Re: [ovirt-users] active directory and sso

[Martin Perina]

On Fri, Feb 2, 2018 at 4:46 AM, 董青龙  wrote:

> Thanks for the reply. I have completely configured all the things in
> option 1 which you told. But it seems that sso still does not work. My
> domain forest is "test.org" and my user is "test". When I login the user
> portal, I get "t...@test.org@test.org" int the top right corner. Should
> it be "t...@test.org"?
>

​This​ is fine, for AD we are using UPN as username (in your case '
t...@test.org') and we concatenate this with authz extension name (in your
case '@test.org').

Is it possible that engine send wrong user name to the guest agent?
>

>
​Could you please share engine.log from, after you try to login to VM
Portal and open console to the VM to investigate?

Thanks

Martin

At 2018-02-01 15:35:57, "Martin Perina"  wrote:
>
>
>
> On Thu, Feb 1, 2018 at 9:13 AM, 董青龙  wrote:
>
>> Hi, all
>> I am trying to make SSO working with windows7 vm in an ovirt 4.1
>> environment. Ovirt-guest-agent has been installed in windows7 vm. I have an
>> active directory server of windows2012 and I have configured the engine
>> using "ovirt-engine-extension-aaa-ldap-setup" successfully. The windows7
>> vm has joined the domain,too. But when I login the userportal using a user
>> created in the AD server, I still have to login the windows7 vm using the
>> same user for the second time. It seems that SSO does not work.
>> Anyone can help me? Thanks!
>>
>
> We are not providing full SSO for
> VMs
> . At the moment you have  2 options:
>
> 1. If you want user to be automatically logged in into a VM, then you need
> to setup SSO using aaa-ldap extension for AD (please don't forget to answer
> Yes for question about SSO for VMs in setup tool). Andf of course in a VM
> you need to have installed and enabled guest agent. Once user logs into VM
> Portal and clicks on a VM, then he should be automatically logged into it.
>
> 2. If you setup kerberos for engine SSO, then you don't need to enter
> password to loging into VM Portal, but in such case we cannot pass a
> password into a VM and user are not automatically logged in.
>
> Martin
>
>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> --
> Martin Perina
> Associate Manager, Software Engineering
> Red Hat Czech s.r.o.
>
>
>
>
>



-- 
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Power management - oVirt 4,2

[Martin Perina]

On Fri, Feb 2, 2018 at 5:40 AM, Terry hey  wrote:

> Dear Martin,
>
> Um..Since i am going to use HPE ProLiant DL360 Gen10 Server to setup oVirt
> Node(Hypervisor). HP G10 is using ilo5 rather than ilo4. Therefore, i would
> like to ask whether oVirt power management support iLO5 or not.
>

​We don't have any hardware with iLO5 available, but there is a good chance
that it will be compatible with iLO4. Have you tried to setup your server
with iLO4? Does the Test in Edit fence agent dialog work​? If not could you
please try to install fence-agents-all package on different host and
execute following:

fence_ilo4 -a  -l  -p  -v -o status

and share the output?

Thanks

Martin


> If not, do you have any idea to setup power management with HP G10?
>
> Regards,
> Terry
>
> 2018-02-01 16:21 GMT+08:00 Martin Perina :
>
>>
>>
>> On Wed, Jan 31, 2018 at 11:19 PM, Luca 'remix_tj' Lorenzetto <
>> lorenzetto.l...@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> From ilo3 and up, ilo fencing agents are an alias for fence_ipmi. Try
>>> using the standard ipmi.
>>>
>>
>> ​It's not just an alias, ilo3/ilo4 also have different defaults than
>> ipmilan. For example if you use ilo4, then by default following is used:
>>
>> ​
>>
>> ​lanplus=1
>>  power_wait=4
>>
>> ​So I recommend to start with ilo4 and add any necessary custom options
>> into Options field. If you need some custom
>> options, could you please share them with us? It would be very helpful
>> for us, if needed we could introduce ilo5 with
>> different defaults then ilo4
>>
>> Thanks
>>
>> Martin
>>
>>
>>> Luca
>>>
>>>
>>>
>>> Il 31 gen 2018 11:14 PM, "Terry hey"  ha scritto:
>>>
 Dear all,
 Did oVirt 4.2 Power management support iLO5 as i could not see iLO5
 option in Power Management.

 Regards
 Terry

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>>
>> --
>> Martin Perina
>> Associate Manager, Software Engineering
>> Red Hat Czech s.r.o.
>>
>
>


-- 
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] active directory and sso

[董青龙]

Thanks for the reply. I have completely configured all the things in option 1 
which you told. But it seems that sso still does not work. My domain forest is 
"test.org" and my user is "test". When I login the user portal, I get 
"t...@test.org@test.org" int the top right corner. Should it be 
"t...@test.org"? Is it possible that engine send wrong user name to the guest 
agent?


At 2018-02-01 15:35:57, "Martin Perina"  wrote:





On Thu, Feb 1, 2018 at 9:13 AM, 董青龙  wrote:

Hi, all
I am trying to make SSO working with windows7 vm in an ovirt 4.1 
environment. Ovirt-guest-agent has been installed in windows7 vm. I have an 
active directory server of windows2012 and I have configured the engine using 
"ovirt-engine-extension-aaa-ldap-setup" successfully. The windows7 vm has 
joined the domain,too. But when I login the userportal using a user created in 
the AD server, I still have to login the windows7 vm using the same user for 
the second time. It seems that SSO does not work.
Anyone can help me? Thanks!


We are not providing full SSO for
VMs
. At the moment you have  2 options:


1. If you want user to be automatically logged in into a VM, then you need to 
setup SSO using aaa-ldap extension for AD (please don't forget to answer Yes 
for question about SSO for VMs in setup tool). Andf of course in a VM you need 
to have installed and enabled guest agent. Once user logs into VM Portal and 
clicks on a VM, then he should be automatically logged into it.


2. If you setup kerberos for engine SSO, then you don't need to enter password 
to loging into VM Portal, but in such case we cannot pass a password into a VM 
and user are not automatically logged in.


Martin






 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users





--

Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Node network setup

[Edward Haas]

It is not clear to me what you are attempting to do exactly, but networking
settings should be handled through the setup networks window on Engine.
(Network->Hosts->->[specific host]->Interface tab -> SetupNetwork

You can then define bonds by dragging the nics one over the other.

Thanks,
Edy.

On Tue, Jan 30, 2018 at 9:07 PM,  wrote:

> Hi,
> I am trying to setup a cluster of two nodes, with self hoste Engine.
> Things went fine for the first machine, but it as rather messy about the
> second one.
> I would like to have load balancing and failover for both management
> network and storage (NFS repository).
>
> So what should I exactly do to get a working network stack which can be
> recognized when I try to add this host to the cluster ?
>
> Have tried configuring bonds and briges using Cockpit, using manual
> "ifcfg" files, but all the time I see the bridges and the bonds not linked
> in the Engine interface, so the new host cannot be enrolled.
> If I try to link "ovirtmgmt" to the the associated bond, I have a
> connectivity loss because it is the management device, and I have te
> restart the network services. As management configuration is not OK, I
> can't setup the storage connection.
>
> And if I just try to activate the host, I will install and configure
> things and then complain about missing "ovirtmgmt" and "nfs" networks,
> which both exist and work and Centos level.
>
> The interface, bonds and bridge names are copy/paste from the first server.
>
> # brctl show ovirtmgmt
> bridge namebridge idSTP enabledinterfaces
> ovirtmgmt8000.44a842394200nobond0
> # ip addr show bond0
> 33: bond0:  mtu 1500 qdisc
> noqueue master ovirtmgmt state UP qlen 1000
> link/ether 44:a8:42:39:42:00 brd ff:ff:ff:ff:ff:ff
> inet6 fe80::46a8:42ff:fe39:4200/64 scope link
>valid_lft forever preferred_lft forever
> # ip addr show em1
> 2: em1:  mtu 1500 qdisc mq master
> bond0 state UP qlen 1000
> link/ether 44:a8:42:39:42:00 brd ff:ff:ff:ff:ff:ff
> # ip addr show em3
> 4: em3:  mtu 1500 qdisc mq master
> bond0 state UP qlen 1000
> link/ether 44:a8:42:39:42:00 brd ff:ff:ff:ff:ff:ff
>
> By the way, is it mandatory to stop and disable NetworkManager or not ?
>
> Thanks for any kind of help :-)
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Upgrade via reinstall?

[Jamie Lawrence]

> On Feb 1, 2018, at 1:21 AM, Yaniv Kaul  wrote:

> The engine-backup utility is your friend and will properly back up for you 
> everything you need.

Thanks, but that is an answer to a different question I didn't ask.

It does, implicitly, seem to indicate that there probably are artifacts on 
hosts that need to be preserved, and hopefully I can find specifics in that 
script .

-j
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.2.1 pre hosted engine deploy failure

[Simone Tiraboschi]

On Thu, Feb 1, 2018 at 11:31 AM, Gianluca Cecchi 
wrote:

> On Wed, Jan 31, 2018 at 11:48 AM, Simone Tiraboschi 
> wrote:
>
>>
>>
>> Ciao Gianluca,
>> we have an issue logging messages with special unicode chars from
>> ansible, it's tracked here:
>> https://bugzilla.redhat.com/show_bug.cgi?id=1533500
>> but this is just hiding your real issue.
>>
>> I'm almost sure that you are facing an issue writing on NFS and thwn dd
>> returns us an error message with \u2018 and \u2019.
>> Can you please check your NFS permissions?
>>
>>
>
> Ciao Simone, thanks for answering.
> I think you were right.
> Previously I had this:
>
> /nfs/SHE_DOMAIN *(rw)
>
> Now I have changed to:
>
> /nfs/SHE_DOMAIN *(rw,anonuid=36,anongid=36,all_squash)
>
> I restarted the deploy with the answer file
>
> # hosted-engine --deploy --config-append=/var/lib/
> ovirt-hosted-engine-setup/answers/answers-20180129164431.conf
>
> and it went ahead... and I have contents inside the directory:
>
> # ll /nfs/SHE_DOMAIN/a0351a82-734d-4d9a-a75e-3313d2ffe23a/
> total 12
> drwxr-xr-x. 2 vdsm kvm 4096 Jan 29 16:40 dom_md
> drwxr-xr-x. 6 vdsm kvm 4096 Jan 29 16:43 images
> drwxr-xr-x. 4 vdsm kvm 4096 Jan 29 16:40 master
>
> But it ended with a problem regarding engine vm:
>
> [ INFO  ] TASK [Wait for engine to start]
> [ INFO  ] ok: [localhost]
> [ INFO  ] TASK [Set engine pub key as authorized key without validating
> the TLS/SSL certificates]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Force host-deploy in offline mode]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [include_tasks]
> [ INFO  ] ok: [localhost]
> [ INFO  ] TASK [Obtain SSO token using username/password credentials]
> [ INFO  ] ok: [localhost]
> [ INFO  ] TASK [Add host]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Wait for the host to become non operational]
> [ INFO  ] ok: [localhost]
> [ INFO  ] TASK [Get virbr0 routing configuration]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Get ovirtmgmt route table id]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Check network configuration]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Clean network configuration]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Restore network configuration]
> [ INFO  ] changed: [localhost]
> [ INFO  ] TASK [Wait for the host to be up]
> [ ERROR ] Error: Failed to read response.
> [ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 50, "changed":
> false, "msg": "Failed to read response."}
> [ ERROR ] Failed to execute stage 'Closing up': Failed executing
> ansible-playbook
> [ INFO  ] Stage: Clean up
> [ INFO  ] Cleaning temporary resources
> [ INFO  ] TASK [Gathering Facts]
> [ INFO  ] ok: [localhost]
> [ INFO  ] TASK [Remove local vm dir]
> [ INFO  ] ok: [localhost]
> [ INFO  ] Generating answer file '/var/lib/ovirt-hosted-engine-
> setup/answers/answers-20180201104600.conf'
> [ INFO  ] Stage: Pre-termination
> [ INFO  ] Stage: Termination
> [ ERROR ] Hosted Engine deployment failed: this system is not reliable,
> please check the issue,fix and redeploy
>   Log file is located at /var/log/ovirt-hosted-engine-
> setup/ovirt-hosted-engine-setup-20180201102603-1of5a1.log
>
> Under /var/log/libvirt/qemu of host from where I'm running the
> hosted-engine deploy I see this
>
>
> 2018-02-01 09:29:05.515+: starting up libvirt version: 3.2.0, package:
> 14.el7_4.7 (CentOS BuildSystem ,
> 2018-01-04-19:31:34, c1bm.rdu2.centos.org), qemu version:
> 2.9.0(qemu-kvm-ev-2.9.0-16.el7_4.13.1), hostname: ov42.mydomain
> LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
> QEMU_AUDIO_DRV=none /usr/libexec/qemu-kvm -name
> guest=HostedEngineLocal,debug-threads=on -S -object
> secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-1-
> HostedEngineLocal/master-key.aes -machine 
> pc-i440fx-rhel7.4.0,accel=kvm,usb=off,dump-guest-core=off
> -cpu Westmere,+kvmclock -m 6184 -realtime mlock=off -smp
> 1,sockets=1,cores=1,threads=1 -uuid 8c8f8163-5b69-4ff5-b67c-07b1a9b8f100
> -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/
> var/lib/libvirt/qemu/domain-1-HostedEngineLocal/monitor.sock,server,nowait
> -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc
> -no-shutdown -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1
> -boot menu=off,strict=on -device 
> virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4
> -drive file=/var/tmp/localvm1ClXud/images/918bbfc1-d599-4170-
> 9a92-1ac417bf7658/bb8b3078-fddb-4ce3-8da0-0a191768a357,
> format=qcow2,if=none,id=drive-virtio-disk0 -device
> virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-
> virtio-disk0,id=virtio-disk0,bootindex=1 -drive
> file=/var/tmp/localvm1ClXud/seed.iso,format=raw,if=none,id=drive-ide0-0-0,readonly=on
> -device ide-cd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -netdev
> tap,fd=26,id=hostnet0,vhost=on,vhostfd=28 -device virtio-net-pci,netdev=
> hostnet0,id=net0,mac=00:16:3e:15:7b:27,bus=pci.0,addr=0x3 -chardev
> pty,id=charse

[ovirt-users] kernel perf messages should I warn?

[Gianluca Cecchi]

Hello,
I have passed storage san of a 4.1.8 test env from an HP MSA2000 to an IBM
V3700

I'm doing some basic tests inside a VM and sometimes I see this kind of
messages

kernel: perf: interrupt took too long (6813 > 6810), lowering
kernel.perf_event_max_sample_rate to 29000

that I didn't see when using the MSA

Should I worry about them?

Thanks,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] After realizing HA migration, the virtual machine can still get the virtual machine information by using the "vdsm-client host getVMList" instruction on the host before the migration

[Pym]

The environment on my side may be different from the link. My VM1 can be used 
normally after it is started on host2, but there is still information left on 
host1 that is not cleaned up.


Only the interface and background can still get the information of vm1 on 
host1, but the vm2 has been successfully started on host2, with the HA function.


I would like to ask a question, whether the UUID of the virtual machine is 
stored in the database or where is it maintained? Is it not successfully 
deleted after using the HA function?






 2018-02-01 16:12:16，"Simone Tiraboschi"  ：





On Thu, Feb 1, 2018 at 2:21 AM, Pym  wrote:



I checked the vm1, he is keep up state, and can be used, but on host1 has after 
shutdown is a suspended vm1, this cannot be used, this is the problem now. 


In host1, you can get the information of vm1 using the "vdsm-client Host 
getVMList", but you can't get the vm1 information using the "virsh list".




Maybe a side effect of https://bugzilla.redhat.com/show_bug.cgi?id=1505399 


Arik?


 




 2018-02-01 07:16:37，"Simone Tiraboschi"  ：





On Wed, Jan 31, 2018 at 12:46 PM, Pym  wrote:

Hi:


The current environment is as follows:


Ovirt-engine version 4.2.0 is the source code compilation and installation. Add 
two hosts, host1 and host2, respectively. At host1, a virtual machine is 
created on vm1, and a vm2 is created on host2 and HA is configured.


Operation steps:


Use the shutdown -r command on host1. Vm1 successfully migrated to host2.
When host1 is restarted, the following situation occurs:


The state of the vm2 will be shown in two images, switching from up and pause.


When I perform the "vdsm-client Host getVMList" in host1, I will get the 
information of vm1. When I execute the "vdsm-client Host getVMList" in host2, I 
will get the information of vm1 and vm2.
When I do "virsh list" in host1, there is no virtual machine information. When 
I execute "virsh list" at host2, I will get information of vm1 and vm2.


How to solve this problem?


Is it the case that vm1 did not remove the information on host1 during the 
migration, or any other reason?


Did you also check if your vms always remained up?
In 4.2 we have libvirt-guests service on the hosts which tries to properly 
shutdown the running VMs on host shutdown.
 


Thank you.




 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users








 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] New oVirt blog post - oVirt 4.2.2 web admin UI browser bookmarks

[Oved Ourfali]

Looks awesome!

On Thu, Feb 1, 2018 at 10:16 AM, Yaniv Kaul  wrote:

> oVirt web admin UI now allows the user to bookmark all entities and
> searches using their browser.
>
> Full blog post @ https://ovirt.org/blog/2018/01/ovirt-admin-bookmarks/
>
> Y.
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using upstream QEMU

[Harry Mallon]

Apologies for the formatting in the following message, I can't get Office for 
Mac to play ball...


Harry Mallon
CODEX | Senior Software Engineer
60 Poland Street | London | England | W1F 7NT
E harry.mallon@codex.online | T +44 203 7000 989
On 01/02/2018, 09:28, "Michal Skrivanek"  wrote:
> On 31 Jan 2018, at 16:53, Yedidyah Bar David  wrote:
>
> On Wed, Jan 31, 2018 at 5:43 PM, Harry Mallon  
wrote:
>> Hello all,
>>
>> Has anyone used oVirt with non-oVirt provided QEMU versions?
>> I need a feature provided by upstream QEMU, but it is disabled in the 
oVirt/CentOS7 QEMU RPM.

just curious - which one?
Typically the reason for disabling it is that it’s not really stable

I am trying to run OSX guests on a host (Apple hardware). The "applesmc" device 
is part of that puzzle and is disabled in the Red Hat QEMU.

>>
>> I have two possible methods to avoid the issue:
>> 1. Fedora has a more recent QEMU which is closer to 'stock'. I see that 
oVirt 4.2 has no Fedora support,
>
> Indeed, mostly
>
>> but is it possible to install the host onto a Fedora machine?
>
> Didn't try this recently, but it might require not-too-much work with
> fc25 or so.
> IIRC fc27 is python3-only, and this will require more work (which is
> ongoing, but
> don't hold your breath).
>
>> I am trying to use the master branch rpms as recommended in the "No 
Fedora Support" note with no luck currently.
>
> Another option is to try to rebuild the fedora srpm for CentOS 7.
>
>> 2. Is it safe/sensible to use oVirt with a CentOS7 host running an 
upstream QEMU version?
>
> No idea. If it's only for development/testing, I'd say give it a try.

it’s as sensible as running any bleeding edge stuff. It should work if you 
manage to resolve qemu deps

you could also rebuild qemu-kvm-ev without the patch which blacklists the 
feature you want to see.

I was able to patch and rebuild qemu-kvm-ev, but I think I have hit more 
problems using the patched firmware from here: 
http://www.contrib.andrew.cmu.edu/~somlo/OSXKVM/. Hopefully that gets me a 
little closer though. Getting these mac VMs to work has so far been a huge pain.

Thanks,
michal
>
>>
>> Thanks,
>> Harry
>>
>>
>> Harry Mallon
>> CODEX | Senior Software Engineer
>> 60 Poland Street | London | England | W1F 7NT
>> E harry.mallon@codex.online | T +44 203 7000 989
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> --
> Didi
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


Harry


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Engine VM cannot be migrated

[carl langlois]

When installing your host make sure you select the deploy in the hosted
engine tab. You should just re install it with this option.

Carl

Le 31 janv. 2018 12:51,  a écrit :

Hi,
What can prevent the hosted engine VM from being migrated ?
I can migrate any other VM in the cluster (same servers), and it is
supposed to be configured to be migrated manually or automatically as far
as I can see.
Regards


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.2.1 and uploading package profile problem

[Gianluca Cecchi]

On Thu, Feb 1, 2018 at 10:17 AM, Gianluca Cecchi 
wrote:

> Hello,
> I'm testing a 4.2.1 environment that uses a proxy for yum.
>
> I see that after enabling 4.2.1pre repos on my future host and instaling
> ovirt packages, now every yum command gets this message in output:
>
> Uploading Package Profile
>
> and after a couple of minutes wait
>
> Unable to upload Package Profile
>
> Searching through internet I found posts related to katello...
>
> Indeed the ovirt install produced installation of katello-agent and
> katello-agent-fact-plugin rpms (version 2.9.0.1-1)
>
> How can I solve this? Do I need to put the proxy anywhere or do I have to
> disable any not necessary service?
>
> Thanks,
>
> Gianluca
>


What I notice is on a CentOS 7 host with 4.1.9 I have these yum plugins
listed when I run "yum update"

Loaded plugins: fastestmirror, langpacks

Instead on this CentOS 7 host where I enabled the 4.2.1pre repos I get

Loaded plugins: fastestmirror, langpacks, package_upload, product-id,
search-disabled-repos,
  : subscription-manager
This system is not registered with an entitlement server. You can use
subscription-manager to register.

During install I got in yum.log:
. . .
Jan 29 15:44:59 Installed:
libvirt-daemon-driver-interface-3.2.0-14.el7_4.7.x86_64
Jan 29 15:45:00 Installed: vhostmd-0.5-12.el7.x86_64
Jan 29 15:45:00 Installed: vdsm-hook-vhostmd-4.20.17-1.el7.centos.noarch
Jan 29 15:45:00 Installed: dnsmasq-2.76-2.el7_4.2.x86_64
Jan 29 15:45:00 Installed: python-netifaces-0.10.4-3.el7.x86_64
Jan 29 15:45:00 Installed: python-rhsm-certificates-1.19.10-1.el7_4.x86_64
Jan 29 15:45:00 Installed: python-rhsm-1.19.10-1.el7_4.x86_64
Jan 29 15:45:01 Installed: subscription-manager-1.19.23-1.el7.centos.x86_64
Jan 29 15:45:01 Installed: katello-agent-fact-plugin-2.9.0.1-1.el7.noarch
Jan 29 15:45:01 Installed: usbredir-0.7.1-2.el7.x86_64
Jan 29 15:45:01 Installed: scrub-2.5.2-7.el7.x86_64
. . .

The katello-agent rpm contains:
/etc/yum/pluginconf.d/package_upload.conf

and as seen above it was also installed
subscription-manager-1.19.23-1.el7.centos.x86_64
that puts:

/etc/yum/pluginconf.d/subscription-manager.conf
/etc/yum/pluginconf.d/product-id.conf
/etc/yum/pluginconf.d/search-disabled-repos.conf

Reasons?

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] No available Host to migrate to

[Gianluca Cecchi]

On Thu, Feb 1, 2018 at 11:55 AM,  wrote:

> Hi,
> Thanks for your answer.
> I totally missed that part when I added the second host to the cluster.
> I put it in maintenance, removed it from the cluster and then added it
> again with this setting. Works a lot better !
>
> Regards
>
>
>
I opened an RFE still in 4.0.5 because I felt it counter-intuitive
https://bugzilla.redhat.com/show_bug.cgi?id=1399613

see my comments inside the bugzilla.
but it was closed as not a bug ;-(

It could have alleviated you from removing/readding host
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] No available Host to migrate to

[spfma . tech]

Hi, Thanks for your answer. I totally missed that part when I added the second 
host to the cluster. I put it in maintenance, removed it from the cluster and 
then added it again with this setting. Works a lot better ! 

Regards 

 Le 01-Feb-2018 10:18:23 +0100, stira...@redhat.com a crit: 

 On Thu, Feb 1, 2018 at 9:06 AM,  wrote:

   Hi, What are the reasons that can cause this message to appear, in a cluster 
where most machines are able to migrate without problem ? I have this problem 
for the Engine VM and managed to solved it for another one which configuration 
prevented any kind of migration. RegardsThe engine VM could be migrated 
just to hosted-engine configured hosts. Do you have another hosted-engine host 
up and with the required resources to accommodate the engine VM?   

___
 Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt 4.2.1 pre hosted engine deploy failure

[Gianluca Cecchi]

On Wed, Jan 31, 2018 at 11:48 AM, Simone Tiraboschi 
wrote:

>
>
> Ciao Gianluca,
> we have an issue logging messages with special unicode chars from ansible,
> it's tracked here:
> https://bugzilla.redhat.com/show_bug.cgi?id=1533500
> but this is just hiding your real issue.
>
> I'm almost sure that you are facing an issue writing on NFS and thwn dd
> returns us an error message with \u2018 and \u2019.
> Can you please check your NFS permissions?
>
>

Ciao Simone, thanks for answering.
I think you were right.
Previously I had this:

/nfs/SHE_DOMAIN *(rw)

Now I have changed to:

/nfs/SHE_DOMAIN *(rw,anonuid=36,anongid=36,all_squash)

I restarted the deploy with the answer file

# hosted-engine --deploy
--config-append=/var/lib/ovirt-hosted-engine-setup/answers/answers-20180129164431.conf

and it went ahead... and I have contents inside the directory:

# ll /nfs/SHE_DOMAIN/a0351a82-734d-4d9a-a75e-3313d2ffe23a/
total 12
drwxr-xr-x. 2 vdsm kvm 4096 Jan 29 16:40 dom_md
drwxr-xr-x. 6 vdsm kvm 4096 Jan 29 16:43 images
drwxr-xr-x. 4 vdsm kvm 4096 Jan 29 16:40 master

But it ended with a problem regarding engine vm:

[ INFO  ] TASK [Wait for engine to start]
[ INFO  ] ok: [localhost]
[ INFO  ] TASK [Set engine pub key as authorized key without validating the
TLS/SSL certificates]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Force host-deploy in offline mode]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [include_tasks]
[ INFO  ] ok: [localhost]
[ INFO  ] TASK [Obtain SSO token using username/password credentials]
[ INFO  ] ok: [localhost]
[ INFO  ] TASK [Add host]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Wait for the host to become non operational]
[ INFO  ] ok: [localhost]
[ INFO  ] TASK [Get virbr0 routing configuration]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Get ovirtmgmt route table id]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Check network configuration]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Clean network configuration]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Restore network configuration]
[ INFO  ] changed: [localhost]
[ INFO  ] TASK [Wait for the host to be up]
[ ERROR ] Error: Failed to read response.
[ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 50, "changed": false,
"msg": "Failed to read response."}
[ ERROR ] Failed to execute stage 'Closing up': Failed executing
ansible-playbook
[ INFO  ] Stage: Clean up
[ INFO  ] Cleaning temporary resources
[ INFO  ] TASK [Gathering Facts]
[ INFO  ] ok: [localhost]
[ INFO  ] TASK [Remove local vm dir]
[ INFO  ] ok: [localhost]
[ INFO  ] Generating answer file
'/var/lib/ovirt-hosted-engine-setup/answers/answers-20180201104600.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ ERROR ] Hosted Engine deployment failed: this system is not reliable,
please check the issue,fix and redeploy
  Log file is located at
/var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20180201102603-1of5a1.log

Under /var/log/libvirt/qemu of host from where I'm running the
hosted-engine deploy I see this


2018-02-01 09:29:05.515+: starting up libvirt version: 3.2.0, package:
14.el7_4.7 (CentOS BuildSystem ,
2018-01-04-19:31:34, c1bm.rdu2.centos.org), qemu version:
2.9.0(qemu-kvm-ev-2.9.0-16.el7_4.13.1), hostname: ov42.mydomain
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
QEMU_AUDIO_DRV=none /usr/libexec/qemu-kvm -name
guest=HostedEngineLocal,debug-threads=on -S -object
secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-1-HostedEngineLocal/master-key.aes
-machine pc-i440fx-rhel7.4.0,accel=kvm,usb=off,dump-guest-core=off -cpu
Westmere,+kvmclock -m 6184 -realtime mlock=off -smp
1,sockets=1,cores=1,threads=1 -uuid 8c8f8163-5b69-4ff5-b67c-07b1a9b8f100
-no-user-config -nodefaults -chardev
socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-1-HostedEngineLocal/monitor.sock,server,nowait
-mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown
-global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot
menu=off,strict=on -device
virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x4 -drive
file=/var/tmp/localvm1ClXud/images/918bbfc1-d599-4170-9a92-1ac417bf7658/bb8b3078-fddb-4ce3-8da0-0a191768a357,format=qcow2,if=none,id=drive-virtio-disk0
-device
virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1
-drive
file=/var/tmp/localvm1ClXud/seed.iso,format=raw,if=none,id=drive-ide0-0-0,readonly=on
-device ide-cd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -netdev
tap,fd=26,id=hostnet0,vhost=on,vhostfd=28 -device
virtio-net-pci,netdev=hostnet0,id=net0,mac=00:16:3e:15:7b:27,bus=pci.0,addr=0x3
-chardev pty,id=charserial0 -device
isa-serial,chardev=charserial0,id=serial0 -chardev
socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/domain-1-HostedEngineLocal/org.qemu.guest_agent.0,server,nowait
-device
virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=o

Re: [ovirt-users] Using upstream QEMU

[Michal Skrivanek]

> On 31 Jan 2018, at 16:53, Yedidyah Bar David  wrote:
> 
> On Wed, Jan 31, 2018 at 5:43 PM, Harry Mallon  
> wrote:
>> Hello all,
>> 
>> Has anyone used oVirt with non-oVirt provided QEMU versions?
>> I need a feature provided by upstream QEMU, but it is disabled in the 
>> oVirt/CentOS7 QEMU RPM.

just curious - which one?
Typically the reason for disabling it is that it’s not really stable

>> 
>> I have two possible methods to avoid the issue:
>> 1. Fedora has a more recent QEMU which is closer to 'stock'. I see that 
>> oVirt 4.2 has no Fedora support,
> 
> Indeed, mostly
> 
>> but is it possible to install the host onto a Fedora machine?
> 
> Didn't try this recently, but it might require not-too-much work with
> fc25 or so.
> IIRC fc27 is python3-only, and this will require more work (which is
> ongoing, but
> don't hold your breath).
> 
>> I am trying to use the master branch rpms as recommended in the "No Fedora 
>> Support" note with no luck currently.
> 
> Another option is to try to rebuild the fedora srpm for CentOS 7.
> 
>> 2. Is it safe/sensible to use oVirt with a CentOS7 host running an upstream 
>> QEMU version?
> 
> No idea. If it's only for development/testing, I'd say give it a try.

it’s as sensible as running any bleeding edge stuff. It should work if you 
manage to resolve qemu deps 

you could also rebuild qemu-kvm-ev without the patch which blacklists the 
feature you want to see.

Thanks,
michal
> 
>> 
>> Thanks,
>> Harry
>> 
>> 
>> Harry Mallon
>> CODEX | Senior Software Engineer
>> 60 Poland Street | London | England | W1F 7NT
>> E harry.mallon@codex.online | T +44 203 7000 989
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
> 
> 
> 
> -- 
> Didi
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Upgrade via reinstall?

[Yaniv Kaul]

On Thu, Feb 1, 2018 at 1:38 AM, Jamie Lawrence 
wrote:

> Hello,
>
> I currently have an Ovirt 4.1.8 installation with a hosted engine using
> Gluster for storage, with the DBs hosted on a dedicated PG cluster.
>
> For reasons[1], it seems possibly simpler for me to upgrade our
> installation by reinstalling rather than upgrading. In this case, I can
> happily bring down the running VMs/otherwise do things that one normally
> can't.
>
> Is there any technical reason I can't/shouldn't rebuild from bare-metal,
> including creating a fresh hosted engine, without losing anything? I
> suppose a different way of asking this is, is there anything on the
> engine/host filesystems that I should preserve/restore for this to work?
>

The engine-backup utility is your friend and will properly back up for you
everything you need.
Y.


>
> Thanks,
>
> -j
>
> [1] If this isn't an option, I'll go in to them in order to figure out a
> plan B; just avoiding a lot of backstory that isn't needed for the question.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] engine add hosts

[Michal Skrivanek]

Hi,
host deploy logs and engine.log would be needed 

Thanks,
michal

> On 27 Jan 2018, at 16:05, 李强华  wrote:
> 
> hello~，I want to add hosts ，but my host offline , can not connect to internal 
> .engine add hosts , the message： installing hosts node failed . My engine was 
> setup successful ,  i use engine-setup --offline OK，please help~
> 
> 
> ___
> Users mailing list
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] No available Host to migrate to

[Simone Tiraboschi]

On Thu, Feb 1, 2018 at 9:06 AM,  wrote:

>
> Hi,
> What are the reasons that can cause this message to appear, in a cluster
> where most machines are able to migrate without problem ?
> I have this problem for the Engine VM and managed to solved it for another
> one which configuration prevented any kind of migration.
> Regards
>

The engine VM could be migrated just to hosted-engine configured hosts.
Do you have another hosted-engine host up and with the required resources
to accommodate the engine VM?


>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] ovirt 4.2.1 and uploading package profile problem

[Gianluca Cecchi]

Hello,
I'm testing a 4.2.1 environment that uses a proxy for yum.

I see that after enabling 4.2.1pre repos on my future host and instaling
ovirt packages, now every yum command gets this message in output:

Uploading Package Profile

and after a couple of minutes wait

Unable to upload Package Profile

Searching through internet I found posts related to katello...

Indeed the ovirt install produced installation of katello-agent and
katello-agent-fact-plugin rpms (version 2.9.0.1-1)

How can I solve this? Do I need to put the proxy anywhere or do I have to
disable any not necessary service?

Thanks,

Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] No available Host to migrate to

[spfma]

Hi, What are the reasons that can cause this message to appear, in a cluster 
where most machines are able to migrate without problem ? I have this problem 
for the Engine VM and managed to solved it for another one which configuration 
prevented any kind of migration. Regards
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] active directory and sso

[Martin Perina]

On Thu, Feb 1, 2018 at 9:13 AM, 董青龙  wrote:

> Hi, all
> I am trying to make SSO working with windows7 vm in an ovirt 4.1
> environment. Ovirt-guest-agent has been installed in windows7 vm. I have an
> active directory server of windows2012 and I have configured the engine
> using "ovirt-engine-extension-aaa-ldap-setup" successfully. The windows7
> vm has joined the domain,too. But when I login the userportal using a user
> created in the AD server, I still have to login the windows7 vm using the
> same user for the second time. It seems that SSO does not work.
> Anyone can help me? Thanks!
>

​We are not providing full SSO for ​
​VMs​
​. At the moment you have  2 options:

1. If you want user to be automatically logged in into a VM, then you need
to setup SSO using aaa-ldap extension for AD (please don't forget to answer
Yes for question about SSO for VMs in setup tool). Andf of course in a VM
you need to have installed and enabled guest agent. Once user logs into VM
Portal​ and clicks on a VM, then he should be automatically logged into it.

2. If you setup kerberos for engine SSO, then you don't need to enter
password to loging into VM Portal, but in such case we cannot pass a
password into a VM and user are not automatically logged in.

Martin


>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Power management - oVirt 4,2

[Martin Perina]

On Wed, Jan 31, 2018 at 11:19 PM, Luca 'remix_tj' Lorenzetto <
lorenzetto.l...@gmail.com> wrote:

> Hi,
>
> From ilo3 and up, ilo fencing agents are an alias for fence_ipmi. Try
> using the standard ipmi.
>

​It's not just an alias, ilo3/ilo4 also have different defaults than
ipmilan. For example if you use ilo4, then by default following is used:

​

​lanplus=1
 power_wait=4

​So I recommend to start with ilo4 and add any necessary custom options
into Options field. If you need some custom
options, could you please share them with us? It would be very helpful for
us, if needed we could introduce ilo5 with
different defaults then ilo4

Thanks

Martin


> Luca
>
>
>
> Il 31 gen 2018 11:14 PM, "Terry hey"  ha scritto:
>
>> Dear all,
>> Did oVirt 4.2 Power management support iLO5 as i could not see iLO5
>> option in Power Management.
>>
>> Regards
>> Terry
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] New oVirt blog post - oVirt 4.2.2 web admin UI browser bookmarks

[Yaniv Kaul]

oVirt web admin UI now allows the user to bookmark all entities and
searches using their browser.

Full blog post @ https://ovirt.org/blog/2018/01/ovirt-admin-bookmarks/

Y.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] active directory and sso

[董青龙]

Hi, all
I am trying to make SSO working with windows7 vm in an ovirt 4.1 
environment. Ovirt-guest-agent has been installed in windows7 vm. I have an 
active directory server of windows2012 and I have configured the engine using 
"ovirt-engine-extension-aaa-ldap-setup" successfully. The windows7 vm has 
joined the domain,too. But when I login the userportal using a user created in 
the AD server, I still have to login the windows7 vm using the same user for 
the second time. It seems that SSO does not work.
Anyone can help me? Thanks!___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] After realizing HA migration, the virtual machine can still get the virtual machine information by using the "vdsm-client host getVMList" instruction on the host before the migration

[Simone Tiraboschi]

On Thu, Feb 1, 2018 at 2:21 AM, Pym  wrote:

>
> I checked the vm1, he is keep up state, and can be used, but on host1 has
> after shutdown is a suspended vm1, this cannot be used, this is the problem
> now.
>
> In host1, you can get the information of vm1 using the "vdsm-client Host
> getVMList", but you can't get the vm1 information using the "virsh list".
>
>
Maybe a side effect of https://bugzilla.redhat.com/show_bug.cgi?id=1505399

Arik?



>
>
>
> 在 2018-02-01 07:16:37，"Simone Tiraboschi"  写道：
>
>
>
> On Wed, Jan 31, 2018 at 12:46 PM, Pym  wrote:
>
>> Hi:
>>
>> The current environment is as follows:
>>
>> Ovirt-engine version 4.2.0 is the source code compilation and
>> installation. Add two hosts, host1 and host2, respectively. At host1, a
>> virtual machine is created on vm1, and a vm2 is created on host2 and HA is
>> configured.
>>
>> Operation steps:
>>
>> Use the shutdown -r command on host1. Vm1 successfully migrated to host2.
>> When host1 is restarted, the following situation occurs:
>>
>> The state of the vm2 will be shown in two images, switching from up and
>> pause.
>>
>> When I perform the "vdsm-client Host getVMList" in host1, I will get the
>> information of vm1. When I execute the "vdsm-client Host getVMList" in
>> host2, I will get the information of vm1 and vm2.
>> When I do "virsh list" in host1, there is no virtual machine information.
>> When I execute "virsh list" at host2, I will get information of vm1 and vm2.
>>
>> How to solve this problem?
>>
>> Is it the case that vm1 did not remove the information on host1 during
>> the migration, or any other reason?
>>
>
> Did you also check if your vms always remained up?
> In 4.2 we have libvirt-guests service on the hosts which tries to properly
> shutdown the running VMs on host shutdown.
>
>
>>
>> Thank you.
>>
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users