Re: [ovirt-users] novnc error

2014-06-13 Thread Alon Bar-Lev
Frantisek, Can you please help? there seems to have incompatibility with SimpleHTTPServer? Or use of undocumented feature? Alon - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: users@ovirt.org Sent: Friday, June 13, 2014 12:50:30

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Sven Kieske
Hi, it's kind of you to let those know about these attacks who do not already know them, but this should be well understood by every professional by know. Shared resources are never secure, if you can not control the access from third parties to shared memory. this does not just affect KSM (or

Re: [ovirt-users] Live migration - quest VM stall

2014-06-13 Thread Michal Skrivanek
On 9 Jun 2014, at 21:05, Markus Stockhausen wrote: Hello, at the moment we are investigating stalls of Windows XP VMs during live migration. Our environment consists of: - FC20 hypervisor nodes - qemu 1.6.2 - OVirt 3.4.1 - Guest: Windows XP SP2 - VM Disks: Virtio IDE tested -

Re: [ovirt-users] Resource Pools in oVirt

2014-06-13 Thread Michal Skrivanek
On 10 Jun 2014, at 23:18, s k wrote: Hello all, As far as I understand, CPU Shares can be set on each VM individually and cannot be changed while it's powered on. It would be great if we could create resource pools (similar to what VMware does) for CPU shares so that we could assign

Re: [ovirt-users] Resource Pools in oVirt

2014-06-13 Thread Doron Fediuck
- Original Message - From: s k sokratis1...@outlook.com To: users@ovirt.org Sent: Wednesday, June 11, 2014 12:18:35 AM Subject: [ovirt-users] Resource Pools in oVirt Hello all, As far as I understand, CPU Shares can be set on each VM individually and cannot be changed while it's

[ovirt-users] python-sdk: attach disk snapshot to another virtual machine

2014-06-13 Thread Michael Ablassmeier
hi guys, according to an commit in Oct. 2013 there was a patch added to the SDK which allows to attach an existing snapshot to a virtual machine: commit 72e67dd5406f3c193234697ce88d92dbe64759d7 Author: Michael pasternak mpast...@redhat.com Date: Wed Oct 30 11:24:19 2013 +0200 sdk:

Re: [ovirt-users] novnc error

2014-06-13 Thread Frantisek Kobzik
Hi guys, I actually use the same version of websockify without problems (but on Fedora). For me this looks like some problem with certificates. Let me investigate further. F. - Original Message - From: Alon Bar-Lev alo...@redhat.com To: Garrett Baltezegar my9...@gmail.com, Frantisek

Re: [ovirt-users] SLA : RAM scheduling

2014-06-13 Thread Michal Skrivanek
On 11 Jun 2014, at 14:31, noc wrote: On 26-5-2014 16:22, Gilad Chaplik wrote: Hi Nathanaël, happy to assist :) hope it will work in first run: 1) install the proxy and ovirtsdk. 2) put attached file in the right place (according to docs: .../plugins), make sure to edit the file with

Re: [ovirt-users] localdomain

2014-06-13 Thread Michal Skrivanek
On 12 Jun 2014, at 05:11, Andrew Lau wrote: The cloud-init integration was a little flaky when I was using it, when it was introduced in 3.3 - definitely I ended up not using any of the inbuilt oVirt options (eg. hostname, root password). Root password never worked for me as it'd force a

Re: [ovirt-users] SLA : RAM scheduling

2014-06-13 Thread Joop
Michal Skrivanek wrote: On 11 Jun 2014, at 14:31, noc wrote: On 26-5-2014 16:22, Gilad Chaplik wrote: Hi Nathanaël, happy to assist :) hope it will work in first run: 1) install the proxy and ovirtsdk. 2) put attached file in the right place (according to docs: .../plugins), make

Re: [ovirt-users] SLA : RAM scheduling

2014-06-13 Thread Sven Kieske
Well, I know this is not that helpful but afaik there is work done to replace xml-rpc communication with json based communication. Am 13.06.2014 10:57, schrieb Joop: Then oVirt shouldn't either use that kind of numbers or should not use xmlrpc. Sorry but thats a non-answer and doesn't help

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Jorick Astrego
Hi Sven, Thanks for you response, I will read some more. But as you say it has been known for a while and I was aware of it for many years although never diving into the specifics. I always thought it was not a practical attack vector What caught my attention was that it was so fast it can

Re: [ovirt-users] Installation of ovirt-node-iso rpm on oVirt Engine

2014-06-13 Thread Sven Kieske
CC'ing Fabian, who should know the actual image location. Am 05.06.2014 10:58, schrieb Faltermeier, Florian: Hi all, I'm planning to update/reinstall my ovirt 3.4 hypervisors via the update mechanism that provided in the ovirt-engine. I red the documentation about Ovirt Node

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Sven Kieske
I suppose a hosted-engine solution without HA would suffice the use case of just having one system to host and manage vms, with the ability to extend this system to many more. Am 03.06.2014 13:52, schrieb Itamar Heim: what would look different for hosted-engine on a single host? just not have

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Sven Kieske
+1 from me, this should work without manual tweaking (except for live snapshots). Am 09.06.2014 20:32, schrieb Joop: If you install a minimal Centos-6.5 and add the ovirt repository and then add the host using the webui of engine then it will install all needed packages (vdsm/libvirt/kvm) and

Re: [ovirt-users] Qemu guest agent to install RPMs in guest VM from host machine

2014-06-13 Thread Michal Skrivanek
On 12 Jun 2014, at 12:42, Puneet Bakshi wrote: ​​ Hi, I want to be able to install RPM packages (available in host system at some path) to the guest VM and want this facility to be available as a tool. I am thinking of having a gemu guest agent (qemu-ga) running inside guest VM. I

Re: [ovirt-users] Installation of ovirt-node-iso rpm on oVirt Engine

2014-06-13 Thread Fabian Deutsch
Am Freitag, den 13.06.2014, 09:08 + schrieb Sven Kieske: CC'ing Fabian, who should know the actual image location. Am 05.06.2014 10:58, schrieb Faltermeier, Florian: Hi all, I'm planning to update/reinstall my ovirt 3.4 hypervisors via the update mechanism that provided in the

[ovirt-users] VDSM update warning

2014-06-13 Thread Chris
Hi, After updating VDSM to 4.14.9-0.el6 on a running vdsm node, I saw this warning/error: Updating : vdsm-python-zombiereaper-4.14.9-0.el6.noarch1/10 Updating : vdsm-python-4.14.9-0.el6.x86_64 2/10 Updating : vdsm-xmlrpc-4.14.9-0.el6.noarch

Re: [ovirt-users] fail to shutdown ubuntu guest

2014-06-13 Thread Dan Kenigsberg
On Fri, Jun 13, 2014 at 09:22:37AM +0800, John Xue wrote: I went through the xfce GUI options Settings Manager - Power Manager to the field When power button is pressed, set to power off, but only successful one time, after reboot it was already set to Ask. If no one login to guest(just power

Re: [ovirt-users] SLA : RAM scheduling

2014-06-13 Thread Michal Skrivanek
On 13 Jun 2014, at 11:04, Sven Kieske wrote: Well, I know this is not that helpful but afaik there is work done to replace xml-rpc communication with json based communication. @Sven: yeah, and one of the (many) reasons why we want it. But that's vdsm. Scheduler is a different package/app.

Re: [ovirt-users] fail to shutdown ubuntu guest

2014-06-13 Thread Michal Skrivanek
On 13 Jun 2014, at 12:19, Dan Kenigsberg wrote: On Fri, Jun 13, 2014 at 09:22:37AM +0800, John Xue wrote: I went through the xfce GUI options Settings Manager - Power Manager to the field When power button is pressed, set to power off, but only successful one time, after reboot it was

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Dan Kenigsberg
On Fri, Jun 13, 2014 at 11:05:37AM +0200, Jorick Astrego wrote: Hi Sven, Thanks for you response, I will read some more. But as you say it has been known for a while and I was aware of it for many years although never diving into the specifics. I always thought it was not a practical

Re: [ovirt-users] SLA : RAM scheduling

2014-06-13 Thread Joop
Michal Skrivanek wrote: On 13 Jun 2014, at 11:04, Sven Kieske wrote: Well, I know this is not that helpful but afaik there is work done to replace xml-rpc communication with json based communication. @Sven: yeah, and one of the (many) reasons why we want it. But that's vdsm.

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Joop
Sven Kieske wrote: +1 from me, this should work without manual tweaking (except for live snapshots). Am 09.06.2014 20:32, schrieb Joop: If you install a minimal Centos-6.5 and add the ovirt repository and then add the host using the webui of engine then it will install all needed packages

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Doron Fediuck
- Original Message - From: Dan Kenigsberg dan...@redhat.com To: Jorick Astrego j.astr...@netbulae.eu, ali...@redhat.com, do...@redhat.com Cc: users@ovirt.org Sent: Friday, June 13, 2014 1:36:17 PM Subject: Re: [ovirt-users] KSM and cross-vm attack On Fri, Jun 13, 2014 at

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Doron Fediuck
- Original Message - From: Doron Fediuck dfedi...@redhat.com To: Dan Kenigsberg dan...@redhat.com Cc: users@ovirt.org Sent: Friday, June 13, 2014 2:14:30 PM Subject: Re: [ovirt-users] KSM and cross-vm attack - Original Message - From: Dan Kenigsberg

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Sven Kieske
Done that: https://bugzilla.redhat.com/show_bug.cgi?id=1109157 Am 13.06.2014 12:36, schrieb Dan Kenigsberg: It would be relatively simple to disable KSM per VM. This way, a customer that values security more than density, could pay more to keep his memory pages unscanned by KSM. Anyone

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Sven Kieske
+1 on that one too. I'm adding sandro to the conversation. Is there any reason, why this is not done? If not, I would open an RFE for that. Am 13.06.2014 12:53, schrieb Joop: Looking at this again I would like the webui install process to add the repo too :-) If engine-setup is up to date it

Re: [ovirt-users] KSM and cross-vm attack

2014-06-13 Thread Sven Kieske
This site misses public keys for sending encrypted mails. That's not that good for a security related mail. I'm sure it just isn't mentioned in the wiki, could one use the same keys as for redhat security mailings? Am 13.06.2014 13:16, schrieb Doron Fediuck: One more thing; For future

Re: [ovirt-users] Network traffic being mirrored

2014-06-13 Thread Jim Rippon
In the end I didn't trace the cause of this issue, but a reboot of the host appears to have stopped the odd behaviour. I'll keep an eye on it and feedback if I see a repeat, perhaps there is something I can do to provide some useful debugging information - open to suggestions? Jim On

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Sandro Bonazzola
Il 13/06/2014 13:19, Sven Kieske ha scritto: +1 on that one too. I'm adding sandro to the conversation. Is there any reason, why this is not done? If not, I would open an RFE for that. Am 13.06.2014 12:53, schrieb Joop: Looking at this again I would like the webui install process to add

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Sandro Bonazzola
Il 13/06/2014 13:40, Sandro Bonazzola ha scritto: Il 13/06/2014 13:19, Sven Kieske ha scritto: +1 on that one too. I'm adding sandro to the conversation. Is there any reason, why this is not done? If not, I would open an RFE for that. Am 13.06.2014 12:53, schrieb Joop: Looking at this

Re: [ovirt-users] novnc error

2014-06-13 Thread Frantisek Kobzik
Hi Garrett, just a question about accessing the engine via the browser: do you access engine via the fqdn you typed in in the engine-setup? For instance, if you issue the certificates for 'mycompany.com' and use let's say ip address in the browser, websockify won't work... Cheers, Franta

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Bob Doolittle
Would that help the issue being reported in this thread at all? This thread was about issues with clean shutdown of a single node hosted environment, which result in hangs/timeouts and the inability to issue poweroff without it resulting in a reboot. There have been no suggestions about how to

Re: [ovirt-users] python-sdk: attach disk snapshot to another virtual machine

2014-06-13 Thread Juan Hernandez
On 06/13/2014 10:43 AM, Michael Ablassmeier wrote: hi guys, according to an commit in Oct. 2013 there was a patch added to the SDK which allows to attach an existing snapshot to a virtual machine: commit 72e67dd5406f3c193234697ce88d92dbe64759d7 Author: Michael pasternak

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Doron Fediuck
Bob, the way to handle it is to switch to global maintenance, and then ssh into the VM and shut it down. After rebooting you should switch maintenance mode to off. - Original Message - From: Bob Doolittle b...@doolittle.us.com To: Sven Kieske s.kie...@mittwald.de Cc: users

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Doron Fediuck
- Original Message - From: Andrew Lau and...@andrewklau.com To: Bob Doolittle b...@doolittle.us.com Cc: users users@ovirt.org Sent: Friday, June 6, 2014 6:14:18 AM Subject: Re: [ovirt-users] Can HA Agent control NFS Mount? On Fri, Jun 6, 2014 at 1:09 PM, Bob Doolittle

Re: [ovirt-users] novnc error

2014-06-13 Thread Frantisek Kobzik
Great, I'm happy that it's working now! Cheers, Franta. - Original Message - From: Garrett Baltezegar my9...@gmail.com To: Frantisek Kobzik fkob...@redhat.com Cc: Alon Bar-Lev alo...@redhat.com, users@ovirt.org Sent: Friday, June 13, 2014 2:26:06 PM Subject: Re: [ovirt-users] novnc

Re: [ovirt-users] novnc error

2014-06-13 Thread Alon Bar-Lev
- Original Message - From: Frantisek Kobzik fkob...@redhat.com To: Garrett Baltezegar my9...@gmail.com Cc: Alon Bar-Lev alo...@redhat.com, users@ovirt.org Sent: Friday, June 13, 2014 3:34:42 PM Subject: Re: [ovirt-users] novnc error Great, I'm happy that it's working now!

Re: [ovirt-users] novnc error

2014-06-13 Thread Garrett Baltezegar
If I can help by providing any additional information about our current network or system setup for your testing purposes , please let me know! On Jun 13, 2014 8:36 AM, Alon Bar-Lev alo...@redhat.com wrote: - Original Message - From: Frantisek Kobzik fkob...@redhat.com To: Garrett

Re: [ovirt-users] localdomain

2014-06-13 Thread Koen Vanoppen
The cloud-init integration was a little flaky when I was using it, when it was introduced in 3.3 - definitely ... Indeed. We are now using 3.4 and in works much better. And indeed the root password option also works now! :-) And we can add a domain IF we type domain after every VM that has to

Re: [ovirt-users] oVirt - Node install on CentOS

2014-06-13 Thread Simon Barrett
One thing I do have to tweak is the group on /var/run/sanlock/sanlock.sock. By default, when I reboot the owner/group/perms are this: srw-rw 1 sanlock root 0 Jun 13 09:08 sanlock.sock vdsm then has problems accessing sanlock.sock and I see errors like this in engine.log: 2014-06-13

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Bob Doolittle
Doron, This is my normal process but it does not resolve the issue. A few of us who have experienced this have tried a number of things. I see two hangs/wdmd timeouts during shutdown, so I think there are two remaining lease holders. I find if I stop vdsmd, ovirt-ha-agent, and

Re: [ovirt-users] localdomain

2014-06-13 Thread Michal Skrivanek
On 13 Jun 2014, at 15:17, Koen Vanoppen wrote: The cloud-init integration was a little flaky when I was using it, when it was introduced in 3.3 - definitely ... Indeed. We are now using 3.4 and in works much better. And indeed the root password option also works now! :-) And we can

[ovirt-users] [ ERROR ] Failed to execute stage 'Closing up': Command '/bin/systemctl' failed to execute

2014-06-13 Thread Todd
I have increased the amount of Ram from 4GB to 8GB This is what I found: [root@ovirt ~]# journalctl -r -a -u ovirt-engine -- Logs begin at Wed 2014-06-04 10:56:26 EDT, end at Fri 2014-06-13 13:04:02 EDT Jun 12 17:02:18 ovirt.od.itots.local ovirt-engine.py[6127]: 2014-06-12 17:02:18, Jun

Re: [ovirt-users] [ ERROR ] Failed to execute stage 'Closing up': Command '/bin/systemctl' failed to execute

2014-06-13 Thread Gianluca Cecchi
Il 13/giu/2014 19:14 Todd td...@yahoo.com ha scritto: This is what I found, thank you for sharing: [root@ovirt ~]# journalctl -r -a -u ovirt-engine -- Logs begin at Wed 2014-06-04 10:56:26 EDT, end at Fri 2014-06-13 13:04:02 EDT Jun 12 17:02:18 ovirt.od.itots.local ovirt-engine.py[6127]:

[ovirt-users] After Upgrade to 3.4.2 no conole icon activation

2014-06-13 Thread Markus Stockhausen
Hello, after starting a VM in webadmin on ovirt engine 3.4.2 we have to manually switch to another VM and back to get the console icon active. Is this behaviour desired? Markus Diese E-Mail enthält vertrauliche

Re: [ovirt-users] Network traffic being mirrored

2014-06-13 Thread Antoni Segura Puimedon
- Original Message - From: Jim Rippon j...@rippon.me.uk To: Users@ovirt.org Sent: Friday, June 13, 2014 1:23:10 PM Subject: Re: [ovirt-users] Network traffic being mirrored In the end I didn't trace the cause of this issue, but a reboot of the host appears to have stopped the

[ovirt-users] Live Snapshot issue (once more) with the new QEMU Packages (V5.10) from CENTOS Updates

2014-06-13 Thread Christian Rebel
Hi all, after today's CentOS yum update, I had once more the Problem with LIVE Snapshots due to the new qemu packages. Can anyone explain me why there is such a huge difference between the CENTOS QEMU Packages and the Jenkins RHEV qemu Packages. CENTOS QEMU = LIVE Snapshot failed (tested with

[ovirt-users] Live Snapshot issue (once more) with the new QEMU Packages (V10) from CENTOS Updates

2014-06-13 Thread Christian Rebel
Hi all, after today's CentOS yum update, I had once more the Problem with LIVE Snapshots due to the new qemu packages. Can anyone explain me why there is such a huge difference between the CENTOS QEMU Packages and the Jenkins RHEV qemu Packages. CENTOS QEMU = LIVE Snapshot failed (tested with

Re: [ovirt-users] Live Snapshot issue (once more) with the new QEMU Packages (V10) from CENTOS Updates

2014-06-13 Thread Douglas Schilling Landgraf
Hi Christian, On 06/13/2014 04:02 PM, Christian Rebel wrote: Hi all, after today's CentOS yum update, I had once more the Problem with LIVE Snapshots due to the new qemu packages. Can anyone explain me why there is such a huge difference between the CENTOS QEMU Packages and the Jenkins RHEV

Re: [ovirt-users] Can HA Agent control NFS Mount?

2014-06-13 Thread Bob Doolittle
It turns out I was wrong before. I don't have to start up Engine to get into this situation. I did the following: * Turn on Global Maintenance * Engine init 0 * Reboot node * Wait a few minutes * poweroff I'll get the timeouts and hangs during shutdown again, and a reset instead of