[ovirt-users] Re: The built in group Everyone is troublesome.

[Doron Fediuck]

Just for the record, oVirt has a VM Portal which enables this use case
without a need to change the permission.

On Sat, Dec 8, 2018, 14:05 Staniforth, Paul  Glad your sorted, I've added a bugzilla entry
>
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1656794
>
>
> basically Webadmin allows you to add a system permission to the everyone
> group but you can't remove it.
>
>
> Regards,
>
>Paul S.
> --
> *From:* Jacob Green 
> *Sent:* 05 December 2018 17:45
> *To:* Staniforth, Paul
> *Cc:* users
> *Subject:* Re: [ovirt-users] The built in group Everyone is troublesome.
>
>
> Thank you for your help! This worked flawlessly and helped me
> understand the engine database a little more!
>
> On 12/04/2018 12:00 PM, Staniforth, Paul wrote:
>
> Get the id for the everyone group
> https://engine.example.com/ovirt-engine/api/groups?search=everyone
>
> Get the id for the UserRole
> https://engine.example.com/ovirt-engine/api/roles
>
> connect to the engine database
>
>  e.g.
>
> psql -h localhost -U engine -d engine
>
> select * from permissions where ad_element_id='groupid';
>
> note the id of the permission, probably the last one but you can check by
> the role_id
> then delete the permission.
>
> delete  from permissions where id='noted before';
>
> you should make a backup of your system before you do this.
>
>
>
> Regards,
>
> Paul S.
> --
> *From:* Staniforth, Paul
> *Sent:* 04 December 2018 17:23
> *To:* Jacob Green
> *Subject:* Re: [ovirt-users] The built in group Everyone is troublesome.
>
>
> Yes, that's not good you need to remove the UserRole system permission but
> they fixed it so you can't.
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1366205
>
>
> I think there maybe a bug that allows you to add system permissions to the
> everyone group in 4.2, you're only supposed to be able to change the
> permissions with a dbscript.
>
>
> I'll look up my notes on how to remove the permission from the DB.
>
>
> Regards,
>
> Paul S.
>
>
> --
> *From:* Jacob Green  
> *Sent:* 04 December 2018 16:59
> *To:* Staniforth, Paul
> *Subject:* Re: [ovirt-users] The built in group Everyone is troublesome.
>
>
>
> If the picture does not come through. The following are the permisstions
>
> Group > Everyone
>
> Everyone > Role - UserRole,UserProfileEditorObject : (System)
>
> On 12/04/2018 10:20 AM, Staniforth, Paul wrote:
>
> What are the permissions for the group everyone, in particular the system 
> permission should be just UserProfileEditor.
>
> Regards,
>  Paul S.
> 
> From: Jacob Green  
> Sent: 04 December 2018 15:20
> To: users
> Subject: [ovirt-users] The built in group Everyone is troublesome.
>
>  So all my VMs are inheriting system permissions from group
> everyone and giving all my users access to all my VMs, in ovirt 4.2. Is
> there a best practices guide or any recommendation on how to clear this
> up? Clicking remove on everyone does not work because Ovirt won't allow
> me to remove a built in account.
>
>
> Thank you
>
> --
> Jacob Green
>
> Systems Admin
>
> American Alloy Steel
>
> 713-300-5690
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/A5MW7PLHH5YGBVA7WSRZ24NO2IBY4ICD/
> To view the terms under which this email is distributed, please go 
> to:-http://leedsbeckett.ac.uk/disclaimer/email/
>
>
> --
> Jacob Green
>
> Systems Admin
>
> American Alloy Steel
>
> 713-300-5690
>
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
>
> --
> Jacob Green
>
> Systems Admin
>
> American Alloy Steel
>
> 713-300-5690
>
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q3I7GDZSJSLMTWJWHNH32OCSAS34X66N/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YO3UTONSCN26JA2

[ovirt-users] latest pycurl 7.43 brokes ovirtsdk4

[Nathanaël Blanchet]

Hi all,

If anyone uses latest pycurl 7.43 provided by pip or ansible tower/awx, 
any ovirtsdk4 calling will issue with the log:


The full traceback is:
WARNING: The below traceback may *not* be related to the actual failure.
  File "/tmp/ansible_ovirt_auth_payload_L1HK9E/__main__.py", line 202, 
in 

    import ovirtsdk4 as sdk
  File 
"/opt/awx/embedded/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", 
line 22, in 

    import pycurl

fatal: [localhost]: FAILED! => {
    "changed": false,
    "invocation": {
    "module_args": {
    "ca_file": null,
    "compress": true,
    "headers": null,
    "hostname": null,
    "insecure": true,
    "kerberos": false,
    "ovirt_auth": null,
    "password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
    "state": "present",
    "timeout": 0,
    "token": null,
    "url": "https://acore.v100.abes.fr/ovirt-engine/api";,
    "username": "admin@internal"
    }
    },
    "msg": "ovirtsdk4 version 4.2.4 or higher is required for this module"
}

The only way is to set the version of pycurl with

pip install -U "pycurl == 7.19.0"

(Before this, in tower/awx, you should  create venv)


--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PPHWBTC7U7CRMAHCURICIJCNUTKIUCHF/

[ovirt-users] Re: oVirt 4.2.7 export VM seems stuck at end of sparse disk

[Gianluca Cecchi]

On Mon, Jan 21, 2019 at 6:10 PM Gianluca Cecchi 
wrote:

> Hello,
> it happened two times, always with VMs composed by more than 1 disk.
> Now I have a VM with 9 disks and a total of about 370Gb:
> 1 x 90Gb
> 5 x 50Gb
> 3 x 10Gb
>
> I export vm to an export domain and it started 2 hours and 10 minutes ago
> at 15:46.
> At beginning the write rate on export domain was 120MB/s (in line with I/O
> capabilities of storage subsystem).
> It seems 5 disks completed ok, while 4 don't complete, even if it seems to
> be some reading activity:
>
> with command
> iotop -d 3 -k -o -P
> I get this on hypervisor where qemu-img convert command is executing
>
> Total DISK READ :5712.75 K/s | Total DISK WRITE : 746.58 K/s
> Actual DISK READ:6537.11 K/s | Actual DISK WRITE:   6.89 K/s
>   PID  PRIO  USERDISK READ>  DISK WRITE  SWAPIN  IOCOMMAND
>
> 21238 idle vdsm 1344.18 K/s  183.12 K/s  0.00 %  0.15 % qemu-img
> convert -p -t non~1d23-4829-8350-f81fa16ea8b0
> 21454 idle vdsm 1344.18 K/s  183.12 K/s  0.00 %  0.06 % qemu-img
> convert -p -t non~443d-4563-8879-3dbd711b6936
> 21455 idle vdsm 1344.18 K/s  189.68 K/s  0.00 %  0.08 % qemu-img
> convert -p -t non~b67d-4acd-9bb5-485bc3ffdf2e
> 21548 idle vdsm 1344.18 K/s  190.67 K/s  0.00 %  0.06 % qemu-img
> convert -p -t non~7fc
>
>
It seems it was only a matter of waiting. Completed after 4 hours and 47
minutes:
Vm raclab1 was exported successfully to xfer 21/01/1920:33:22

Probably depending on I/O priority set by default as "idle" for the
"qemu-img convert" command
Any fair/supported way to manually change I/O priority, just in case?
Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RCPFHYDUVJQHKE4FYR4PUIJID7Y47WG7/

[ovirt-users] Re: oVirt 4.2.8 CPU Compatibility

[Lucie Leistnerova]

Hello Stefano,

On 1/22/19 12:40 PM, Stefano Danzi wrote:


Hello!
I'm running oVirt 4.2.7.5-1.el7 on 3 hosts cluster.
Cluster CPU Type is "AMD Opteron G3".

On default cluster I can see the warning:
"Warning: The CPU type 'AMD Opteron G3' will not be supported in the 
next minor version update'"


Is it still supported in version 4.2.8? I can't see references in 
documentation or changelog.

___
Yes, it should be supported also in 4.2.8. According to Release notes 
for 4.2.7 this warning is related to 4.3 version.


https://www.ovirt.org/release/4.2.7/

BZ 1623259  *Mark clusters with 
deprecated CPU type
*In the current release, for compatibility versions 4.2 and 4.3, a 
warning in the Cluster screen indicates that the CPU types currently 
used are not supported in 4.3. The warning enables the user to change 
the cluster CPU type to a supported CPU type.


**

Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3P7KOTLL2PE7WWBK5S4BS665KDDOXPQJ/

Best regards,

--
Lucie Leistnerova
Quality Engineer, QE Cloud, RHVM
Red Hat EMEA

IRC: lleistne @ #rhev-qe

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/23NEGK7SS4TKOO5SSQGTJFPA36ZZODMJ/

[ovirt-users] Re: How to connect 2 hosts

[Dominik Holler]

On Tue, 22 Jan 2019 16:18:06 +0200
ada per  wrote:

> Thank you for all the advice.
> 
> The reason  for the issue was the physical switch like you said!!
> 
> The issue is now fixed.
> 

Thanks for letting us know!

> Thanks 😊
> 
> 
> On Tue, 22 Jan 2019, 10:04 Dominik Holler  
> > On Tue, 22 Jan 2019 07:33:19 -
> > "ada per"  wrote:
> >
> > > Thank you i try pinging Host1 from Host 2 with the following results:
> > > On a logical network Host1 can ping host2 but while on  a VLAN host 1
> > cannot ping host2.
> > >
> > > The hosts are physically connected via a switch.
> >
> > Can you please check if the switch allows VLANs on the used ports?
> >
> > Alternatively, you can connect the VMs via
> > external networks without subnets, e.g. provided by preconfigured
> > ovirt-provider-ovn, to the router VM.
> >
> > > ___
> > > Users mailing list -- users@ovirt.org
> > > To unsubscribe send an email to users-le...@ovirt.org
> > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > > List Archives:
> > https://lists.ovirt.org/archives/list/users@ovirt.org/message/AASF52IJU4SEUCIZDN3VYAN36SL7V7GT/
> >
> >
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XZWE7QXILQDCFFTVDZD7PRIBZI6I6RGV/

[ovirt-users] Re: How to connect 2 hosts

[ada per]

Thank you for all the advice.

The reason  for the issue was the physical switch like you said!!

The issue is now fixed.

Thanks 😊


On Tue, 22 Jan 2019, 10:04 Dominik Holler  On Tue, 22 Jan 2019 07:33:19 -
> "ada per"  wrote:
>
> > Thank you i try pinging Host1 from Host 2 with the following results:
> > On a logical network Host1 can ping host2 but while on  a VLAN host 1
> cannot ping host2.
> >
> > The hosts are physically connected via a switch.
>
> Can you please check if the switch allows VLANs on the used ports?
>
> Alternatively, you can connect the VMs via
> external networks without subnets, e.g. provided by preconfigured
> ovirt-provider-ovn, to the router VM.
>
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/AASF52IJU4SEUCIZDN3VYAN36SL7V7GT/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HNPKKCS4PO4ZFPYTARIV5PB3TTN5SSZL/

[ovirt-users] Re: How to connect 2 hosts

[Adamantini Peratikou]

Thank you for your reply amd advice.

I ve tried that, but unfortunately when the vm-router starts on host1 it will 
only assign IPs toVMs residing on host1. If i migrate the  vm-router on host2 
it will  assign IPs only on Vms residing on host2.

And even if i assign IPs manually..
I can ping all the VMs under host1 from a host1 VM,
I can ping all the VMs under host2 from a host2 VM.

I cannot ping a host2 VM from a host1VM and vice versa.


 Dominik Holler wrote 

On Mon, 21 Jan 2019 14:00:14 -
adamantini.perati...@ouc.ac.cy wrote:

> I  have the following configuraton:
> 1 cluster, 2 Hosts
>
>  I would like to use a Vm-router under Host 1 to act as a dhcp server for 
> both HOST1 and HOST2 VMs is it possible?


Yes.
oVirt's logical networks provides isolation on layer 2.
If the switch connection the two hosts does not block this, you can
1. create a new logical network with a vlan tag in oVirt,
2. connect this new logical network to both hosts,
   ( Compute > Hosts > xxx > Network Interfaces > Setup Host Networks)
3. add a new network interface with network profile of the new logical
   network to the router/dhcp server VM and
4. use the same logical network for the network interface of the client
   VMs.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4NBEAG24CADMVTQBCIQBQGU5JDYULRS3/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/O4Z744FXG3MDWD27S6IRDWJOYI44JNNU/

[ovirt-users] Re: oVirt Node install - kickstart postintall

[jeanbaptiste.coupiac]

Hello Guys,

 

Thanks for answers.

 

During install, we’ve fond “final system”, which seem called “0+1” is mount in 
a temp partition. All modifications need to be done into this tmp mount.

@Ryan, I will try to make my actions before nodectl init , and give a feedback

 

Thanks !

 

De : Ryan Barry  
Envoyé : jeudi 17 janvier 2019 03:10
À : Brad Riemann 
Cc : jeanbapti...@nfrance.com; users 
Objet : Re: [ovirt-users] Re: oVirt Node install - kickstart postintall

 

The quick answer is that operations in %post must be performed before 'nodectl 
init'. If that's done, they'll happily stick.

On Mon, Jan 14, 2019, 9:29 PM Brad Riemann mailto:brad.riem...@cloud5.com>  wrote:

Can you send over the whole %post segment i via pastebin? I think i've run 
across something similar that i addressed, but just want to be sure.

 

Brad Riemann

Sr. System Architect

Cloud5 Communications

 

  _  

From: jeanbapti...@nfrance.com   
mailto:jeanbapti...@nfrance.com> >
Sent: Friday, January 11, 2019 1:51:14 AM
To: users@ovirt.org  
Subject: [ovirt-users] oVirt Node install - kickstart postintall 

 

CAUTION: This email originated from outside of CLOUD5. Do not click links or 
open attachments unless you recognize the sender and know the content is safe.


Hello everybody,

Since days, I'm trying to install oVirt (via Foreman) in network mode (TFTP net 
install).
All is great, but I want to make some actions in postinstall (%post).
Some actions are relatated to /etc/sysconfig/network-interfaces and another 
action is related to root authorized_keys.

When I try to add pub-key to a created  authorized_keys for root, I work 
(verified into anaconda.
But after installation and anaconda reboot, I've noticed all my %post actions 
in /(root) are discared. After reboot, there is nothing in /root/.ssh for 
example.
Whereas, in /etc, all my modications are preserved.

I thought to a Selinux relative issue, but It is not relative to  Selinux

I miss something. Please can you help to  understand how oVirt install / 
partition work ?

thanks for all
___
Users mailing list -- users@ovirt.org  
To unsubscribe send an email to users-le...@ovirt.org 
 
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BCQEKHCPSFDEFDPI4OVSXRTJS3BSJH5R/

___
Users mailing list -- users@ovirt.org  
To unsubscribe send an email to users-le...@ovirt.org 
 
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TGT7K3N245SH37OIKCTG75WI5PM46OOI/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EFJ4RJU53TM6NKDRRZC2CPBMLYBXV57M/

[ovirt-users] Re: User Management

[Sakhi Hadebe]

Thank you Lucie,

I assigned a role to a user and the user can now log in.

Thanks a lot

On Tue, Jan 22, 2019 at 9:03 AM Lucie Leistnerova 
wrote:

> Hi Sakhi,
> On 1/22/19 7:52 AM, Sakhi Hadebe wrote:
>
> Hi,
>
> I need some pointers to documentation that will help me to configure users
> to have access and some rights (access to console, starting and shutting
> down own VMs) on their VMs on the VM portal.
>
> I have created a user using the ovirt-aaa-jdbc-tool utility, but I am
> unable to login to the cockpit portal. It gives an error:
>
> *The user shadebe@internal is not **authorized** to perform login*
>
> This error means that user doesn't have at least UserRole on any object
> (could be VM, cluster, DC, ...).
>
> Roles explanation you can find here
>
>
> https://www.ovirt.org/documentation/admin-guide/chap-Global_Configuration.html
>
> User details:
>
> [root@hostedengine ~]# ovirt-aaa-jdbc-tool query --what=user
> --pattern="name=s*"
> -- User shadebe(a35e8e14-d32b-4ff9-89e0-fd090a87146a) --
> Namespace: *
> Name: shadebe
> ID: a35e8e14-d32b-4ff9-89e0-fd090a87146a
> Display Name:
> Email: sa...@sanren.ac.za
> First Name: Sakhi
> Last Name: Hadebe
> Department:
> Title:
> Description:
> Account Disabled: false
> Account Locked: false
> Account Unlocked At: 1970-01-01 00:00:00Z
> Account Valid From: 2019-01-16 09:08:48Z
> Account Valid To: 2219-01-16 09:08:48Z
> Account Without Password: false
> Last successful Login At: 2019-01-16 09:32:52Z
> Last unsuccessful Login At: 2019-01-16 09:32:36Z
> Password Valid To: 2029-01-16 10:30:00Z
>
> Please help.
>
>
>
>
>
> --
> Regards,
> Sakhi Hadebe
>
> Engineer: South African National Research Network (SANReN)Competency Area, 
> Meraka, CSIR
>
> Tel:   +27 12 841 2308 <+27128414213>
> Fax:   +27 12 841 4223 <+27128414223>
> Cell:  +27 71 331 9622 <+27823034657>
> Email: sa...@sanren.ac.za 
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CMVCAGEWP6QDORW7FHAXX4VGJJTNUBGK/
>
> Best regards.
>
> --
> Lucie Leistnerova
> Quality Engineer, QE Cloud, RHVM
> Red Hat EMEA
>
> IRC: lleistne @ #rhev-qe
>
>

-- 
Regards,
Sakhi Hadebe

Engineer: South African National Research Network (SANReN)Competency
Area, Meraka, CSIR

Tel:   +27 12 841 2308 <+27128414213>
Fax:   +27 12 841 4223 <+27128414223>
Cell:  +27 71 331 9622 <+27823034657>
Email: sa...@sanren.ac.za 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P2SMLRQIHWWD4DKRG3BIRZLOS6RIVYCQ/

[ovirt-users] oVirt 4.2.8 CPU Compatibility

[Stefano Danzi]

Hello!
I'm running oVirt 4.2.7.5-1.el7 on 3 hosts cluster.
Cluster CPU Type is "AMD Opteron G3".

On default cluster I can see the warning:
"Warning: The CPU type 'AMD Opteron G3' will not be supported in the 
next minor version update'"


Is it still supported in version 4.2.8? I can't see references in 
documentation or changelog.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3P7KOTLL2PE7WWBK5S4BS665KDDOXPQJ/

[ovirt-users] Re: ETL service aggregation to hourly tables has encountered an error. Please consult the service log for more details.

[Shirly Radco]

Hi,

The lastHourAgg should be the hour before last. But for some reason it is 1
hour after that.
Do you know when this started?

Thi fix the issue you need to update the "lastHourAgg" .

Please run the following commands:

service ovirt-engine-dwhd stop


su postgres -c 'psql -d ovirt_engine_history -c " UPDATE
history_configuration set var_datetime = var_datetime - interval '24 hour'
WHERE var_name = 'lastHourAggr' "';
su postgres -c 'psql -d ovirt_engine_history -c " UPDATE
history_configuration set var_datetime = var_datetime - interval '1 day'
WHERE var_name = 'lastDayAggr' "';

service ovirt-engine-dwhd start



Best,

--

SHIRLY RADCO

BI SENIOR SOFTWARE ENGINEER

Red Hat Israel 

TRIED. TESTED. TRUSTED. 


On Tue, Jan 22, 2019 at 10:15 AM  wrote:

> Dears,
> Could you answer how can I fix my problem?
> Thanks
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VQ6MWBWX2NAR7MEH4KCK3AO4TAHK3A46/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UZCBUUNPVNXUKKH32XQWANJDQDBKMY6I/

[ovirt-users] Re: Roles and Permissions and Inheritance

[Moti Asayag]

On Wed, Dec 12, 2018 at 5:27 PM Brian Wilson  wrote:

> Is there a way to prevent Roles Assigned to Groups on Objects to only
> apply to where it is set?
>
>
> Basically looking for a way to do what we had done in VMWare which
> involved using the do not propagate permission setting.
>
>
> be able
> Seems to me that right now there is no way to set this so if i give access
> to something at the top level of a DC those accesses wlll overide if i then
> explcitly set another role and permission on an object underneath
>
>
> Lets take as a concrete example the ovirtmgmt network.   I do not want
> users in the engine to be able to place VMs on this (but i want the
> Superusers to be able to still) How can i accomplish this with the way
> roles and permissions work with Ovirt?
>

There is an entity named Vnic Profile under the Network element.
When creating the Vnic Profile, you can define if you'd want it to be
'publicly' used or not.
In case you select the 'Public Use' option, a public permissions
(permissions to a special inner user called EVERYONE) is granted on that
profile.
See attached screenshot of that profile:

[image: Selection_978.png]

However, if the VM was already created and has a nic attached to
'ovirtmgmt', the admin will need to remove or replace the profile of the
restricted network.


>
>
> thanks!
> Brian
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PY6ZITVTLFNXFXN7PQ6TO46UMTVOGB23/
>


-- 
Regards,
Moti
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DQNHNMCR3XMIYCIOBF3DNWFNVFXHI3C3/

[ovirt-users] Re: Roles and Permissions and Inheritance

[Dominik Holler]

On Wed, 12 Dec 2018 15:25:56 -
"Brian Wilson"  wrote:

> Is there a way to prevent Roles Assigned to Groups on Objects to only apply 
> to where it is set?
> 
> 
> Basically looking for a way to do what we had done in VMWare which involved 
> using the do not propagate permission setting.
> 
> 
> be able 
> Seems to me that right now there is no way to set this so if i give access to 
> something at the top level of a DC those accesses wlll overide if i then 
> explcitly set another role and permission on an object underneath
> 
> 
> Lets take as a concrete example the ovirtmgmt network.   I do not want users 
> in the engine to be able to place VMs on this (but i want the Superusers to 
> be able to still) How can i accomplish this with the way roles and 
> permissions work with Ovirt?
> 

The attachment of logical networks to VMs is manged in oVirt by "vNIC
Profiles". The Boolean property "Public" of vNIC Profiles enables simple
permission management to allow or deny the attachment of the logical
network to a VM by Users.

If "Public" is set, all Users are allowed to attach the related logical
network to the VMs he/she is allowed to manage.

If "Public" is not set, only Users/Administrators with the required permissions
(e.g. "Assign vNIC Profile to VM") are allowed to attach the logical
network to a VM.

If you want to prevent users in the Engine to be able to place VMs on
ovirtmgmt, you have to remove this "Public" permissions from the ovirtmgmt 
object.
In the web UI, this can be done like this:
In Administration > Configure > Roles
Select the role "VnicProfileUser".
This will show a table of the allowed User-Object pairs.
Select the pair of the user "Everyone" and the "Object" ovirtmgmt
and remove this pair.
This will prevent users attaching their VMs to ovirtmgmt.
Please make sure that there are no additional permissions on ovirtmgmt
and/or its vNic Profile that violates the desired permissions level.  
However, if the VM was already created and has an interface attached to 
'ovirtmgmt',
these attainments has to be removed or replaced manually.

> 
> thanks!
> Brian
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PY6ZITVTLFNXFXN7PQ6TO46UMTVOGB23/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6YZDHOSHHQPIVYYTFFHEW7NPRT2CX45D/

[ovirt-users] Re: How to connect to a guest with vGPU ?

[Josep Manel Andrés Moscardó]

I am reading about VirGL but I am not sure how to set it up, can anyone 
point me to some documentation?


Cheers.



On 17/1/19 17:20, Josep Manel Andrés Moscardó wrote:

Hi,
I got vGPU through mdev working but I am wondering how I would connect 
to the client and make use of the GPU. So far I try to access the 
console through SPICE and at some point in the boot process it switches 
to GPU and I cannot see anything else.


Thanks.




--
Josep Manel Andrés Moscardó
Systems Engineer, IT Operations
EMBL Heidelberg
T +49 6221 387-8394



smime.p7s
Description: S/MIME Cryptographic Signature
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UFB2OFQO2KJ2DLU3MDQ6FBPKFRUQ2VZE/

[ovirt-users] [ANN] oVirt 4.2.8 is now generally available

[Sandro Bonazzola]

The oVirt Project is pleased to announce the general availability of oVirt
4.2.8, as of January 22nd, 2019.

This update is the eighth and last in a series of stabilization updates to
the 4.2 series.

Please note that no further updates will be issued for the 4.2 series.
We encourage users to upgrade to 4.3 series when generally available to
receive new features and updates.

This release is available now for:
* Red Hat Enterprise Linux 7.6 or later
* CentOS Linux (or similar) 7.6 or later

This release supports Hypervisor Hosts running:
* Red Hat Enterprise Linux 7.6 or later
* CentOS Linux (or similar) 7.6 or later
* oVirt Node 4.2

See the release notes [1] for installation / upgrade instructions and a
list of new features and bugs fixed.

Notes:
- oVirt Appliance is available
- oVirt Node update is available, ISO will be available soon [2]
- oVirt Tools Setup ISO is available[2]

oVirt Node has been updated including:
- oVirt 4.2.8: http://www.ovirt.org/release/4.2.8/
- Release for CentOS Linux 7 (1810) (
https://lists.centos.org/pipermail/centos-announce/2018-December/023082.html
)
- Ansible 2.7.5:
https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2.7.rst#v2-7-5

Relevant CentOS Errata included:
- CEBA-2019:0037 CentOS 7 tzdata BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2019-January/023142.html
)
- CESA-2019:0049 Important CentOS 7 systemd Security Update (
https://lists.centos.org/pipermail/centos-announce/2019-January/023143.html
)
- CESA-2018:3651 Moderate CentOS 7 kernel Security Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023132.html
)
- CEBA-2018:3338 CentOS 7 sos BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023125.html
)
- CEBA-2018:3664 CentOS 7 selinux-policy BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023124.html
)
- CESA-2018:3738 Important CentOS 7 ruby Security Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023122.html
)
- CESA-2018:3347 Critical CentOS 7 python-paramiko Security Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023119.html
)
- CESA-2018:3665 Important CentOS 7 NetworkManager Security Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023116.html
)
- CEBA-2018:3442 CentOS 7 lvm2 BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023112.html
)
- CEBA-2018:3669 CentOS 7 libvirt BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023110.html
)
- CEBA-2018:3659 CentOS 7 libguestfs BugFix Update (
https://lists.centos.org/pipermail/centos-announce/2018-December/023108.html
)


Additional Resources:
* Read more about the oVirt 4.2.8 release highlights:
http://www.ovirt.org/release/4.2.8/
* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/

[1] http://www.ovirt.org/release/4.2.8/
[2] http://resources.ovirt.org/pub/ovirt-4.2/iso/


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RBQSKOJ4K66QVWU3OPGDN2XRXLUMXGCU/

[ovirt-users] Re: ETL service aggregation to hourly tables has encountered an error. Please consult the service log for more details.

[melnyksergii]

Dears, 
Could you answer how can I fix my problem?
Thanks
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VQ6MWBWX2NAR7MEH4KCK3AO4TAHK3A46/

[ovirt-users] Re: How to connect 2 hosts

[Dominik Holler]

On Tue, 22 Jan 2019 07:33:19 -
"ada per"  wrote:

> Thank you i try pinging Host1 from Host 2 with the following results:
> On a logical network Host1 can ping host2 but while on  a VLAN host 1 cannot 
> ping host2.
> 
> The hosts are physically connected via a switch.

Can you please check if the switch allows VLANs on the used ports?

Alternatively, you can connect the VMs via
external networks without subnets, e.g. provided by preconfigured
ovirt-provider-ovn, to the router VM.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/AASF52IJU4SEUCIZDN3VYAN36SL7V7GT/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CNJZ3KZ7PLCAV5TE75UWT3HNIAWLPNJ4/