> engine/setup ?
> Thanks
> Martin Perina
>
> On Fri, Jun 24, 2016 at 6:31 PM, Melissa Mesler
>  wrote:
>> Also, this is in the engine-setup logs:
>>  2016-06-24 11:04:08 ERROR
>>  otopi.plugins.ovirt_engine_common.base.core.misc misc._terminate:148
>>  Execution of setup failed
>>
>>  On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
>>  > I am doing a clean install of Ovirt 4.0. Upon executing engine-
>>  > setup
>>  > with all default values, it fails. This is the error during setup:
>>  >
>>  > [ ERROR ] Failed to execute stage 'Misc configuration': Command
>>  > '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
>>  >
>>  >
>>  > Any ideas?
>>  ___
>>  Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Martin Perina]

Could you please share installation log from /var/log/ovirt-engine/setup ?

Thanks

Martin Perina

On Fri, Jun 24, 2016 at 6:31 PM, Melissa Mesler 
wrote:

> Also, this is in the engine-setup logs:
> 2016-06-24 11:04:08 ERROR
> otopi.plugins.ovirt_engine_common.base.core.misc misc._terminate:148
> Execution of setup failed
>
> On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
> > I am doing a clean install of Ovirt 4.0. Upon executing engine-setup
> > with all default values, it fails. This is the error during setup:
> >
> > [ ERROR ] Failed to execute stage 'Misc configuration': Command
> > '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
> >
> >
> > Any ideas?
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt 4.0 Engine Setup Failure

[Melissa Mesler]

Also, this is in the engine-setup logs:
2016-06-24 11:04:08 ERROR
otopi.plugins.ovirt_engine_common.base.core.misc misc._terminate:148
Execution of setup failed

On Fri, Jun 24, 2016, at 11:08 AM, Melissa Mesler wrote:
> I am doing a clean install of Ovirt 4.0. Upon executing engine-setup
> with all default values, it fails. This is the error during setup:
> 
> [ ERROR ] Failed to execute stage 'Misc configuration': Command
> '/usr/bin/ovirt-aaa-jdbc-tool' failed to execute
> 
> 
> Any ideas?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 hosted-engine deploy exits without messages or logs

[Gianluca Cecchi]

On Fri, May 13, 2016 at 10:43 AM, Gianluca Cecchi  wrote:

> On Thu, May 12, 2016 at 3:32 PM, Sandro Bonazzola wrote:
>
>>
>>
>>
>> I strongly suggest to use master. In particular, I strongly suggest to us
>> oVirt Node Next ISO for hosts and the engine appliance for the deployment.
>> Installing Hosted Engine using Cockpit Web UI has been a nice experience
>> yesterday.
>> https://twitter.com/SandroBonazzola/status/730426730515673092
>>
>> Be sure to install also the new dashboard package once your Hosted Engine
>> is up, that's another nice thing to see in action.
>>
>>
> It seems master from yesterday, attempting self hosted engine on nfs3 with
> hypervisor on CentOS 7.2 gives:
>
> [ INFO  ] Stage: Transaction setup
> [ INFO  ] Stage: Misc configuration
> [ INFO  ] Stage: Package installation
> [ INFO  ] Stage: Misc configuration
> [ INFO  ] Configuring libvirt
> [ INFO  ] Configuring VDSM
> [ INFO  ] Starting vdsmd
> [ INFO  ] Creating Storage Domain
> [ INFO  ] Creating Storage Pool
> [ INFO  ] Connecting Storage Pool
> [ INFO  ] Verifying sanlock lockspace initialization
> [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101]
> Network is unreachable
> [ INFO  ] Stage: Clean up
>
>
It seems I get the same problem with 4.0 beta too...
At least basic sh engine install should work in a beta, I think

[ INFO  ] Creating Storage Domain
[ INFO  ] Creating Storage Pool
[ INFO  ] Connecting Storage Pool
[ INFO  ] Verifying sanlock lockspace initialization
[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network
is unreachable
[ INFO  ] Stage: Clean up
[ INFO  ] Generating answer file
'/var/lib/ovirt-hosted-engine-setup/answers/answers-20160531110857.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ ERROR ] Hosted Engine deployment failed: this system is not reliable,
please check the issue, fix and redeploy


Inside ovirt-hosted-engine-setup initially I see an error about SSL and
vdsmd
May 31 11:03:58 ovirtita.localdomain.local vdsm[8571]: vdsm vds.dispatcher
ERROR SSL error during reading data: unexpected eof

2016-05-31 11:04:36 DEBUG otopi.plugins.otopi.services.systemd
plugin.execute:926 execute-output: ('/bin/systemctl', 'status',
'vdsmd.service') stderr:

I see it also inside messages

And then
2016-05-31 11:08:51 DEBUG otopi.plugins.gr_he_setup.sanlock.lockspace
storage_backends.create_volume
:270 Connecting to VDSM
2016-05-31 11:08:51 DEBUG otopi.context context._executeMethod:142 method
exception
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in
_executeMethod
method['method']()
  File
"/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/gr-he-setup/sanlock/lockspace.py",
l
ine 143, in _misc
lockspace + '.metadata': md_size,
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 369,
in create
service_size=size)
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 279,
in create_volume
volUUID=volume_uuid
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 245,
in _get_volume_path
volUUID
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__
return self.__send(self.__name, args)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request
verbose=self.__verbose
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request
return self.single_request(host, handler, request_body, verbose)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request
self.send_content(h, request_body)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content
connection.endheaders(request_body)
  File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders
self._send_output(message_body)
  File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output
self.send(msg)
  File "/usr/lib64/python2.7/httplib.py", line 797, in send
self.connect()
  File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in
connect
sock = socket.create_connection((self.host, self.port), self.timeout)
  File "/usr/lib64/python2.7/socket.py", line 571, in create_connection
raise err
error: [Errno 101] Network is unreachable
2016-05-31 11:08:51 ERROR otopi.context context._executeMethod:151 Failed
to execute stage 'Misc configuration': [Errno 101] Network is unreachable
2016-05-31 11:08:51 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for
'/etc/ovirt-hosted-engine/firewalld/hosted-console.xml''
2016-05-31 11:08:51 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for '/etc/ovirt-hosted-engine/iptables.example''
2016-05-31 11:08:51 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for '/etc/sysconfig/iptables''


The NFS file system is indeed mounted together with a loop device

Re: [ovirt-users] oVirt 4.0 hosted-engine deploy exits without messages or logs

[Gianluca Cecchi]

On Thu, May 12, 2016 at 3:32 PM, Sandro Bonazzola wrote:

>
>
>
> I strongly suggest to use master. In particular, I strongly suggest to us
> oVirt Node Next ISO for hosts and the engine appliance for the deployment.
> Installing Hosted Engine using Cockpit Web UI has been a nice experience
> yesterday.
> https://twitter.com/SandroBonazzola/status/730426730515673092
>
> Be sure to install also the new dashboard package once your Hosted Engine
> is up, that's another nice thing to see in action.
>
>
It seems master from yesterday, attempting self hosted engine on nfs3 with
hypervisor on CentOS 7.2 gives:

[ INFO  ] Stage: Transaction setup
[ INFO  ] Stage: Misc configuration
[ INFO  ] Stage: Package installation
[ INFO  ] Stage: Misc configuration
[ INFO  ] Configuring libvirt
[ INFO  ] Configuring VDSM
[ INFO  ] Starting vdsmd
[ INFO  ] Creating Storage Domain
[ INFO  ] Creating Storage Pool
[ INFO  ] Connecting Storage Pool
[ INFO  ] Verifying sanlock lockspace initialization
[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network
is unreachable
[ INFO  ] Stage: Clean up

What I see as relevant in log is

  2016-05-12 16:47:36 DEBUG
otopi.plugins.ovirt_hosted_engine_setup.sanlock.lockspace storage_backends
.create_volume:270 Connecting to VDSM
2016-05-12 16:47:36 DEBUG otopi.context context._executeMethod:142 method
exception
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in
_executeMethod
method['method']()
  File
"/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/ovirt-hosted-engine-setup/sanlock/lo
ckspace.py", line 143, in _misc
lockspace + '.metadata': md_size,
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 369, in create
service_size=size)
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 279, in create_volume
volUUID=volume_uuid
  File
"/usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py",
line 245, in _get_volume_path
volUUID
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__
return self.__send(self.__name, args)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request
verbose=self.__verbose
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request
return self.single_request(host, handler, request_body, verbose)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request
self.send_content(h, request_body)
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content
connection.endheaders(request_body)
  File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders
self._send_output(message_body)
  File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output
self.send(msg)
  File "/usr/lib64/python2.7/httplib.py", line 797, in send
self.connect()
  File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in
connect
sock = socket.create_connection((self.host, self.port), self.timeout)
  File "/usr/lib64/python2.7/socket.py", line 571, in create_connection
raise err
error: [Errno 101] Network is unreachable
2016-05-12 16:47:36 ERROR otopi.context context._executeMethod:151 Failed
to execute stage 'Misc configuration': [Errno 101] Network is unreachable
2016-05-12 16:47:36 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for
'/etc/ovirt-hosted-engine/firewalld/hosted-console.xml''
2016-05-12 16:47:36 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for '/etc/ovirt-hosted-engine/iptables.example''
2016-05-12 16:47:36 DEBUG otopi.transaction transaction.abort:119 aborting
'File transaction for '/etc/sysconfig/iptables''
2016-05-12 16:47:36 DEBUG otopi.context context.dumpEnvironment:760
ENVIRONMENT DUMP - BEGIN
2016-05-12 16:47:36 DEBUG otopi.context context.dumpEnvironment:770 ENV
BASE/error=bool:'True'
2016-05-12 16:47:36 DEBUG otopi.context context.dumpEnvironment:770 ENV
BASE/exceptionInfo=list:'[(, error(101, 'Network is
unreachable'), )]'
2016-05-12 16:47:36 DEBUG otopi.context context.dumpEnvironment:774
ENVIRONMENT DUMP - END
2016-05-12 16:47:36 INFO otopi.context context.runSequence:687 Stage: Clean
up
2016-05-12 16:47:36 DEBUG otopi.context context.runSequence:691 STAGE
cleanup
2016-05-12 16:47:36 DEBUG otopi.context context._executeMethod:128 Stage
cleanup METHOD
otopi.plugins.ovirt_hosted_engine_setup.engine.add_host.Plugin._cleanup
2016-05-12 16:47:36 DEBUG otopi.context context._executeMethod:128 Stage
cleanup METHOD
otopi.plugins.ovirt_hosted_engine_setup.pki.vdsmpki.Plugin._cleanup
2016-05-12 16:47:36 DEBUG otopi.context context._executeMethod:128 Stage
cleanup METHOD
otopi.plugins.ovirt_hosted_engine_setup.storage.storage.Plugin._cleanup
2016-05-12 16:47:36 DEBUG
otopi.plugins.ovirt_hosted_engine_setup.storage.storage
storage._destroyStoragePool:931 _destroyStoragePool
2016-05-12 16:47:42 DEBUG

Re: [ovirt-users] ovirt 4.0 alpha web login error

[Martin Perina]

Hi,

there is no way how to disable SSO in oVirt 4.0. And IMO there's no need to
do that, because the change from previous login mechanism (separated logins
for webadmin, userportal and restapi) should be fully transparent. The only
way necessary is to set proper FQDN during engine-setup and use always this
FQDN always when accessing engine.

But please bear in mind, that you are using alpha version so there may be
bugs ...

If ovirt-engine-rename doesn't works for you, then you may be hit by
https://bugzilla.redhat.com/show_bug.cgi?id=1330168 which fixed in beta
release ...

Thanks

Martin Perina


On Fri, May 13, 2016 at 3:20 AM, like...@cs2c.com.cn 
wrote:

> Hi, Martin
>
> I saw your comment on bug 1325746(
> https://bugzilla.redhat.com/show_bug.cgi?id=1325746).
> Is there anyway to disable SSO login for web portal? Make it just like the
> old versions of ovirt(3.4, 3.5, 3.6 ... ).
> Or is there any document about how to use SSO method to access ovirt web
> portal?
>
> Thanks
>
> --
> like...@cs2c.com.cn
>
>
> *From:* like...@cs2c.com.cn
> *Date:* 2016-05-12 16:31
> *To:* users 
> *Subject:* [ovirt-users] ovirt 4.0 alpha web login error
> Hi!
>
> I installed ovirt 4.0 alpha(4.0.0-0.0.master.20160404161620.git4ffd5a4) on
> RHEL7.2.
> During engine-setup, i use ovirtManager.com as the host name(i add
> ip/hostname in the /etc/hosts).
> After engine-setup succeed, i try to access webadmin portal from another
> computer.
> In the client computer i use Chrome browser. And the url is
> https://ovirtManager.com(ovirtManager.com can be resolved in /etc/hosts).
> But i got following error when i access this url:
> The client is not authorized to request an authorization. It's required to
> access the system using FQDN.
>
> So, what should i do to access the webadmin portal?
>
> Many thanks for any advise
>
>
> --
> like...@cs2c.com.cn
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 hosted-engine deploy exits without messages or logs

[Sandro Bonazzola]

On Thu, May 12, 2016 at 2:46 PM, Gianluca Cecchi 
wrote:

> Hello,
> trying to have an insight at 4.0 alpha1, using CentOS 7.2 and hosted
> engine.
>
> Installed packages after configuring repo at
>
> http://plain.resources.ovirt.org/pub/ovirt-4.0_alpha1/rpm/el7/noarch/ovirt-release40.rpm
> are
>
> ovirt-hosted-engine-setup-2.0.0-0.0.master.20160325145108.gita9a3495.el7.centos.noarch
> ovirt-engine-appliance-4.0-20160405.1.el7.centos.noarch
> otopi-1.5.0-0.0.master.20160403070351.gitfa92bb0.el7.noarch
>
> but
> [root@ovirtita ~]# hosted-engine --deploy
> [root@ovirtita ~]# echo $?
> 1
>

I strongly suggest to use master. In particular, I strongly suggest to us
oVirt Node Next ISO for hosts and the engine appliance for the deployment.
Installing Hosted Engine using Cockpit Web UI has been a nice experience
yesterday.
https://twitter.com/SandroBonazzola/status/730426730515673092

Be sure to install also the new dashboard package once your Hosted Engine
is up, that's another nice thing to see in action.








>
> [root@ovirtita ~]# ls /var/log
> anaconda  chrony  dmesg.old  libvirt   ovirt-hosted-engine-ha secure
>  vdsm
> audit coreglusterfs  maillog   ovirt-hosted-engine-setup  spooler
>   wpa_supplicant.log
> boot.log  crongrubby messages  ppptallylog
>  wtmp
> btmp  dmesg   lastlogntpstats  sa tuned
>   yum.log
>
> [root@ovirtita ~]# ls /var/log/ovirt-hosted-engine-*
> /var/log/ovirt-hosted-engine-ha:
>
> /var/log/ovirt-hosted-engine-setup:
> [root@ovirtita ~]#
>
> [root@ovirtita log]# ll /var/log/vdsm/
> total 0
> drwxr-xr-x. 2 vdsm kvm  6 Apr  4 19:15 backup
> -rw-r--r--. 1 vdsm kvm  0 May 12 14:29 connectivity.log
> -rw-r--r--. 1 vdsm kvm  0 May 12 14:29 mom.log
> -rw-r--r--. 1 root root 0 May 12 14:29 supervdsm.log
> -rw-r--r--. 1 vdsm kvm  0 May 12 14:29 vdsm.log
>
> [root@ovirtita log]# ll /var/log/vdsm/backup/
> total 0
> [root@ovirtita log]#
>
> ?
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: progress bar in the WebUI

[Taste-Of-IT]

Am 2015-12-08 12:51, schrieb Amit Aviram:

On Tue, Dec 8, 2015 at 12:09 PM, Kevin COUSIN 
wrote:


Hi list,

It could be great if we can follow process like moving Disk
storage,
snapshots or VM import in the oVirt Interface, like in VMware or
VMM.


Hi Kevin, actually there is usage of a progress bar in some oVirt
processes, such as oVirt's integration with virt-v2v:
https://www.youtube.com/watch?v=QSss__Nl5rU [2]

Also, a progress bar will be in use in the upcoming image upload
feature:
http://www.ovirt.org/Features/Image_Upload [3]

and hopefully will be included in more features in the future.


Regards,

Kevin C
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users [1]




Links:
--
[1] http://lists.ovirt.org/mailman/listinfo/users
[2] https://www.youtube.com/watch?v=QSss__Nl5rU
[3] http://www.ovirt.org/Features/Image_Upload

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Hello,
i am not sure if i am right here, but i am new with ovirt and i change 
from proxmox. After installing all-in-one and setup my first virtual 
machine, i wanted to jump into the boot while i want to install the vm 
from iso, but its not possible. my browser want to open console.vv. i 
search and found this howto: 
http://www.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal and was 
confused how extensiv this is. so my wish is that spice or just an vnc 
console or what ever will work out of the box, or how do you install 
from iso with no network...?

thx
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: progress bar in the WebUI

[Amit Aviram]

On Tue, Dec 8, 2015 at 12:09 PM, Kevin COUSIN 
wrote:

> Hi list,
>
> It could be great if we can follow process like moving Disk storage,
> snapshots or VM import in the oVirt Interface, like in VMware or VMM.
>

Hi Kevin, actually there is usage of a progress bar in some oVirt
processes, such as oVirt's integration with virt-v2v:
https://www.youtube.com/watch?v=QSss__Nl5rU

Also, a progress bar will be in use in the upcoming image upload feature:
http://www.ovirt.org/Features/Image_Upload

and hopefully will be included in more features in the future.


> Regards,
>
> Kevin C
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: progress bar in the WebUI

[Yaniv Kaul]

On Tue, Dec 8, 2015 at 12:09 PM, Kevin COUSIN 
wrote:

> Hi list,
>
> It could be great if we can follow process like moving Disk storage,
> snapshots or VM import in the oVirt Interface, like in VMware or VMM.
>

We have such as task high on the priority list for 4.0.
(In addition to hopefully accelerating some of those tasks as well).
Y.


>
> Regards,
>
> Kevin C
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: oVirt Engine

[Giuseppe Ragusa]

On Fri, Nov 20, 2015, at 13:54, Giuseppe Ragusa wrote:
> Hi all,
> I go on with my wishlist, derived from both solitary mumblings and community 
> talks at the the first Italian oVirt Meetup.
> 
> I offer to help in coding (work/family schedules permitting) but keep in mind 
> that I'm a sysadmin with mainly C and bash-scripting skills (but hoping to 
> improve my less-than-newbie Python too...)
> 
> I've sent separate wishlist messages for oVirt Node and VDSM.
> 
> oVirt Engine:
> 
> *) add Samba/CTDB/Ganesha capabilities (maybe in the GlusterFS management 
> UI); there are related wishlist items on configuring/managing 
> Samba/CTDB/Ganesha on oVirt Node and on VDSM
> 
> *) add the ability to manage containers (maybe initially as an exclusive 
> cluster type but allowing it to coexist with GlusterFS); there are related 
> wishlist items on supporting containers on the oVirt Node and on VDSM
> 
> *) add Open vSwitch direct support (not Neutron-mediated); there are related 
> wishlist items on configuring/managing Open vSwitch on oVirt Node and on VDSM
> 
> *) add DRBD9 as a supported Storage Domain type, HC/HE too, managed from the 
> Engine UI similarly to GlusterFS; there are related wishlist items on 
> configuring/managing DRBD9 on oVirt Node and on VDSM
> 
> *) add support for managing/limiting GlusterFS heal/rebalance bandwidth usage 
> in HC setup [1]; this is actually a GlusterFS wishlist item first and 
> foremost, but I hope our use case could be considered compelling enough to 
> "force their hand" a bit ;)

I've just posted a corresponding RFE for GlusterFS on:

http://www.gluster.org/pipermail/gluster-devel/2015-November/047238.html

Upvote that, if you think it's needed ;-)

> Regards,
> Giuseppe
> 
> [1] bandwidth limiting seems to be supported only for geo-replication on 
> GlusterFS side; it is my understanding that on non-HC setups the 
> heal/rebalance traffic could be kept separate from hypervisor/client traffic 
> (if a separate, Gluster-only, network is physically available and Gluster 
> cluster nodes have been peer-probed on those network addresses)
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: oVirt Self Hosted Engine Setup

[Eyal Edri]

Hi Giuseppe!

I saw you mentioned you have sysadmin knowledge and some python too, would
you be interested in helping with devops tasks for the oVirt infra team [1]
?
The infra team is in charge of maintaining the entire devops infrastructure
with jenkins as the 'ci' server in the middle.
You can also checkout the monthly emails in the devops section. [2]

In addition, you can contribute python code to a recent independent project
which came out of oVirt called 'lago',
you can read about it here [4].

Let know if this is something you might be interested in, you can check
some of the tasks we're doing in [3].

[1]  http://www.ovirt.org/Infra
[2] http://lists.ovirt.org/pipermail/users/2015-October/035118.html
[3] http://www.ovirt.org/Category:Infrastructure#Type_of_tasks
[4] http://lago.readthedocs.org/en/latest/

On Mon, Nov 23, 2015 at 11:10 PM, Giuseppe Ragusa <
giuseppe.rag...@hotmail.com> wrote:

> Hi all,
> I go on with my wishlist, derived from both solitary mumblings and
> community talks at the the first Italian oVirt Meetup.
>
> I offer to help in coding (work/family schedules permitting) but keep in
> mind that I'm a sysadmin with mainly C and bash-scripting skills (but
> hoping to improve my less-than-newbie Python too...)
>
> I've sent separate wishlist messages for oVirt Node, oVirt Engine and VDSM.
>
> oVirt Self Hosted Engine Setup:
>
> *) allow virtual hardware customizations for locally-created Engine vm,
> specifically: allow to add an arbitrary number of NICs (asking for MAC
> address and local bridge to connect to) and maybe also an arbitrary number
> of disks (asking for size) as these seem to be the only/most_useful items
> missing; maybe the prebuilt appliance image too may be inspected by setup
> to detect a customized one and connect any further NICs to custom local
> bridges (which the user should be asked for)
>
> Regards,
> Giuseppe
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>


-- 
Eyal Edri
Supervisor, RHEV CI
EMEA ENG Virtualization R
Red Hat Israel

phone: +972-9-7692018
irc: eedri (on #tlv #rhev-dev #rhev-integ)
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: oVirt Self Hosted Engine Setup

[Giuseppe Ragusa]

On Wed, Nov 25, 2015, at 12:13, Simone Tiraboschi wrote:
> 
> 
> On Mon, Nov 23, 2015 at 10:10 PM, Giuseppe Ragusa 
>  wrote:
>> Hi all,
>> I go on with my wishlist, derived from both solitary mumblings and community 
>> talks at the the first Italian oVirt Meetup.
>>  
>> I offer to help in coding (work/family schedules permitting) but keep in 
>> mind that I'm a sysadmin with mainly C and bash-scripting skills (but hoping 
>> to improve my less-than-newbie Python too...)
>>  
>> I've sent separate wishlist messages for oVirt Node, oVirt Engine and VDSM.
>>  
>> oVirt Self Hosted Engine Setup:
>>  
>> *) allow virtual hardware customizations for locally-created Engine vm, 
>> specifically: allow to add an arbitrary number of NICs (asking for MAC 
>> address and local bridge to connect to) and maybe also an arbitrary number 
>> of disks (asking for size) as these seem to be the only/most_useful items 
>> missing; maybe the prebuilt appliance image too may be inspected by setup to 
>> detect a customized one and connect any further NICs to custom local bridges 
>> (which the user should be asked for)
> 
> For 3.6.1 (it should be in 3.6.0 but it's bugged) you will be able to edit 
> some parameter of the engine VM from the engine (than of course you need to 
> reboot to make them effective).
> I'm not sure if it's worth to make the setup more complex or if it's better 
> to keep it simple (single nic, single disk) and then let you edit the VM only 
> from the engine as for other VMs.

Thanks Simone for your reply!

You are right: I was bothering you with this setup wishlist item *mainly* 
because further Engine vm modification was impossible/awkward/difficult before 
3.6.1

Nonetheless I have seen many cases in which at least a second NIC would be 
absolutely needed to complete the Engine installation: it is a well known best 
practice to keep the management network (maybe conflated with the IPMI network 
in smaller cases) completely isolated from other services and to allow only 
limited access to/from it, and that network would be the 
ovirtmgmt-bridge-connected network (the only one available to the Engine, as of 
now); now think of a kickstart-based Engine OS installation/update from a local 
repository/mirror which would be reachable on a different network only (further 
access to the User/Administration Web portal could have similar needs but could 
be more easily covered by successive Engine vm modifications)

The "additional disks" part was (maybe "artificially") added by me out of 
fantasy, but I know of at least one enterprise customer that by policy mandates 
separate disks for OS and data (mainly on FC LUNs, to be honest, but FC is 
supported by hosted Engine now, isn't it?)

I absolutely don't know how the setup code is structured (and the recent 
logical "duplication" between mixins.py and vm.conf.in scares me a bit, 
actually ;), but I naively hope that changing the two single hardcoded nic/hdd 
questions into two loops of minimum 1 iteration (with a corresponding 
generalization of related otopi parameters) should not increase the complexity 
too much (and could be an excuse to rationalize/unify it further).

Obviously I could stand instantly corrected by anyone who really knows the 
code, but in exchange I would gain for free some interesting pointers/insights 
into the setup code/structure ;)


>> Regards,
>> Giuseppe
>> ___
>> Users mailing list
>>  Users@ovirt.org
>>  http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0 wishlist: oVirt Self Hosted Engine Setup

[Simone Tiraboschi]

On Mon, Nov 23, 2015 at 10:10 PM, Giuseppe Ragusa <
giuseppe.rag...@hotmail.com> wrote:

> Hi all,
> I go on with my wishlist, derived from both solitary mumblings and
> community talks at the the first Italian oVirt Meetup.
>
> I offer to help in coding (work/family schedules permitting) but keep in
> mind that I'm a sysadmin with mainly C and bash-scripting skills (but
> hoping to improve my less-than-newbie Python too...)
>
> I've sent separate wishlist messages for oVirt Node, oVirt Engine and VDSM.
>
> oVirt Self Hosted Engine Setup:
>
> *) allow virtual hardware customizations for locally-created Engine vm,
> specifically: allow to add an arbitrary number of NICs (asking for MAC
> address and local bridge to connect to) and maybe also an arbitrary number
> of disks (asking for size) as these seem to be the only/most_useful items
> missing; maybe the prebuilt appliance image too may be inspected by setup
> to detect a customized one and connect any further NICs to custom local
> bridges (which the user should be asked for)
>

For 3.6.1 (it should be in 3.6.0 but it's bugged) you will be able to edit
some parameter of the engine VM from the engine (than of course you need to
reboot to make them effective).
I'm not sure if it's worth to make the setup more complex or if it's better
to keep it simple (single nic, single disk) and then let you edit the VM
only from the engine as for other VMs.


>
> Regards,
> Giuseppe
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users