OK, so how will I present secure VMs (i.e. VMs that live in secure, protected networks) at unsecure locations once SPICE is gone? VNC and RDP connect to the VM itself. SPICE connects to a TLS port on the hypervisor which means we never expose the VM to the end users network and we have a small number of devices (hypervisors) to protect.
I'm happy to take suggestions. On Wed, 8 Dec 2021 at 15:40, Arik Hadas <aha...@redhat.com> wrote: > > > On Wed, Dec 8, 2021 at 3:53 AM Colin Coe <colin....@gmail.com> wrote: > >> For us, SPICE lets us present VMs in secure networks to unsecure >> locations. RDP and VNC will not work for us. >> >> I didn't want to rant but why Red Hat drops useful features is beyond >> me. First Satellite 5 (Spacewalk), GlusterFS, not RHV. Yep, we've been a >> RHV customer since RHEV v2.2 days. SPICE was the compelling feature then >> and remains so. >> >> My 2 cents >> >> On Wed, 8 Dec 2021 at 03:42, Alex McWhirter <a...@triadic.us> wrote: >> >>> It's being removed from RHEL 9, unsure of reasoning. >>> >>> So this mean that oVirt cannot offer SPICE/QXL on RHEL9, there is no >>> spice package, qemu is compiled without SPICE/QXL support, the kernel does >>> not support QXL video drivers. >>> >>> It's not that oVirt is killing off SPICE/QXL, but rather RHEL9 is and >>> oVirt cannot support a feature not available on the host OS unless 3rd >>> party packages or a SiG makes them available >>> >> > Right > The idea was to have a new cluster level on which we can provide the > latest-and-greatest fixes and capabilities and so to base it on CentOS > stream 9 where SPICE is not available > We anyway intend to keep SPICE in oVirt 4.5 on lower cluster levels, which > should work as long as the hosts are not upgraded to CentOS stream 9 > > >> . >>> >>> >>> On 2021-12-07 14:14, Patrick Hibbs wrote: >>> >>> Hello, >>> >>> Can I ask why this is being removed? >>> >>> The linked bugzilla report doesn't give a reason, and at least two >>> others have expressed concerns over SPICE's deprecation. >>> >>> Personally, I would like to know why it's being removed entirely with no >>> recourse instead of becoming an option to enable in the VM config, or an >>> optional RPM that can be installed by the sysadmin. >>> >>> Thanks. >>> >>> On Tue, 2021-12-07 at 09:41 +0200, Arik Hadas wrote: >>> >>> >>> >>> On Tue, Dec 7, 2021 at 8:33 AM Patrick Hibbs <hibbsncc1...@gmail.com> >>> wrote: >>> >>> Hello, >>> >>> Are we to assume that VNC mode is the only thing that will be supported >>> for the VM consoles moving forward then? >>> As the pure SPICE mode only works with QXL display as far as I can tell. >>> >>> I ask because the VNC or SPICE+VNC modes haven't worked in my >>> environment for over a year now, and that change >>> would effectively prevent the use of any VM console in my environment. >>> (Use of VNC with remote viewer always gives >>> me an authentication error.) Not that it's a normal environment, but >>> that kind of thing should be advertised more. Just in case >>> simillar issues exist in other deployments. >>> >>> >>> Yes, one would need to make sure vnc/vga works well before upgrading to >>> the next cluster-level (in oVirt 4.5) >>> In general it is recommended to test the configuration in the new >>> cluster-level by setting some representative VMs in the environment with a >>> custom compatibility level and check that they work properly before >>> upgrading to that cluster-level. >>> >>> >>> >>> Thanks. >>> >>> On Mon, 2021-12-06 at 22:03 +0200, Arik Hadas wrote: >>> >>> >>> >>> On Mon, Dec 6, 2021 at 8:45 PM lejeczek via Users <users@ovirt.org> >>> wrote: >>> >>> >>> >>> On 06/12/2021 17:42, lejeczek via Users wrote: >>> > Hi. >>> > >>> > I've Qemu/Libvirt from >>> > >>> ovirt-release-master-4.5.0-0.0.master.20211206152702.gitebb0229.el9.noarch >>> > and it seems QXL is not there. >>> > Is that a fluke or intention? >>> > Do you have QXL working? >>> > >>> upss.. pardon me, these are from CentOS 9 Steam own repos >>> actually. >>> >>> >>> >>> Right, and that's the reason for the ongoing work on removing qxl on >>> cluster level 4.7: >>> https://bugzilla.redhat.com/show_bug.cgi?id=1976607 >>> >>> >>> _______________________________________________ >>> Users mailing list -- users@ovirt.org >>> To unsubscribe send an email to users-le...@ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DZMAQQJMPHD2L4DPVHTET5N4KB4MZDUY/ >>> >>> _______________________________________________ >>> Users mailing list -- users@ovirt.org >>> To unsubscribe send an email to users-le...@ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/22NZAQL46WMEFFKQ66EKZBHGE5KCX3MY/ >>> >>> >>> >>> _______________________________________________ >>> Users mailing list -- users@ovirt.org >>> To unsubscribe send an email to users-le...@ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GT5YYVAFM4P7AMCFFCJNYZO75Y6M3H4R/ >>> >>> >>> >>> >>> _______________________________________________ >>> Users mailing list -- users@ovirt.org >>> To unsubscribe send an email to users-le...@ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/UVPLNOGVY6DD6S7HKC5JEZ43N4NLHMRY/ >>> >>> >>> _______________________________________________ >>> Users mailing list -- users@ovirt.org >>> To unsubscribe send an email to users-le...@ovirt.org >>> Privacy Statement: https://www.ovirt.org/privacy-policy.html >>> oVirt Code of Conduct: >>> https://www.ovirt.org/community/about/community-guidelines/ >>> List Archives: >>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GA7YUKUDR466NGHP7TMP6TFQLWFMH4WU/ >>> >> _______________________________________________ >> Users mailing list -- users@ovirt.org >> To unsubscribe send an email to users-le...@ovirt.org >> Privacy Statement: https://www.ovirt.org/privacy-policy.html >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GIGE75F2I3RAO7AWNPFWQB3T46NRJJT3/ >> >
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3TTZPWJU46MLORAT5H4TODJ5HDFWYIKM/
