Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/22/2014 09:06 AM, Sven Kieske wrote: Imho your assumptions are wrong, but _I_ also may be wrong so please correct me, if you can. AFAIK: first: A Datacenter without a master storage domain can't become operational. - that's correct, first you need to attach master storage (which must be differetn from what you used for hosted engine setup) and then the data center will become operational and you can attach iso domain. second: for hosted engine, the only supported setup type is on an nfs master storage domain? we're adding support iscsi for 3.5 ;) So I think you really need the nfs. Sorry if I'm wrong, I didn't install this setup yet, my knowledge is purely based of reading the wiki and the ML so there might be some errors in my statements, maybe some dev could correct me. - you got it right, I think the confusing part here is the fact that you need additional storage and can't use the storage used for the HE. (at least that's what got me) --Jirka Am 21.05.2014 16:17, schrieb Bob Doolittle: I'm afraid NFS was a red herring. NFS shares from the host to the engine are not required for basic oVirt operation, correct? If I understand Sandro correctly, that should not be affecting my storage connections to engine. I'm sorry I brought it up - it was my misunderstanding. I believe the first thing to look at is why the ISO domain is unattached to my Default Datacenter, is that correct? Then my Datacenter should become operational, and I can add a Data Domain. I can manually mount the ISO_DOMAIN directory on both my host and my engine without issues (it resides on my engine). So why is my Datacenter not visible when I go to attach my ISO domain? -Bob ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Imho your assumptions are wrong, but _I_ also may be wrong so please correct me, if you can. AFAIK: first: A Datacenter without a master storage domain can't become operational. second: for hosted engine, the only supported setup type is on an nfs master storage domain? So I think you really need the nfs. Sorry if I'm wrong, I didn't install this setup yet, my knowledge is purely based of reading the wiki and the ML so there might be some errors in my statements, maybe some dev could correct me. Am 21.05.2014 16:17, schrieb Bob Doolittle: > I'm afraid NFS was a red herring. NFS shares from the host to the engine > are not required for basic oVirt operation, correct? > If I understand Sandro correctly, that should not be affecting my > storage connections to engine. I'm sorry I brought it up - it was my > misunderstanding. > > I believe the first thing to look at is why the ISO domain is unattached > to my Default Datacenter, is that correct? Then my Datacenter should > become operational, and I can add a Data Domain. > > I can manually mount the ISO_DOMAIN directory on both my host and my > engine without issues (it resides on my engine). > > So why is my Datacenter not visible when I go to attach my ISO domain? > > -Bob -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/21/2014 09:24 AM, Jiri Moskovcak wrote: On 05/21/2014 02:49 PM, Bob Doolittle wrote: On 05/21/2014 03:09 AM, Sven Kieske wrote: I'd want to add that these rules are for NFSv3 asking Bob if he is maybe useing NFSv4 ? At the moment I don't need either one. I need to solve my major issues first. Then when things are working I'll worry about setting up NFS to export new domains from my host. Like - why didn't my default domains get configured properly? Where is my Data Domain, and why is my ISO Domain unattached? Why didn't hosted-engine --deploy set this up properly? I took the defaults during deployment for domain setup. When I first login to webadmin #vms, it shows HostedEngine as green/up. At #storage it shows my ISO Domain and ovirt-image-repository as unattached. No Data Domain. At #dataCenters it shows my Default datacenter as down/uninitialized If I go to #storage and select ISO_DOMAIN and select it's Data Center tab (#storage-data_center), it doesn't show any Data Centers to attach to. -Bob - can you login to the VM running the engine and try to mount the nfs share manually to some directory, just to see if it works? Neither engine nor setup is responsible for setting the nfs share (and configuring iptables for nfs server), so it's up to you to set it up properly and make sure it's mountable from engine. I'm afraid NFS was a red herring. NFS shares from the host to the engine are not required for basic oVirt operation, correct? If I understand Sandro correctly, that should not be affecting my storage connections to engine. I'm sorry I brought it up - it was my misunderstanding. I believe the first thing to look at is why the ISO domain is unattached to my Default Datacenter, is that correct? Then my Datacenter should become operational, and I can add a Data Domain. I can manually mount the ISO_DOMAIN directory on both my host and my engine without issues (it resides on my engine). So why is my Datacenter not visible when I go to attach my ISO domain? -Bob ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/21/2014 02:49 PM, Bob Doolittle wrote: On 05/21/2014 03:09 AM, Sven Kieske wrote: I'd want to add that these rules are for NFSv3 asking Bob if he is maybe useing NFSv4 ? At the moment I don't need either one. I need to solve my major issues first. Then when things are working I'll worry about setting up NFS to export new domains from my host. Like - why didn't my default domains get configured properly? Where is my Data Domain, and why is my ISO Domain unattached? Why didn't hosted-engine --deploy set this up properly? I took the defaults during deployment for domain setup. When I first login to webadmin #vms, it shows HostedEngine as green/up. At #storage it shows my ISO Domain and ovirt-image-repository as unattached. No Data Domain. At #dataCenters it shows my Default datacenter as down/uninitialized If I go to #storage and select ISO_DOMAIN and select it's Data Center tab (#storage-data_center), it doesn't show any Data Centers to attach to. -Bob - can you login to the VM running the engine and try to mount the nfs share manually to some directory, just to see if it works? Neither engine nor setup is responsible for setting the nfs share (and configuring iptables for nfs server), so it's up to you to set it up properly and make sure it's mountable from engine. --Jirka Am 21.05.2014 08:43, schrieb Sandro Bonazzola: I'm not saying NFS issue is irrelevant :-) I'm saying that if you're adding NFS service on the node running hosted engine you'll need to configure iptables for allowing to mount the shares. This means at least opening rpc-bind port 111 and NFS port 2049 and ports 662 875 892 32769 32803 assuming you've configured NFS with: RPCRQUOTADOPTS="-p 875" LOCKD_TCPPORT=32803 LOCKD_UDPPORT=32769 RPCMOUNTDOPTS="-p 892" STATDARG="-p 662 -o 2020" Alternative is to use NFS storage on a different host. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/21/2014 03:09 AM, Sven Kieske wrote: I'd want to add that these rules are for NFSv3 asking Bob if he is maybe useing NFSv4 ? At the moment I don't need either one. I need to solve my major issues first. Then when things are working I'll worry about setting up NFS to export new domains from my host. Like - why didn't my default domains get configured properly? Where is my Data Domain, and why is my ISO Domain unattached? Why didn't hosted-engine --deploy set this up properly? I took the defaults during deployment for domain setup. When I first login to webadmin #vms, it shows HostedEngine as green/up. At #storage it shows my ISO Domain and ovirt-image-repository as unattached. No Data Domain. At #dataCenters it shows my Default datacenter as down/uninitialized If I go to #storage and select ISO_DOMAIN and select it's Data Center tab (#storage-data_center), it doesn't show any Data Centers to attach to. -Bob Am 21.05.2014 08:43, schrieb Sandro Bonazzola: I'm not saying NFS issue is irrelevant :-) I'm saying that if you're adding NFS service on the node running hosted engine you'll need to configure iptables for allowing to mount the shares. This means at least opening rpc-bind port 111 and NFS port 2049 and ports 662 875 892 32769 32803 assuming you've configured NFS with: RPCRQUOTADOPTS="-p 875" LOCKD_TCPPORT=32803 LOCKD_UDPPORT=32769 RPCMOUNTDOPTS="-p 892" STATDARG="-p 662 -o 2020" Alternative is to use NFS storage on a different host. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
I'd want to add that these rules are for NFSv3 asking Bob if he is maybe useing NFSv4 ? Am 21.05.2014 08:43, schrieb Sandro Bonazzola: > I'm not saying NFS issue is irrelevant :-) > I'm saying that if you're adding NFS service on the node running hosted > engine you'll need to configure iptables for allowing to mount the shares. > This means at least opening rpc-bind port 111 and NFS port 2049 and ports 662 > 875 892 32769 32803 assuming you've configured NFS with: > > RPCRQUOTADOPTS="-p 875" > LOCKD_TCPPORT=32803 > LOCKD_UDPPORT=32769 > RPCMOUNTDOPTS="-p 892" > STATDARG="-p 662 -o 2020" > > Alternative is to use NFS storage on a different host. -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Il 20/05/2014 20:43, Bob Doolittle ha scritto: > > On 05/20/2014 10:41 AM, Sandro Bonazzola wrote: >> Il 20/05/2014 16:36, Bob Doolittle ha scritto: >>> On 05/20/2014 10:23 AM, Sandro Bonazzola wrote: Il 20/05/2014 16:06, Bob Doolittle ha scritto: > On 05/20/2014 09:42 AM, Sandro Bonazzola wrote: >> Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: >>> On 05/20/2014 02:57 PM, Bob Doolittle wrote: Well that was interesting. When I ran hosted-engine --connect-storage, the Data Center went green, and I could see an unattached ISO domain and ovirt-image-repository (but no Data domain). But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage disappeared again and the Data Center went red. In retrospect, there appears to be a problem with iptables/firewalld that could be related. I noticed two things: - firewalld is stopped and disabled on the host >> Correct, hosted engine support iptables only. >> You should have iptables configured and enabled. - I could not manually NFS mount (v3 or v4) from the host to the engine, unless I did "service iptables stop" So it doesn't appear to me that hosted-engine did the right things with firewalld/iptables. If these problems occurred during the --deploy, could that result in this situation? >> I don't think so I have temporarily disabled iptables until I get things working, but clearly that's insufficient to resolve the problem at this point. >>> - iptables/firewalld is configured during the setup, which is Sandro's >>> domain. Sandro, could you please take a look at this? >> iptables configuration is performed by the engine when adding the host. >> please attach iptables-save output from the host and host-deploy logs >> from the hosted-engine vm. > host-deploy logs are ^^ in this thread. I see ovirt-hosted-engine-setup logs, not /var/log/ovirt-engine/host-deploy logs. >>> Oh sorry - from the engine then. Attached. >>> >>> But my problem is with the firewall on the host. >>> >>> I cannot NFS mount a share on the host (e.g. my Data Domain) on the engine. >>> In this case the host is the NFS server, and the engine is the NFS client. >>> Only the host firewall should be relevant, correct? >>> >>> Maybe what you are saying is that hosted-engine does not attempt to >>> configure the iptables on the host to allow NFS shares? >> Yes, to be clear: >> ovirt-hosted-engine-setup just enable ports for spice / vnc connection from >> remote host to VM while performing OS install on the VM. >> Once the VM is installed ovirt-engine configure iptables on the host using >> ovirt-host-deploy package when the host is added to the engine. >> If you need other services on the host running the hosted engine you'll need >> to configure manually iptables. > > Thanks, > > Jirka - since Sandro says this NFS issue is irrelevant to Hosted operation, > do you have any other suggestions or can I provide any additional data to > help diagnose why my configuration is non-operational? > I will eventually want to fix this and add Data and Export domains from my > host, but for the moment it appears no NFS exports from the host are > required for oVirt operation. I'm not saying NFS issue is irrelevant :-) I'm saying that if you're adding NFS service on the node running hosted engine you'll need to configure iptables for allowing to mount the shares. This means at least opening rpc-bind port 111 and NFS port 2049 and ports 662 875 892 32769 32803 assuming you've configured NFS with: RPCRQUOTADOPTS="-p 875" LOCKD_TCPPORT=32803 LOCKD_UDPPORT=32769 RPCMOUNTDOPTS="-p 892" STATDARG="-p 662 -o 2020" Alternative is to use NFS storage on a different host. > So where are my domains? :) > > Thanks, > Bob > >> >> > I have attached iptables-save output. I can't see anything blocking the mount from the hots toward the engine vm. Can you attach iptables-save also from the engine vm? (IIUC you've a nfs share there and you're trying to mount it from the host right?) >>> Visa-versa. My Data domain is on my host. So is my Export domain, but I >>> haven't tried to import it yet since the Datacenter is not operational. >>> >>> Thanks, >>> Bob >>> >> > -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/20/2014 10:41 AM, Sandro Bonazzola wrote: Il 20/05/2014 16:36, Bob Doolittle ha scritto: On 05/20/2014 10:23 AM, Sandro Bonazzola wrote: Il 20/05/2014 16:06, Bob Doolittle ha scritto: On 05/20/2014 09:42 AM, Sandro Bonazzola wrote: Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: On 05/20/2014 02:57 PM, Bob Doolittle wrote: Well that was interesting. When I ran hosted-engine --connect-storage, the Data Center went green, and I could see an unattached ISO domain and ovirt-image-repository (but no Data domain). But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage disappeared again and the Data Center went red. In retrospect, there appears to be a problem with iptables/firewalld that could be related. I noticed two things: - firewalld is stopped and disabled on the host Correct, hosted engine support iptables only. You should have iptables configured and enabled. - I could not manually NFS mount (v3 or v4) from the host to the engine, unless I did "service iptables stop" So it doesn't appear to me that hosted-engine did the right things with firewalld/iptables. If these problems occurred during the --deploy, could that result in this situation? I don't think so I have temporarily disabled iptables until I get things working, but clearly that's insufficient to resolve the problem at this point. - iptables/firewalld is configured during the setup, which is Sandro's domain. Sandro, could you please take a look at this? iptables configuration is performed by the engine when adding the host. please attach iptables-save output from the host and host-deploy logs from the hosted-engine vm. host-deploy logs are ^^ in this thread. I see ovirt-hosted-engine-setup logs, not /var/log/ovirt-engine/host-deploy logs. Oh sorry - from the engine then. Attached. But my problem is with the firewall on the host. I cannot NFS mount a share on the host (e.g. my Data Domain) on the engine. In this case the host is the NFS server, and the engine is the NFS client. Only the host firewall should be relevant, correct? Maybe what you are saying is that hosted-engine does not attempt to configure the iptables on the host to allow NFS shares? Yes, to be clear: ovirt-hosted-engine-setup just enable ports for spice / vnc connection from remote host to VM while performing OS install on the VM. Once the VM is installed ovirt-engine configure iptables on the host using ovirt-host-deploy package when the host is added to the engine. If you need other services on the host running the hosted engine you'll need to configure manually iptables. Thanks, Jirka - since Sandro says this NFS issue is irrelevant to Hosted operation, do you have any other suggestions or can I provide any additional data to help diagnose why my configuration is non-operational? I will eventually want to fix this and add Data and Export domains from my host, but for the moment it appears no NFS exports from the host are required for oVirt operation. So where are my domains? :) Thanks, Bob I have attached iptables-save output. I can't see anything blocking the mount from the hots toward the engine vm. Can you attach iptables-save also from the engine vm? (IIUC you've a nfs share there and you're trying to mount it from the host right?) Visa-versa. My Data domain is on my host. So is my Export domain, but I haven't tried to import it yet since the Datacenter is not operational. Thanks, Bob ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Il 20/05/2014 16:36, Bob Doolittle ha scritto: > > On 05/20/2014 10:23 AM, Sandro Bonazzola wrote: >> Il 20/05/2014 16:06, Bob Doolittle ha scritto: >>> On 05/20/2014 09:42 AM, Sandro Bonazzola wrote: Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: > On 05/20/2014 02:57 PM, Bob Doolittle wrote: >> Well that was interesting. >> When I ran hosted-engine --connect-storage, the Data Center went green, >> and I could see an unattached ISO domain and ovirt-image-repository (but >> no Data domain). >> But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage >> disappeared again and the Data Center went red. >> >> In retrospect, there appears to be a problem with iptables/firewalld >> that could be related. >> I noticed two things: >> - firewalld is stopped and disabled on the host Correct, hosted engine support iptables only. You should have iptables configured and enabled. >> - I could not manually NFS mount (v3 or v4) from the host to the engine, >> unless I did "service iptables stop" >> >> So it doesn't appear to me that hosted-engine did the right things with >> firewalld/iptables. If these problems occurred during the --deploy, >> could that result in this situation? I don't think so >> I have temporarily disabled iptables until I get things working, but >> clearly that's insufficient to resolve the problem at this point. > - iptables/firewalld is configured during the setup, which is Sandro's > domain. Sandro, could you please take a look at this? iptables configuration is performed by the engine when adding the host. please attach iptables-save output from the host and host-deploy logs from the hosted-engine vm. >>> host-deploy logs are ^^ in this thread. >> I see ovirt-hosted-engine-setup logs, not /var/log/ovirt-engine/host-deploy >> logs. > > Oh sorry - from the engine then. Attached. > > But my problem is with the firewall on the host. > > I cannot NFS mount a share on the host (e.g. my Data Domain) on the engine. > In this case the host is the NFS server, and the engine is the NFS client. > Only the host firewall should be relevant, correct? > > Maybe what you are saying is that hosted-engine does not attempt to configure > the iptables on the host to allow NFS shares? Yes, to be clear: ovirt-hosted-engine-setup just enable ports for spice / vnc connection from remote host to VM while performing OS install on the VM. Once the VM is installed ovirt-engine configure iptables on the host using ovirt-host-deploy package when the host is added to the engine. If you need other services on the host running the hosted engine you'll need to configure manually iptables. > >>> I have attached iptables-save output. >> I can't see anything blocking the mount from the hots toward the engine vm. >> Can you attach iptables-save also from the engine vm? >> (IIUC you've a nfs share there and you're trying to mount it from the host >> right?) > > Visa-versa. My Data domain is on my host. So is my Export domain, but I > haven't tried to import it yet since the Datacenter is not operational. > > Thanks, >Bob > -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Il 20/05/2014 16:06, Bob Doolittle ha scritto: > On 05/20/2014 09:42 AM, Sandro Bonazzola wrote: >> Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: >>> On 05/20/2014 02:57 PM, Bob Doolittle wrote: Well that was interesting. When I ran hosted-engine --connect-storage, the Data Center went green, and I could see an unattached ISO domain and ovirt-image-repository (but no Data domain). But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage disappeared again and the Data Center went red. In retrospect, there appears to be a problem with iptables/firewalld that could be related. I noticed two things: - firewalld is stopped and disabled on the host >> Correct, hosted engine support iptables only. >> You should have iptables configured and enabled. >> - I could not manually NFS mount (v3 or v4) from the host to the engine, unless I did "service iptables stop" So it doesn't appear to me that hosted-engine did the right things with firewalld/iptables. If these problems occurred during the --deploy, could that result in this situation? >> I don't think so >> I have temporarily disabled iptables until I get things working, but clearly that's insufficient to resolve the problem at this point. >>> - iptables/firewalld is configured during the setup, which is Sandro's >>> domain. Sandro, could you please take a look at this? >> >> iptables configuration is performed by the engine when adding the host. >> please attach iptables-save output from the host and host-deploy logs from >> the hosted-engine vm. >> > > host-deploy logs are ^^ in this thread. I see ovirt-hosted-engine-setup logs, not /var/log/ovirt-engine/host-deploy logs. > > I have attached iptables-save output. I can't see anything blocking the mount from the hots toward the engine vm. Can you attach iptables-save also from the engine vm? (IIUC you've a nfs share there and you're trying to mount it from the host right?) > > Thanks, >Bob > > -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Thanks for the reminder. I did forget about it, there are too many open bugs for me on ovirt, sadly. It's hard to track them all. Am 20.05.2014 16:03, schrieb Yedidyah Bar David: > Actually you opened a bug about this... > > https://bugzilla.redhat.com/show_bug.cgi?id=1080823 -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/20/2014 09:42 AM, Sandro Bonazzola wrote: > Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: >> On 05/20/2014 02:57 PM, Bob Doolittle wrote: >>> Well that was interesting. >>> When I ran hosted-engine --connect-storage, the Data Center went green, >>> and I could see an unattached ISO domain and ovirt-image-repository (but >>> no Data domain). >>> But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage >>> disappeared again and the Data Center went red. >>> >>> In retrospect, there appears to be a problem with iptables/firewalld >>> that could be related. >>> I noticed two things: >>> - firewalld is stopped and disabled on the host > Correct, hosted engine support iptables only. > You should have iptables configured and enabled. > >>> - I could not manually NFS mount (v3 or v4) from the host to the engine, >>> unless I did "service iptables stop" >>> >>> So it doesn't appear to me that hosted-engine did the right things with >>> firewalld/iptables. If these problems occurred during the --deploy, >>> could that result in this situation? > I don't think so > >>> I have temporarily disabled iptables until I get things working, but >>> clearly that's insufficient to resolve the problem at this point. >>> >> - iptables/firewalld is configured during the setup, which is Sandro's >> domain. Sandro, could you please take a look at this? > > iptables configuration is performed by the engine when adding the host. > please attach iptables-save output from the host and host-deploy logs from > the hosted-engine vm. > host-deploy logs are ^^ in this thread. I have attached iptables-save output. Thanks, Bob # Generated by iptables-save v1.4.18 on Tue May 20 10:05:24 2014 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [406:2990735] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m tcp --dport 54321 -j ACCEPT -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -p udp -m udp --dport 161 -j ACCEPT -A INPUT -p tcp -m tcp --dport 16514 -j ACCEPT -A INPUT -p tcp -m multiport --dports 5900:6923 -j ACCEPT -A INPUT -p tcp -m multiport --dports 49152:49216 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited COMMIT # Completed on Tue May 20 10:05:24 2014 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Actually you opened a bug about this... https://bugzilla.redhat.com/show_bug.cgi?id=1080823 - Original Message - > From: "Sven Kieske" > To: users@ovirt.org > Sent: Tuesday, May 20, 2014 4:53:32 PM > Subject: Re: [ovirt-users] Hosted engine problem - Engine VM will not start > > does it configure iptables under all circumstances? > I hope you can tell host-deploy to not configure > it, as you can with engine-setup ? > > Am 20.05.2014 15:41, schrieb Sandro Bonazzola: > > iptables configuration is performed by the engine when adding the host. > > please attach iptables-save output from the host and host-deploy logs from > > the hosted-engine vm. > > -- > Mit freundlichen Grüßen / Regards > > Sven Kieske > > Systemadministrator > Mittwald CM Service GmbH & Co. KG > Königsberger Straße 6 > 32339 Espelkamp > T: +49-5772-293-100 > F: +49-5772-293-333 > https://www.mittwald.de > Geschäftsführer: Robert Meyer > St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen > Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
does it configure iptables under all circumstances? I hope you can tell host-deploy to not configure it, as you can with engine-setup ? Am 20.05.2014 15:41, schrieb Sandro Bonazzola: > iptables configuration is performed by the engine when adding the host. > please attach iptables-save output from the host and host-deploy logs from > the hosted-engine vm. -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Il 20/05/2014 15:09, Jiri Moskovcak ha scritto: > On 05/20/2014 02:57 PM, Bob Doolittle wrote: >> Well that was interesting. >> When I ran hosted-engine --connect-storage, the Data Center went green, >> and I could see an unattached ISO domain and ovirt-image-repository (but >> no Data domain). >> But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage >> disappeared again and the Data Center went red. >> >> In retrospect, there appears to be a problem with iptables/firewalld >> that could be related. >> I noticed two things: >> - firewalld is stopped and disabled on the host Correct, hosted engine support iptables only. You should have iptables configured and enabled. >> - I could not manually NFS mount (v3 or v4) from the host to the engine, >> unless I did "service iptables stop" >> >> So it doesn't appear to me that hosted-engine did the right things with >> firewalld/iptables. If these problems occurred during the --deploy, >> could that result in this situation? I don't think so >> I have temporarily disabled iptables until I get things working, but >> clearly that's insufficient to resolve the problem at this point. >> > > - iptables/firewalld is configured during the setup, which is Sandro's > domain. Sandro, could you please take a look at this? iptables configuration is performed by the engine when adding the host. please attach iptables-save output from the host and host-deploy logs from the hosted-engine vm. thanks, > > Thanks, > --Jirka > >> -Bob >> >> On 05/20/2014 05:18 AM, Jiri Moskovcak wrote: >>> On 05/20/2014 03:33 AM, Bob Doolittle wrote: I have successfully completed hosted-engine --deploy with 3.4.1, and set up my Engine. This is with F19 for both the host and engine (with the sos package workarounds stated). However, it does not seem to have initialized any Storage Domains, and the Datacenter cannot initialize. I've attached my setup and vdsm logs. Any guidance appreciated. Thanks, Bob >>> Hi Bob, >>> can you try to run: >>> >>> $ hosted-engine --connect-storage >>> $ service ovirt-ha-broker restart >>> $ service ovirt-ha-agent restart >>> >>> and see if it helps? >>> >>> Thanks, >>> Jirka >>> ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users >>> >> > -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/20/2014 02:57 PM, Bob Doolittle wrote: Well that was interesting. When I ran hosted-engine --connect-storage, the Data Center went green, and I could see an unattached ISO domain and ovirt-image-repository (but no Data domain). But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage disappeared again and the Data Center went red. In retrospect, there appears to be a problem with iptables/firewalld that could be related. I noticed two things: - firewalld is stopped and disabled on the host - I could not manually NFS mount (v3 or v4) from the host to the engine, unless I did "service iptables stop" So it doesn't appear to me that hosted-engine did the right things with firewalld/iptables. If these problems occurred during the --deploy, could that result in this situation? I have temporarily disabled iptables until I get things working, but clearly that's insufficient to resolve the problem at this point. - iptables/firewalld is configured during the setup, which is Sandro's domain. Sandro, could you please take a look at this? Thanks, --Jirka -Bob On 05/20/2014 05:18 AM, Jiri Moskovcak wrote: On 05/20/2014 03:33 AM, Bob Doolittle wrote: I have successfully completed hosted-engine --deploy with 3.4.1, and set up my Engine. This is with F19 for both the host and engine (with the sos package workarounds stated). However, it does not seem to have initialized any Storage Domains, and the Datacenter cannot initialize. I've attached my setup and vdsm logs. Any guidance appreciated. Thanks, Bob Hi Bob, can you try to run: $ hosted-engine --connect-storage $ service ovirt-ha-broker restart $ service ovirt-ha-agent restart and see if it helps? Thanks, Jirka ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
Well that was interesting. When I ran hosted-engine --connect-storage, the Data Center went green, and I could see an unattached ISO domain and ovirt-image-repository (but no Data domain). But after restarting ovirt-ha-broker and ovirt-ha-agent, the storage disappeared again and the Data Center went red. In retrospect, there appears to be a problem with iptables/firewalld that could be related. I noticed two things: - firewalld is stopped and disabled on the host - I could not manually NFS mount (v3 or v4) from the host to the engine, unless I did "service iptables stop" So it doesn't appear to me that hosted-engine did the right things with firewalld/iptables. If these problems occurred during the --deploy, could that result in this situation? I have temporarily disabled iptables until I get things working, but clearly that's insufficient to resolve the problem at this point. -Bob On 05/20/2014 05:18 AM, Jiri Moskovcak wrote: > On 05/20/2014 03:33 AM, Bob Doolittle wrote: >> I have successfully completed hosted-engine --deploy with 3.4.1, and set >> up my Engine. This is with F19 for both the host and engine >> (with the sos package workarounds stated). >> >> However, it does not seem to have initialized any Storage Domains, and >> the Datacenter cannot initialize. >> >> I've attached my setup and vdsm logs. >> >> Any guidance appreciated. >> >> Thanks, >> Bob >> > Hi Bob, > can you try to run: > > $ hosted-engine --connect-storage > $ service ovirt-ha-broker restart > $ service ovirt-ha-agent restart > > and see if it helps? > > Thanks, > Jirka > >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Hosted engine problem - Engine VM will not start
On 05/20/2014 03:33 AM, Bob Doolittle wrote: I have successfully completed hosted-engine --deploy with 3.4.1, and set up my Engine. This is with F19 for both the host and engine (with the sos package workarounds stated). However, it does not seem to have initialized any Storage Domains, and the Datacenter cannot initialize. I've attached my setup and vdsm logs. Any guidance appreciated. Thanks, Bob Hi Bob, can you try to run: $ hosted-engine --connect-storage $ service ovirt-ha-broker restart $ service ovirt-ha-agent restart and see if it helps? Thanks, Jirka ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
