[ovirt-users] Re: Use public-signed SSL certs?

[Yedidyah Bar David]

On Tue, Jan 29, 2019 at 6:05 PM Chris Adams  wrote:
>
> I installed an SSL cert from a public CA (Let's Encrypt) on my engine,
> following this:
>
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl#Replacing_the_Manager_CA_Certificate
>
> That gets the regular web UI working, but I can't upload an ISO.  I
> assume that I need to do something with the imageio-proxy service on the
> engine, but not sure what... I tried replacing imageio-proxy.cer and
> imageio-proxy.key.nopass, but that didn't work.

Did you restart the imageio-proxy?

What didn't work? What happened?

>
> I'm trying to avoid ever needing to install a special CA cert in
> browsers.

Makes sense.

This is known bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1637809

Before opening it, we had a bug about fixing the documentation you
point at:

https://bugzilla.redhat.com/show_bug.cgi?id=1385617

As mentioned there, what you tried to do should have worked.

Best regards,
-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZYR3ZJU5V57356DFSZ6BNCWBGX5Q6PP5/

[ovirt-users] Re: Suggestions on adding 1000 or more networks to an engine/hosts

[Brian Wilson]

> Would external OVN networks fit for your scenario?

We steered away from them when we couldn't figure out how to add a VLAN Id on 
them without having to turn around and attach them to an "outside network" 
anyway we would essentially end up with double the networks with them in order 
to allow VMs to interface with Physical Hardware on the Same Vlan IDs



> If possible, would you be able to share the relevant part of engine.log? 
I can try to kick off the playbook again and gather the logs


> From my point of view, it is a good idea to label the host interface
> after creating the networks, if many networks are created rapidly.

That could be a workable solution to an extent if we were to propop them and 
then do the label assignment at the end, this specific use case was adding to 
an existing label where there may be VMs using networks on the label already


> Is this cluster of switchtype OVS or linux bridge?
Linux Bridge


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VPGE7SZH46TYAEKY2CP5II2LRCYYSIVZ/

[ovirt-users] Re: Host Only Network

[Brian Wilson]

Dan is correct and i have actully tested out both of these suggestions and the 
notes i have from them are:

OVN Networks -
 These work well but seem to be limited in that they do not allow a VLAN ID to 
be tagged to them, seems the solution to that is to connect them to an external 
network which leads back to the same question of having to have that network be 
assigned to a nic.

Attaching to a NIC thats down -
 This works but wont be a solution in a machine that may not have an extra nic, 
and was looking for something more portable, also seems that it stays down due 
to no carrier (makes sense), while the dummy interface will show itself as up.

Dummy Network -
  This works and will be the way we implement it until we find a reason not to. 
 This will allow us to use Bridge Networks still which will mimic setups we 
have that are actually connected to physical networks, as well VLAN IDs on them.
   Side note on this i actually had to use dummy_0 as the name and then restart 
the engine before it would show up in the Network Assignment Window for the 
hosts under "Setup Host Networks"


Big thanks to you all on helping with this
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VBEBCKA5YWNSYUA4MQNPU7LSM4CPLETX/

[ovirt-users] Re: Administration Portal High Availability

[Ernest Chua]

Hello
As i already tested HighAvailability of VM's on oVirt, sorry for 
misunderstanding i was referring to high availability of Administration 
Portal of oVirt.






On Tue, 29 Jan 2019 06:52:26 -0500
 Greg Sheremeta  wrote:

Hi!

Our high-availability feature is called Self-Hosted Engine.

https://www.ovirt.org/documentation/self-hosted/chap-Introduction.html

"""
Additionally, the Engine is configured to be highly available. If 
the host
running the Engine virtual machine goes into maintenance mode, or 
fails
unexpectedly, the virtual machine will be migrated automatically to 
another
host in the environment. A minimum of two self-hosted Engine hosts 
are

required to support the high availability feature.
"""

Best wishes,
Greg


On Tue, Jan 29, 2019 at 2:11 AM  wrote:


Hello,
Currently i am finding some Documentation or "how to" setup High
Availability of oVirt Engine's Administration Portal.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DUJ3DHDKXPVADHOKXNAWSIG4PLUBDZZ5/



--

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FN5EKFVMUQHD5ZSBCST4FPURQN5B7WLZ/

[ovirt-users] Re: Use public-signed SSL certs?

[Staniforth, Paul]

Did you try running engine-setup ?

Regards,
  Paul S.

From: Chris Adams 
Sent: 29 January 2019 15:51
To: users@ovirt.org
Subject: [ovirt-users] Use public-signed SSL certs?

I installed an SSL cert from a public CA (Let's Encrypt) on my engine,
following this:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl#Replacing_the_Manager_CA_Certificate

That gets the regular web UI working, but I can't upload an ISO.  I
assume that I need to do something with the imageio-proxy service on the
engine, but not sure what... I tried replacing imageio-proxy.cer and
imageio-proxy.key.nopass, but that didn't work.

I'm trying to avoid ever needing to install a special CA cert in
browsers.
--
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NZBGRCKW6WA4WISTCRDJIFUCMNIKJ2CG/
To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VY3FEC5VFBDP5OMCENB2FZTSEAX43ONX/

[ovirt-users] Re: Using the web-ui VM portal through a proxy failing

[Greg Sheremeta]

Hey,

https://github.com/oVirt/ovirt-web-ui/issues/938

You can follow progress there. Thank you for reporting.

Best wishes,
Greg

On Wed, Oct 24, 2018 at 11:41 AM Callum Smith  wrote:

> Dear Greg,
>
> Here's my config, this is based on the original guide and some other stuff
> that i found to help make it work.
> Squid Cache: Version 3.5.20
>
> https_port 443 accel key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key
> cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt defaultsite= engine node>
> cache_peer  parent 443 0 no-query originserver ssl
> sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
> cache_peer_access engine allow all
> ssl_bump allow all
> http_port 3128
> acl ovirt_nodes dst 
> acl ovirt_engine dstdomain .
> acl all_ips src 1.1.1.1/1
> http_access allow ovirt_nodes ovirt_engine
> http_access allow all_ips
> http_access allow all
>
>
> # Following are from:
> # https://access.redhat.com/solutions/425693
>
> # Leave coredumps in the first cache dir
> coredump_dir /var/spool/squid
>
> # RHEV and Spice may leave connections idle for long periods
> pconn_timeout   12 hours
> request_timeout 12 hours
> read_timeout12 hours
>
> # We need approx 20 open filehandles per spice client
> max_filedesc 16384
>
> Regards,
> Callum
>
> --
>
> Callum Smith
> Research Computing Core
> Wellcome Trust Centre for Human Genetics
> University of Oxford
> e. cal...@well.ox.ac.uk
>
> On 3 Oct 2018, at 00:39, Greg Sheremeta  wrote:
>
> Hi Callum,
>
> I took a look at this, but got in the weeds pretty quickly with squid
> configuration. I can help more offline, but it might be a while.
>
> It'll probably be easier if you can provide me exact steps for how I could
> reproduce. Looks like I need to generate some keys. Can you create and
> share a simple reproducer?
>
> Greg
>
>
> On Thu, Sep 20, 2018 at 11:37 AM Callum Smith 
> wrote:
>
>> Dear Greg,
>>
>> Did you manage to get any further with this, reverse proxy is rather
>> critical to this project.
>>
>> Regards,
>> Callum
>>
>> --
>>
>> Callum Smith
>> Research Computing Core
>> Wellcome Trust Centre for Human Genetics
>> University of Oxford
>> e. cal...@well.ox.ac.uk
>>
>> On 6 Aug 2018, at 12:13, Greg Sheremeta  wrote:
>>
>> I'll look into it and get back to you.
>>
>> On Mon, Aug 6, 2018 at 7:02 AM Callum Smith  wrote:
>>
>>> Dear Greg,
>>>
>>> So what's the go-to here, it seems so close but something in the API
>>> ajax is failing.
>>>
>>> Regards,
>>> Callum
>>>
>>> --
>>>
>>> Callum Smith
>>> Research Computing Core
>>> Wellcome Trust Centre for Human Genetics
>>> University of Oxford
>>> e. cal...@well.ox.ac.uk
>>>
>>> On 27 Jul 2018, at 12:21, Greg Sheremeta  wrote:
>>>
>>> On Fri, Jul 27, 2018 at 4:39 AM Callum Smith 
>>> wrote:
>>>
 Dear Greg,

 Indeed, always the latest and greatest for us while trying to get this
 running.

 https://www.ovirt.org/documentation/security/squid-reverse-proxy/

>>>
>>> Arrggghh, that is referring to the old GWT UserPortal and not the new
>>> react-based VM Portal. (I'll delete it / mark it obsolete. I apologize for
>>> the out-of-date state of our documentation. I am working on improving it.)
>>>
>>> Unfortunately we have never tested VM Portal with squid.
>>>
>>> @Lukas Svaty  any chance you or someone on the team
>>> can assist?
>>>
>>>

 And the squid.conf file looks like this:

 https_port 443 accel
 key=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.key
 cert=/etc/squid/rescomp-vmgw.well.ox.ac.uk.proxy.crt
 defaultsite=ovirtengine.cluster
 cache_peer ovirtengine.cluster parent 443 0 no-query originserver ssl
 sslcafile=/etc/squid/ca.pem sslflags=DONT_VERIFY_PEER name=engine
 cache_peer_access engine allow all
 ssl_bump allow all
 http_port 3128
 acl ovirt_nodes dst 192.168.64.0/24
 acl ovirt_engine dstdomain .ovirtengine.cluster
 acl all_ips src 1.1.1.1/1
 http_access allow ovirt_nodes ovirt_engine
 http_access allow all_ips
 http_access allow all


 # Following are from:
 # https://access.redhat.com/solutions/425693

 # Leave coredumps in the first cache dir
 coredump_dir /var/spool/squid

 # RHEV and Spice may leave connections idle for long periods
 pconn_timeout   12 hours
 request_timeout 12 hours
 read_timeout12 hours

 # We need approx 20 open filehandles per spice client
 max_filedesc 16384

 Regards,
 Callum

 --

 Callum Smith
 Research Computing Core
 Wellcome Trust Centre for Human Genetics
 University of Oxford
 e. cal...@well.ox.ac.uk

 On 27 Jul 2018, at 01:15, Greg Sheremeta  wrote:

 From your other thread, I'm guessing 4.2.4.

 Can you send the link to the squid guide you used?

 On Wed, Jul 25, 2018 at 7:55 PM Greg Sheremeta 
 wrote:

> Hi Callum,
>
> What version of ovirt-web-ui is this?
>
> Greg
>
> On 

[ovirt-users] Re: Use public-signed SSL certs?

[Chris Adams]

Once upon a time, John Florian  said:
> Just to follow up on this Chris, I have my puppet drop my CA cert in
> /etc/pki/ca-trust/source/anchors/, my self-signed cert
> in/etc/pki/ovirt-engine/certs/ and my key in 
> /etc/pki/ovirt-engine/keys.  I also manage
> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf to have:
> 
> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
> 
> I believe this gives me everything you seek.

That works to get the core engine UI using a new cert (that and a little
more are in the Red Hat URL in my original message).  It doesn't handle
the imageio-proxy however.
-- 
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SPQLME4PMHRXM6LCVSX4V5GNZLFOIF4W/

[ovirt-users] Re: Use public-signed SSL certs?

[John Florian]

On 1/29/19 3:13 PM, John Florian wrote:
> On 1/29/19 2:47 PM, Chris Adams wrote:
>> Once upon a time, John Florian  said:
>>> On 1/29/19 1:30 PM, Chris Adams wrote:
 Can that be run non-interactively to do whatever is needed?
 I'm using a Let's Encrypt cert, which needs to have a 100% automated
 deployment.
>>> Yes, I believe so.  Look at the whole biz with the "answers" file
>>> and the --config-append=file option.  You should already have a
>>> generated answers file laying around from when you ran engine-setup
>>> before.  See /var/lib/ovirt-engine/setup/answers IIRC.
>> Hmm, that won't work - it looks like you can't run engine-setup on a
>> hosted engine unless you first set hosted-engine HA to global
>> maintenance.
>>
>> Is running engine-setup necessary to install/update certificates, or
>> maybe is there a simpler way?
>
> I'm quite certain you can do it w/o engine-setup if you hit all the
> right file locations.

Just to follow up on this Chris, I have my puppet drop my CA cert in
/etc/pki/ca-trust/source/anchors/, my self-signed cert
in/etc/pki/ovirt-engine/certs/ and my key in 
/etc/pki/ovirt-engine/keys.  I also manage
/etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf to have:

ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""

I believe this gives me everything you seek.

-- 

John Florian
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QHWEL244HI4ZNZXDMSSG23UOL7RIBVGF/

[ovirt-users] Re: Use public-signed SSL certs?

[John Florian]

On 1/29/19 2:47 PM, Chris Adams wrote:

Once upon a time, John Florian  said:

On 1/29/19 1:30 PM, Chris Adams wrote:

Can that be run non-interactively to do whatever is needed?
I'm using a Let's Encrypt cert, which needs to have a 100% automated
deployment.

Yes, I believe so.  Look at the whole biz with the "answers" file
and the --config-append=file option.  You should already have a
generated answers file laying around from when you ran engine-setup
before.  See /var/lib/ovirt-engine/setup/answers IIRC.

Hmm, that won't work - it looks like you can't run engine-setup on a
hosted engine unless you first set hosted-engine HA to global
maintenance.

Is running engine-setup necessary to install/update certificates, or
maybe is there a simpler way?


I'm quite certain you can do it w/o engine-setup if you hit all the 
right file locations.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/23CSSA5MA22MFA7NZMOKA7RVRHQAHYUC/

[ovirt-users] Re: Host Only Network

[Dan Kenigsberg]

On Tue, 29 Jan 2019, 17:44 Dominik Holler  On Tue, 29 Jan 2019 15:14:42 -
> "Brian Wilson"  wrote:
>
> > What is the proper way to provide networks without an egress of the
> > host?In VMware i would take a portgroup and just not associate it
> > with a vnic.   In ovirt that doesnt seem possible as the network
> > doesnt seem to function unless i move to a physical nic under the
> > "Setup Host Networks" options.
> >
> > The Goal here is to provide a network for VMs to use on the single
> > host only no traffic would need to leave the host but would need to
> > have VLan IDs and segmentation through them on the host
>
> Maybe I do not get your scenario completely.
> Would a OVN nework per host solve your problem?
>

OVN allows to create an isolated network that speads across the while
cluster.

If I understand correctly, Brian has more humble requirement, which users
implement by creating a dummy0 device (note the lack of underscore in the
name). The dummy device would she as a nic on the host, allows attaching a
bridge to it, but lets no traffic leave the host.

Regards,
Dan.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RMLJSNJIVZO7YXO6P6Y44SGW2UNAB6CM/

[ovirt-users] Re: Use public-signed SSL certs?

[Chris Adams]

Once upon a time, John Florian  said:
> On 1/29/19 1:30 PM, Chris Adams wrote:
> >Can that be run non-interactively to do whatever is needed?
> >I'm using a Let's Encrypt cert, which needs to have a 100% automated
> >deployment.
> 
> Yes, I believe so.  Look at the whole biz with the "answers" file
> and the --config-append=file option.  You should already have a
> generated answers file laying around from when you ran engine-setup
> before.  See /var/lib/ovirt-engine/setup/answers IIRC.

Hmm, that won't work - it looks like you can't run engine-setup on a
hosted engine unless you first set hosted-engine HA to global
maintenance.

Is running engine-setup necessary to install/update certificates, or
maybe is there a simpler way?
-- 
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OLWCGI5DFDPGZMACRH4CLEAA57MM6KDF/

[ovirt-users] Re: Use public-signed SSL certs?

[John Florian]

On 1/29/19 1:30 PM, Chris Adams wrote:

Can that be run non-interactively to do whatever is needed?
I'm using a Let's Encrypt cert, which needs to have a 100% automated
deployment.


Yes, I believe so.  Look at the whole biz with the "answers" file and 
the --config-append=file option.  You should already have a generated 
answers file laying around from when you ran engine-setup before.  See 
/var/lib/ovirt-engine/setup/answers IIRC.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4V7XPHN63OD5LON365IBXH4KCBAV7XID/

[ovirt-users] Re: Suggestions on adding 1000 or more networks to an engine/hosts

[Dominik Holler]

On Tue, 29 Jan 2019 15:06:17 -
"Brian Wilson"  wrote:

> So we have a use case where our engines will will be hosting
> development sandbox clusters.   We need to have upwards of 1000
> networks on some of these.
> 

I expect that instantiating this big number of VLAN based networks on a
host might be painful.
Would external OVN networks fit for your scenario?
Even creating 2k networks on ovirt-provider-ovn would take around 30
minutes, there are no VLANs which has to be instantiated on the hosts.

> I understand there is no theoretical limit to the number of networks
> does any body have a good reliable way of instantiating all of these
> networks.
> 
> We have been using ansible for POCs and doing 100 Networks have not
> had a problem getting them on there however when upping the number to
> many more it begins to take longer and longer between each one and
> eventually timed iout and only got to 1567
> 

I would be interested in understanding what is happening here.
Creating 2k networks took less than 15 minutes for me.
If possible, would you be able to share the relevant part of engine.log? 

> Example Task we are using for this:

Thanks for sharing this.

>   tasks:
> 
> - name: Add More Networks
>   ovirt_network:
> auth: "{{ ovirt_auth }}"
> data_center: "{{ pcloud_name }}"
> name: "{{ pcloud_name }}-{{ item }}"
> state: present
> label: uplink

From my point of view, it is a good idea to label the host interface
after creating the networks, if many networks are created rapidly.

> vlan_tag: "{{ item }}"
> clusters:
>   - name: "{{ ovirt_cluster }}"

Is this cluster of switchtype OVS or linux bridge?

> assigned: yes
> required: no
> display: no
> migration: no
> gluster: no
>   with_sequence: start=1551 end=2500
> 
> 
> 
> 
> What are some better ways of bulk additions of networks?   Would the
> API provide a better solution so as to sorta bulk cache them then
> initiate the save?

Ondra, do you have a suggestion here?
 ___
> Users mailing list -- users@ovirt.org To unsubscribe send an email to
> users-le...@ovirt.org Privacy Statement:
> https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/ List
> Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ST2MVYUK2TML5BE4C3HW43PZJTPNJ3MS/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LIKVL26WPVY6YRKB3XMKWZNGMBOXSHED/

[ovirt-users] Re: Use public-signed SSL certs?

[Chris Adams]

I had not.  Can that be run non-interactively to do whatever is needed?
I'm using a Let's Encrypt cert, which needs to have a 100% automated
deployment.

Once upon a time, Staniforth, Paul  said:
> Did you try running engine-setup ?
> 
> Regards,
>   Paul S.
> 
> From: Chris Adams 
> Sent: 29 January 2019 15:51
> To: users@ovirt.org
> Subject: [ovirt-users] Use public-signed SSL certs?
> 
> I installed an SSL cert from a public CA (Let's Encrypt) on my engine,
> following this:
> 
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl#Replacing_the_Manager_CA_Certificate
> 
> That gets the regular web UI working, but I can't upload an ISO.  I
> assume that I need to do something with the imageio-proxy service on the
> engine, but not sure what... I tried replacing imageio-proxy.cer and
> imageio-proxy.key.nopass, but that didn't work.
> 
> I'm trying to avoid ever needing to install a special CA cert in
> browsers.
> --
> Chris Adams 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NZBGRCKW6WA4WISTCRDJIFUCMNIKJ2CG/
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/

-- 
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MO64G3S2MXF5HA54E5PSHNDAZU2OPIYL/

[ovirt-users] Re: host NonResponsive after trying to update network MTUs

[Edward Berger]

Done. It still won't let me remove the host.
clicked maintenance, checked ignore gluster... box.
clicked remove.  got popup " track00.yard.psc.edu:

   - Cannot remove Host. Server having Gluster volume."


On Tue, Jan 29, 2019 at 4:24 AM Sahina Bose  wrote:

> On Mon, Jan 28, 2019 at 7:31 AM Edward Berger  wrote:
> >
> > I have a problem host which also is the one I deployed a hyperconverged
> oVirt node-ng cluster from with the cockpit's hyperconverged installation
> wizard.
> >
> > When I realized after deploying that I hadn't set the MTUs correctly for
> the engine-mgmt, associated vlan and eno.2 device and also for my
> infiniband interface ib0, I went in and tried to set them to new values
> 9000 and 65520 it got into some kind of hung state.
> >
> > The engine task window shows a task in "executing" and a never ending
> spinning widget
> > "Handing non responsive Host track00..."
> >
> > I can tried updating the hosts /etc/sysconfig/network-scripts by hand.
> > I've tried every combination of the engines set host in maintenance mode
> , "sync networks" "refresh host capabilities" activating and rebooting, but
> I'm still stuck with an unresponsive host.
> >
> > I had another host that also failed but it allowed me to put it into
> maintenance mode and then remove it from the cluster and "add new" it back
> and it was happy.
> >
> > This one won't let me remove it because its serving the gluster volume
> mount point, even though I did give the mount options for the 2nd and 3rd
> backup volume servers.
> >
> > I'd appreciate any help restoring it to proper working order.
>
> Can you try removing the host after checking the "Ignore quorum loss ..."
> box?
>
> >
> > I'm attaching the gzip'd engine log.
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HT2G345VWDWSIQDAYLFI55S6VE6HGGCA/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5J4AVNG3UC7RJWHSW7X5GMHXGJBNZGXP/

[ovirt-users] Use public-signed SSL certs?

[Chris Adams]

I installed an SSL cert from a public CA (Let's Encrypt) on my engine,
following this:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.2/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl#Replacing_the_Manager_CA_Certificate

That gets the regular web UI working, but I can't upload an ISO.  I
assume that I need to do something with the imageio-proxy service on the
engine, but not sure what... I tried replacing imageio-proxy.cer and
imageio-proxy.key.nopass, but that didn't work.

I'm trying to avoid ever needing to install a special CA cert in
browsers.
-- 
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NZBGRCKW6WA4WISTCRDJIFUCMNIKJ2CG/

[ovirt-users] Re: need network design advice for iSCSI

[John Florian]

Okay, both the BZ and ML posts are interesting and helpful.  I'm kind of 
surprised there seems to be so much trouble and confusion for what I 
would have thought to be a very common setup.  Are most people using 
something else?


I think this gives me what I need for my next stab at doing this but I"m 
still puzzled on how to tear down what I have in oVirt so that I can 
redo it.  Specifically, I didn't see how to delete the existing iSCSI 
connections.  I've read that this can only be done through the REST 
API.  I have managed to redo the interfaces on my Hosts so that 
everything is now on just 2 NICs each, leaving 2 NICs free for a 
foothold on a new setup.  From all of my experimentation, it would 
appear that my only option is to create a new storage domain and 
export/import each disk volume one by one.  Maybe there's a migration 
option I have yet to see, but I don't see any way around creating a new 
storage domain here.


On 1/21/19 7:12 AM, Vinícius Ferrão wrote:
Hello people, in the past Maor Lipchuk (from RH) tried very hard to 
help me and Uwe but we was unable to converge on the solution.


This was discussed a year ago and on my understanding it still and 
oVirt bug. As today, if you simple “DuckDuckGo” for “ovirt iscsi 
multipath not working” the third link points to this bugzilla: 
https://bugzilla.redhat.com/show_bug.cgi?id=1474904


Which is the one I’ve mentioned and it’s extremely similar to John 
Florian case, which was my case too.


@John, take a look at the bugzilla link and see if the desired 
topology match with your case.


Regards,


On 21 Jan 2019, at 05:21, Eitan Raviv > wrote:


Shani,
Can you help here with  iSCSI bonding?
Thanks

On Mon, Jan 21, 2019 at 7:51 AM Uwe Laverenz > wrote:


Hi John,

Am 20.01.19 um 18:32 schrieb John Florian:

As for how to get there, whatever exactly that might look like, I'm 
also

having troubles figuring that out.  I figured I would transform the
setup described below into one where each host has:

 * 2 NICs bonded with LACP for my ovirtmgmt and "main" net
 * 1 NIC for my 1st storage net
 * 1 NIC for my 2nd storage net


This is exactly the setup I use. I have run this successfully with
CentOS/LIO and FreeNAS iSCSI targets with good performance.

In short:

- 2 separate, isolated networks for iSCSI with dedicated adapters
  on hosts and iSCSI target
- jumbo frames enabled
- no VLANs config needed on hosts, untagged VLANs on switch
- do _not_ use LACP, let multipathd handle failovers

Same experience as Vinicius: what did _not_ work for me is the
iSCSI-Bonding in OVirt. It seems to require that all storage IPs are
reachable from all other IPs, which is not the case in every setup.

To get multipathing to work I use multipath directly:


https://www.mail-archive.com/users@ovirt.org/msg42735.html


I will post a bonnie++ result later. If you need more details please let
me know.

cu,
Uwe
___
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org 


Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E2QKV7CZR27NT6MRSNL352KLOQ5OAGDR/



___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/site/privacy-policy/
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/NSE5BCLJSIFDX2VDZRBRLODEH3ZCPYWN/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G6GMNF3RU5IDEDM4OWG4RDXAFY5BHDSV/

[ovirt-users] Re: Host Only Network

[Dominik Holler]

On Tue, 29 Jan 2019 15:14:42 -
"Brian Wilson"  wrote:

> What is the proper way to provide networks without an egress of the
> host?In VMware i would take a portgroup and just not associate it
> with a vnic.   In ovirt that doesnt seem possible as the network
> doesnt seem to function unless i move to a physical nic under the
> "Setup Host Networks" options.
> 
> The Goal here is to provide a network for VMs to use on the single
> host only no traffic would need to leave the host but would need to
> have VLan IDs and segmentation through them on the host

Maybe I do not get your scenario completely.
Would a OVN nework per host solve your problem?


> ___ Users mailing list --
> users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt
> Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/ List
> Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/XGYJSG3AO4Q2SAYHZCZ4PXJ6JOZO3M6Z/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BZNFVBZSVSWNUZSMSF5L57MPG7XO2MX7/

[ovirt-users] Host Only Network

[Brian Wilson]

What is the proper way to provide networks without an egress of the host?In 
VMware i would take a portgroup and just not associate it with a vnic.   In 
ovirt that doesnt seem possible as the network doesnt seem to function unless i 
move to a physical nic under the "Setup Host Networks" options.

The Goal here is to provide a network for VMs to use on the single host only no 
traffic would need to leave the host but would need to have VLan IDs and 
segmentation through them on the host
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XGYJSG3AO4Q2SAYHZCZ4PXJ6JOZO3M6Z/

[ovirt-users] Suggestions on adding 1000 or more networks to an engine/hosts

[Brian Wilson]

So we have a use case where our engines will will be hosting development 
sandbox clusters.   We need to have upwards of 1000 networks on some of these.

I understand there is no theoretical limit to the number of networks does any 
body have a good reliable way of instantiating all of these networks.

We have been using ansible for POCs and doing 100 Networks have not had a 
problem getting them on there however when upping the number to many more it 
begins to take longer and longer between each one and eventually timed iout and 
only got to 1567

Example Task we are using for this:
  tasks:

- name: Add More Networks
  ovirt_network:
auth: "{{ ovirt_auth }}"
data_center: "{{ pcloud_name }}"
name: "{{ pcloud_name }}-{{ item }}"
state: present
label: uplink
vlan_tag: "{{ item }}"
clusters:
  - name: "{{ ovirt_cluster }}"
assigned: yes
required: no
display: no
migration: no
gluster: no
  with_sequence: start=1551 end=2500




What are some better ways of bulk additions of networks?   Would the API 
provide a better solution so as to sorta bulk cache them then initiate the save?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ST2MVYUK2TML5BE4C3HW43PZJTPNJ3MS/

[ovirt-users] Re: Roles and Permissions and Inheritance

[Brian Wilson]

This seems to work however still trying to solve the issue of if we dont give 
access to networks at a higher level (Cluster or DC) then it must be given at 
the Network level for every network that we would like them to have access to.  
 Since we are using an AD group to assign access to the networks this would 
work for initially created network by we as admins but brings up an issue for 
networks they create themselves.

We Also would like them to create networks and let that group have access to it 
but is seems we would have to allow them to assign permissions in the system to 
do that, which then opens up a whole other host of problems we wouldn't want 
like the ability to mitigate and access control we implement.

Am I understanding how these permissions work and finding we cannot do the 
below or missing something that would allow the follow use case:


Users of Platform are restricted from adding VMs to a few select networks
Users of Platform are able to create, and share with other team members 
associated with an AD Group, new networks
   -- Strech here if it could be restricted to only certain labels to prevent 
them from using physical nics we haven't already assigned labels to as admins
Users of Platform are not able to modify permissions on objects in inventory
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W2PFFSLZA4CZHYY67JXQROFY65EPOKJ2/

[ovirt-users] Re: Single Node Deployment - Self-Hosted-Engine

[Brian Wilson]

Wanted to just close out this Thread and mention that using a self created 
gluster volume on the host itself was pretty easy and worked out well.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XQUOS5P4VTUDF5N2G2FAYXQZMHM43DTE/

[ovirt-users] [ANN] oVirt 4.3.0 Fourth Release Candidate is now available for testing

[Sandro Bonazzola]

The oVirt Project is pleased to announce the availability of the Fourth
Release Candidate of oVirt 4.3.0, as of January 29th, 2019

This is pre-release software. This pre-release should not to be used in
production.

Please take a look at our community page[1] to learn how to ask questions
and interact with developers and users.

All issues or bugs should be reported via oVirt Bugzilla[2].

This update is the first release candidate of the 4.3.0 version.

This release brings more than 130 enhancements and more than 450 bug fixes
on top of oVirt 4.2 series.

What's new in oVirt 4.3.0?

* Q35 chipset, support booting using UEFI and Secure Boot

* Skylake-server and AMD EPYC support

* New smbus driver in windows guest tools

* Improved support for v2v

* OVA export / import of Templates

* Full support for live migration of High Performance VMs

* Microsoft Failover clustering support (SCSI Persistent Reservation) for
Direct LUN disks

* Hundreds of bug fixes on top of oVirt 4.2 series

* New VM portal details page (see a preview here:
https://imgur.com/a/ExINpci)

* New Cluster upgrade UI

* OVN security groups

* IPv6 (static host addresses)

* Support of Neutron from RDO OpenStack 13 as external network provider

* Support of using Skydive from RDO OpenStack 14 as Tech Preview

* Support for 3.6 and 4.0 data centers, clusters and hosts were removed

* Now using PostgreSQL 10

* New metrics support using rsyslog instead of fluentd


This release is available now on x86_64 architecture for:

* Red Hat Enterprise Linux 7.6 or later

* CentOS Linux (or similar) 7.6 or later


This release supports Hypervisor Hosts on x86_64 and ppc64le architectures
for:

* Red Hat Enterprise Linux 7.6 or later

* CentOS Linux (or similar) 7.6 or later

* oVirt Node 4.3 (available for x86_64 only)

Experimental tech preview for x86_64 and s390x architectures for Fedora 28
is also included.

See the release notes draft [3] for installation / upgrade instructions and
a list of new features and bugs fixed.

Notes:

- oVirt Appliance is already available for CentOS 7

- oVirt Node NG  is already available for both CentOS 7 and Fedora 28 (tech
preview).

- oVirt Appliance for Fedora 28 (tech preview) is being delayed due to
build issues with the build system.

Additional Resources:

* Read more about the oVirt 4.3.0 release highlights:
http://www.ovirt.org/release/4.3.0/

* Get more oVirt project updates on Twitter: https://twitter.com/ovirt

* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/


[1] https://www.ovirt.org/community/

[2] https://bugzilla.redhat.com/enter_bug.cgi?classification=oVirt

[3] http://www.ovirt.org/release/4.3.0/

[4] http://resources.ovirt.org/pub/ovirt-4.3-pre/iso/


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AD3OWTEXKILH7RWAIQNFI4ZJXVMAF4SR/

[ovirt-users] Planned infra outage - Saturday February 2

[Evgheni Dereveanchin]

Hi everyone,

There's a maintenance window planned for this Saturday, February 2 2019 to
upgrade network equipment in the PHX datacenter. The change will be
implemented during afternoon hours and  several oVirt infra services may be
unreachable for short periods of time, specifically:

* package repositories
* Jenkins CI
* glance image repo

If you have problems accessing project resources during this period or see
CI failures please re-try in a couple of hours.

The project website and Gerrit code review are not affected by this outage
and will continue to function normally.

-- 
Regards,
Evgheni Dereveanchin
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DX5Q7PFN37HV5J7QN2MAE45LUSIFJOCE/

[ovirt-users] Re: Sanlock volume corrupted on deployment

[Strahil]

Dear Nir,According to redhat solution 1179163 'add_lockspace fail result -233' indicates corrupted ids lockspace.During the install, the VM fails to get up.In order to fix it, I stop:ovirt-ha-agent, ovirt-ha-broker, vdsmd, supervdsmd, sanlockThen reinitialize the lockspace via 'sanlock direct init -s' (used bugreport 1116469 as guidance).Once the init is successful and all the services are up - the VM is started but the deployment was long over and the setup needs additional cleaning up.I will rebuild the gluster cluster and then will repeat the deployment.Can you guide me what information will be needed , as I'm quite new in ovirt/RHV ?Best Regards,Strahil NikolovOn Jan 28, 2019 20:34, Nir Soffer  wrote:On Sat, Jan 26, 2019 at 6:13 PM Strahil  wrote:Hey guys,I have noticed that with 4.2.8 the sanlock issue (during deployment) is still not fixed.Am I the only one with bad luck or there is something broken there ?The sanlock service reports code 's7 add_lockspace fail result -233' 'leader1 delta_acquire_begin error -233 lockspace hosted-engine host_id 1'.Sanlock does not have such error code - are you sure this is -233?Here sanlock return values:https://pagure.io/sanlock/blob/master/f/src/sanlock_rv.hCan you share your sanlock log? Best Regards,Strahil Nikolov___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/SZMF5KKHSXOUTLGX3LR2NBN7E6QGS6G3/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OKPTTWQHN52CIG5ZM3VMLNKVJSJ6IVU6/

[ovirt-users] Re: ovirt-sdk_external network add

[Dominik Holler]

On Tue, 29 Jan 2019 13:08:06 +0200
ada per  wrote:

> thank you!!
> 
> Is there any other method to use the network name instead of id? if
> not its fine, i ll  use the list networks first and then match the
> ids with the names and delete accordingly
> 

I am not aware.
If you want to have more luxury, I recommend to use the ovirt_* ansible
roles.

> On Tue, Jan 29, 2019 at 12:46 PM Dominik Holler 
> wrote:
> 
> > On Tue, 29 Jan 2019 12:23:32 +0200
> > ada per  wrote:
> >
> > > Hello again,
> > >
> > > And how about to delete a logical network?
> > > as remove option is not available in:
> > > system_service().networks_service()
> > >
> >
> > network_service = networks_service.network_service(network.id)
> > network_service.remove()
> >
> > > On Mon, Jan 28, 2019 at 7:01 PM Dominik Holler
> > >  wrote:
> > >
> > > > On Mon, 28 Jan 2019 16:34:30 -
> > > > "ada per"  wrote:
> > > >
> > > > > Hello everyone,
> > > > > I  have the following script,
> > > > > i ve been looking in ovirt-sdk but i cannot seem to find the
> > > > > proper way of adding an external provider network under
> > > > > ovirt-ovn I manage to add logical networks and vlans but no
> > > > > luck in external provider.
> > > > >
> > > > > Any advice is appreciated
> > > > >
> > > > > network = networks_service.add(
> > > > > network=types.Network(
> > > > > name='ext_net',
> > > > > description='Testing network',
> > > > > data_center=types.DataCenter(
> > > > > name='Default'
> > > > > ),
> > > > >  usages=[types.NetworkUsage.VM],
> > > > >  external_provider='ovirt-provider-ovn',  -->i
> > > > > know this part is wrong what is it supposed to be called? ),
> > > >
> > > > external_provider=types.OpenStackNetworkProvider(
> > > > id=provider.id
> > > > )
> > > >
> > > > please find a full example script in
> > > > https://gist.github.com/dominikholler/be7286931c0ea26b14965a5f91783cd4
> > > >
> > > > > ___
> > > > > Users mailing list -- users@ovirt.org
> > > > > To unsubscribe send an email to users-le...@ovirt.org
> > > > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > > > oVirt Code of Conduct:
> > > > > https://www.ovirt.org/community/about/community-guidelines/
> > > > > List Archives:
> > > > >
> > > >
> > https://lists.ovirt.org/archives/list/users@ovirt.org/message/LGGF7HZTMWDMCLNUATLHIXRYP7666TE4/
> > > >
> > > >
> >
> >
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PA5TWAT73JJARTCAOGA3V44FC3JGUG6I/

[ovirt-users] Re: Administration Portal High Availability

[Greg Sheremeta]

Hi!

Our high-availability feature is called Self-Hosted Engine.

https://www.ovirt.org/documentation/self-hosted/chap-Introduction.html

"""
Additionally, the Engine is configured to be highly available. If the host
running the Engine virtual machine goes into maintenance mode, or fails
unexpectedly, the virtual machine will be migrated automatically to another
host in the environment. A minimum of two self-hosted Engine hosts are
required to support the high availability feature.
"""

Best wishes,
Greg


On Tue, Jan 29, 2019 at 2:11 AM  wrote:

> Hello,
> Currently i am finding some Documentation or "how to" setup High
> Availability of oVirt Engine's Administration Portal.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DUJ3DHDKXPVADHOKXNAWSIG4PLUBDZZ5/
>


-- 

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DIMQLNHG2BY5GA7SGOXYBQ5VRMPV6NG7/

[ovirt-users] Re: 4.3.0 rc2 cannot mount glusterfs volumes on ovirt node ng

[Jorick Astrego]

Hi,

I know people are busy but do we have any progress on this, I removed
the OVS cluster and recreated it with bridge networking.

But I'm still stuck on the "failed to fetch volume file" and am unable
to activate the hosts to continue testing...

Anything else I can try to debug? The storage network is ip based
without dns.

Regards, Jorick

On 1/25/19 3:53 PM, Jorick Astrego wrote:
>
>
> On 1/25/19 3:26 PM, Sahina Bose wrote:
>>
>>
>> On Fri, Jan 25, 2019 at 7:36 PM Jorick Astrego > > wrote:
>>
>>>
>>> The mount failure is probably related to glusterfs. There are
>>> glusterfs logs on the host that 
>>> can give more info on this error. 
>> Oh duh, sorry forgot to check :-&
>>
>> "failed to fetch volume file"
>>
>>
>> [2019-01-25 14:02:45.067440] I
>> [glusterfsd-mgmt.c:2424:mgmt_rpc_notify] 0-glusterfsd-mgmt:
>> disconnected from remote-host: *.*.*.*
>>
>> Are you able to access this host, and the gluster ports open?
>> Anything in the glusterd.log of the gluster server?
>>
>> Adding Sanju to help
>
>
> From the host:
>
> Telnet *.*.*.14 24007
> Trying *.*.*.14...
> Connected to *.*.*.14.
> Escape character is '^]'.
>
> glusterd.log on *.*.*.14:
>
> Chain INPUT (policy ACCEPT)
> target prot opt source   destination
> ACCEPT all  --  anywhere anywhere
> state RELATED,ESTABLISHED
> ACCEPT icmp --  anywhere anywhere   
> ACCEPT all  --  anywhere anywhere   
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:54321
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:54322
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:sunrpc
> ACCEPT udp  --  anywhere anywhere udp
> dpt:sunrpc
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:ssh
> ACCEPT udp  --  anywhere anywhere udp
> dpt:snmp
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:websm
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:24007
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:webcache
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:38465
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:38466
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:38467
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:nfs
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:38469
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:5666
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:39543
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:55863
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:38468
> ACCEPT udp  --  anywhere anywhere udp
> dpt:963
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:965
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:ctdb
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:netbios-ssn
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:microsoft-ds
> ACCEPT tcp  --  anywhere anywhere tcp
> dpts:24009:24108
> ACCEPT tcp  --  anywhere anywhere tcp
> dpts:49152:49251
> ACCEPT tcp  --  anywhere anywhere tcp
> dpts:49217:49316
> ACCEPT tcp  --  anywhere anywhere tcp
> dpt:zabbix-agent /* Zabbix agent */
> REJECT all  --  anywhere anywhere
> reject-with icmp-host-prohibited
>
> Chain FORWARD (policy ACCEPT)
> target prot opt source   destination
> REJECT all  --  anywhere anywhere
> PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
>
> Chain OUTPUT (policy ACCEPT)
> target prot opt source   destination
>
> And in the glusterd.log has nothing else but:
>
> [2019-01-25 11:02:32.617694] I [MSGID: 106499]
> [glusterd-handler.c:4303:__glusterd_handle_status_volume]
> 0-management: Received status volume req for volume ssd6
> [2019-01-25 11:02:32.623892] I [MSGID: 106499]
> [glusterd-handler.c:4303:__glusterd_handle_status_volume]
> 0-management: Received status volume req for volume ssd9
> [2019-01-25 11:03:31.847006] I [MSGID: 106488]
> [glusterd-handler.c:1548:__glusterd_handle_cli_get_volume]
> 0-ma

[ovirt-users] Re: Open_vSwitch no key error after upgrading to 4.2.8

[Jorick Astrego]

To add to that, I removed the nodes and reinstalled without OVS so it's
weird it still complains about it.

Regards,

Jorick

On 1/29/19 12:40 AM, Jorick Astrego wrote:
>
> Noticed this one too on 4.3.0 rc2, didn't have time to check it out
> though.
>
> Today I saw it after I removed an OVS cluster and recreated the
> cluster with "legacy" bridge networking.
>
> Regards,
>
> Jorick Astrego
>
> Netbulae
>
>
> On 1/28/19 2:34 PM, Jayme wrote:
>> I upgraded oVirt to 4.2.8 and now I am spammed with the following
>> message in all host syslog.  How can I stop/fix this error?
>>
>> ovs-vsctl: ovs|1|db_ctl_base|ERR|no key
>> "odl_os_hostconfig_hostid" in Open_vSwitch record "." column external_ids
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OH2VH3AYBRCNVM24PTP34OTS5ISYLUAD/




Met vriendelijke groet, With kind regards,

Jorick Astrego

Netbulae Virtualization Experts 



Tel: 053 20 30 270  i...@netbulae.euStaalsteden 4-3A
KvK 08198180
Fax: 053 20 30 271  www.netbulae.eu 7547 TA Enschede
BTW NL821234584B01



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EDN2E2QDM3H4IEHNOBZV6A64XEHLYTJJ/

[ovirt-users] Re: Deploying single instance - error

[Ramakrishna Reddy Yekulla]

On Mon, Jan 28, 2019 at 5:17 PM Sachidananda URS  wrote:

> Hi David,
>
> On Mon, Jan 28, 2019 at 5:01 PM Gobinda Das  wrote:
>
>> Hi David,
>>  Thanks!
>> Adding sac to check if we are missing anything for gdeploy.
>>
>> On Mon, Jan 28, 2019 at 4:33 PM Leo David  wrote:
>>
>>> Hi Gobinda,
>>> gdeploy --version
>>> gdeploy 2.0.2
>>>
>>> yum list installed | grep gdeploy
>>> gdeploy.noarch2.0.8-1.el7
>>> installed
>>>
>>>
> Ramakrishna will build a fedora package to include that fix.
> Should be available to you in some time. Will keep you posted.
>

The packages in Fedora 28 and Fedora 29 have been updated. You should be
able to update it to the latest version now. I have raised a PR CentOS
package
update to include the same version as that of Fedora 28/29.

regards
-- 
##
Ramakrishna Reddy Yekulla
rre...@redhat.com
M +91-9823642625
IRC Nick :: ramkrsna , ramky
#
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVPAXTUXIGPVIDOF3DKDCEREZ5WTMY5O/

[ovirt-users] Re: ovirt-sdk_external network add

[ada per]

thank you!!

Is there any other method to use the network name instead of id? if not its
fine, i ll  use the list networks first and then match the ids with the
names and delete accordingly

On Tue, Jan 29, 2019 at 12:46 PM Dominik Holler  wrote:

> On Tue, 29 Jan 2019 12:23:32 +0200
> ada per  wrote:
>
> > Hello again,
> >
> > And how about to delete a logical network?
> > as remove option is not available in:
> > system_service().networks_service()
> >
>
> network_service = networks_service.network_service(network.id)
> network_service.remove()
>
> > On Mon, Jan 28, 2019 at 7:01 PM Dominik Holler 
> > wrote:
> >
> > > On Mon, 28 Jan 2019 16:34:30 -
> > > "ada per"  wrote:
> > >
> > > > Hello everyone,
> > > > I  have the following script,
> > > > i ve been looking in ovirt-sdk but i cannot seem to find the
> > > > proper way of adding an external provider network under ovirt-ovn
> > > > I manage to add logical networks and vlans but no luck in
> > > > external provider.
> > > >
> > > > Any advice is appreciated
> > > >
> > > > network = networks_service.add(
> > > > network=types.Network(
> > > > name='ext_net',
> > > > description='Testing network',
> > > > data_center=types.DataCenter(
> > > > name='Default'
> > > > ),
> > > >  usages=[types.NetworkUsage.VM],
> > > >  external_provider='ovirt-provider-ovn',  -->i know
> > > > this part is wrong what is it supposed to be called? ),
> > >
> > > external_provider=types.OpenStackNetworkProvider(
> > > id=provider.id
> > > )
> > >
> > > please find a full example script in
> > > https://gist.github.com/dominikholler/be7286931c0ea26b14965a5f91783cd4
> > >
> > > > ___
> > > > Users mailing list -- users@ovirt.org
> > > > To unsubscribe send an email to users-le...@ovirt.org
> > > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > > oVirt Code of Conduct:
> > > > https://www.ovirt.org/community/about/community-guidelines/ List
> > > > Archives:
> > > >
> > >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LGGF7HZTMWDMCLNUATLHIXRYP7666TE4/
> > >
> > >
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFJATOOB6JEHFVARTTK6LTWUKNVDFKCW/

[ovirt-users] Re: ovirt-sdk_external network add

[Dominik Holler]

On Tue, 29 Jan 2019 12:23:32 +0200
ada per  wrote:

> Hello again,
> 
> And how about to delete a logical network?
> as remove option is not available in:
> system_service().networks_service()
> 

network_service = networks_service.network_service(network.id)
network_service.remove()

> On Mon, Jan 28, 2019 at 7:01 PM Dominik Holler 
> wrote:
> 
> > On Mon, 28 Jan 2019 16:34:30 -
> > "ada per"  wrote:
> >
> > > Hello everyone,
> > > I  have the following script,
> > > i ve been looking in ovirt-sdk but i cannot seem to find the
> > > proper way of adding an external provider network under ovirt-ovn
> > > I manage to add logical networks and vlans but no luck in
> > > external provider.
> > >
> > > Any advice is appreciated
> > >
> > > network = networks_service.add(
> > > network=types.Network(
> > > name='ext_net',
> > > description='Testing network',
> > > data_center=types.DataCenter(
> > > name='Default'
> > > ),
> > >  usages=[types.NetworkUsage.VM],
> > >  external_provider='ovirt-provider-ovn',  -->i know
> > > this part is wrong what is it supposed to be called? ),
> >
> > external_provider=types.OpenStackNetworkProvider(
> > id=provider.id
> > )
> >
> > please find a full example script in
> > https://gist.github.com/dominikholler/be7286931c0ea26b14965a5f91783cd4
> >
> > > ___
> > > Users mailing list -- users@ovirt.org
> > > To unsubscribe send an email to users-le...@ovirt.org
> > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/ List
> > > Archives:
> > >
> > https://lists.ovirt.org/archives/list/users@ovirt.org/message/LGGF7HZTMWDMCLNUATLHIXRYP7666TE4/
> >
> >
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/44QLFGXMEEMS26NIUAB7BX3MVKEK67EZ/

[ovirt-users] Re: ovirt-sdk_external network add

[ada per]

Hello again,

And how about to delete a logical network?
as remove option is not available in: system_service().networks_service()

On Mon, Jan 28, 2019 at 7:01 PM Dominik Holler  wrote:

> On Mon, 28 Jan 2019 16:34:30 -
> "ada per"  wrote:
>
> > Hello everyone,
> > I  have the following script,
> > i ve been looking in ovirt-sdk but i cannot seem to find the proper
> > way of adding an external provider network under ovirt-ovn I manage
> > to add logical networks and vlans but no luck in external provider.
> >
> > Any advice is appreciated
> >
> > network = networks_service.add(
> > network=types.Network(
> > name='ext_net',
> > description='Testing network',
> > data_center=types.DataCenter(
> > name='Default'
> > ),
> >  usages=[types.NetworkUsage.VM],
> >  external_provider='ovirt-provider-ovn',  -->i know this
> > part is wrong what is it supposed to be called? ),
>
> external_provider=types.OpenStackNetworkProvider(
> id=provider.id
> )
>
> please find a full example script in
> https://gist.github.com/dominikholler/be7286931c0ea26b14965a5f91783cd4
>
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/ List
> > Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/LGGF7HZTMWDMCLNUATLHIXRYP7666TE4/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MY6BPXT4C34Q7TMF3HWG6AMAZQWZ42Q2/

[ovirt-users] Re: Error creating a storage domain (On Cisco UCS Only)

[Benny Zlotnik]

This looks like underlying error:
2019-01-27 11:09:59,468+0400 ERROR (jsonrpc/4) [storage.Dispatcher] FINISH
createStorageDomain error=Command ['/usr/bin/dd', 'iflag=fullblock',
u'of=/rhev/data-center/mnt/glusterSD/z1ppvh05.pki.darkmatter.ae:_engine/2510ec7e-6f8a-4d84-b892-fc8840b1b713/dom_md/xleases',
'oflag=direct,seek_bytes', 'seek=1048576', 'bs=256512', 'count=1',
'conv=notrunc,nocreat,fsync'] failed with rc=1 out='[suppressed]'
err="/usr/bin/dd: error writing
'/rhev/data-center/mnt/glusterSD/z1ppvh05.pki.darkmatter.ae:_engine/2510ec7e-6f8a-4d84-b892-fc8840b1b713/dom_md/xleases':
Invalid argument\n1+0 records in\n0+0 records out\n0 bytes (0 B) copied,
0.00401097 s, 0.0 kB/s\n" (dispatcher:86)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/storage/dispatcher.py", line
73, in wrapper
result = ctask.prepare(func, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 108,
in wrapper
return m(self, *a, **kw)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 1189,
in prepare
raise self.error
Error: Command ['/usr/bin/dd', 'iflag=fullblock',
u'of=/rhev/data-center/mnt/glusterSD/z1ppvh05.pki.darkmatter.ae:_engine/2510ec7e-6f8a-4d84-b892-fc8840b1b713/dom_md/xleases',
'oflag=direct,seek_bytes', 'seek=1048576', 'bs=256512', 'count=1',
'conv=notrunc,nocreat,fsync'] failed with rc=1 out='[suppressed]'
err="/usr/bin/dd: error writing
'/rhev/data-center/mnt/glusterSD/z1ppvh05.pki.darkmatter.ae:_engine/2510ec7e-6f8a-4d84-b892-fc8840b1b713/dom_md/xleases':
Invalid argument\n1+0 records in\n0+0 records out\n0 bytes (0 B) copied,
0.00401097 s, 0.0 kB/s\n"

+Denis Chaplygin  , do you have any idea why this
happens?

On Tue, Jan 29, 2019 at 9:31 AM  wrote:

> Hi There,
>
> Here is a link for compressed /var/log
>
>
> https://drive.google.com/file/d/1MO2ls_27h86vQlgPW7zXsZxZYU9oyE9c/view?usp=sharing
>
> Thank you for looking at this..
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/R6VJD6UM6XFS6DUDA4YHD5DGKM5HIXJH/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5JESCKXOGR5NB3B7VQLIF7D27QTIWNDW/

[ovirt-users] Re: host NonResponsive after trying to update network MTUs

[Sahina Bose]

On Mon, Jan 28, 2019 at 7:31 AM Edward Berger  wrote:
>
> I have a problem host which also is the one I deployed a hyperconverged oVirt 
> node-ng cluster from with the cockpit's hyperconverged installation wizard.
>
> When I realized after deploying that I hadn't set the MTUs correctly for the 
> engine-mgmt, associated vlan and eno.2 device and also for my infiniband 
> interface ib0, I went in and tried to set them to new values 9000 and 65520 
> it got into some kind of hung state.
>
> The engine task window shows a task in "executing" and a never ending 
> spinning widget
> "Handing non responsive Host track00..."
>
> I can tried updating the hosts /etc/sysconfig/network-scripts by hand.
> I've tried every combination of the engines set host in maintenance mode , 
> "sync networks" "refresh host capabilities" activating and rebooting, but I'm 
> still stuck with an unresponsive host.
>
> I had another host that also failed but it allowed me to put it into 
> maintenance mode and then remove it from the cluster and "add new" it back 
> and it was happy.
>
> This one won't let me remove it because its serving the gluster volume mount 
> point, even though I did give the mount options for the 2nd and 3rd backup 
> volume servers.
>
> I'd appreciate any help restoring it to proper working order.

Can you try removing the host after checking the "Ignore quorum loss ..." box?

>
> I'm attaching the gzip'd engine log.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/HT2G345VWDWSIQDAYLFI55S6VE6HGGCA/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5XHAWI33SDJZZAZ3K4U3XUPORAYCRZJH/

[ovirt-users] Re: Hyperconverged setup - storage architecture - scaling

[Sahina Bose]

On Mon, Jan 28, 2019 at 6:22 PM Leo David  wrote:
>
> Hello Everyone,
> Reading through the document:
> "Red Hat Hyperconverged Infrastructure for Virtualization 1.5
>  Automating RHHI for Virtualization deployment"
>
> Regarding storage scaling,  i see the following statements:
>
> 2.7. SCALING
> Red Hat Hyperconverged Infrastructure for Virtualization is supported for one 
> node, and for clusters of 3, 6, 9, and 12 nodes.
> The initial deployment is either 1 or 3 nodes.
> There are two supported methods of horizontally scaling Red Hat 
> Hyperconverged Infrastructure for Virtualization:
>
> 1 Add new hyperconverged nodes to the cluster, in sets of three, up to the 
> maximum of 12 hyperconverged nodes.
>
> 2 Create new Gluster volumes using new disks on existing hyperconverged nodes.
> You cannot create a volume that spans more than 3 nodes, or expand an 
> existing volume so that it spans across more than 3 nodes at a time
>
> 2.9.1. Prerequisites for geo-replication
> Be aware of the following requirements and limitations when configuring 
> geo-replication:
> One geo-replicated volume only
> Red Hat Hyperconverged Infrastructure for Virtualization (RHHI for 
> Virtualization) supports only one geo-replicated volume. Red Hat recommends 
> backing up the volume that stores the data of your virtual machines, as this 
> is usually contains the most valuable data.
> --
>
> Also  in oVirtEngine UI, when I add a brick to an existing volume i get the 
> following warning:
>
> "Expanding gluster volume in a hyper-converged setup is not recommended as it 
> could lead to degraded performance. To expand storage for cluster, it is 
> advised to add additional gluster volumes."
>
> Those things are raising a couple of questions that maybe for some for you 
> guys are easy to answer, but for me it creates a bit of confusion...
> I am also referring to RedHat product documentation,  because I  treat oVirt 
> as production-ready as RHHI is.

oVirt and RHHI though as close to each other as possible do differ in
the versions used of the various components and the support
limitations imposed.
>
> 1. Is there any reason for not going to distributed-replicated volumes ( ie: 
> spread one volume across 6,9, or 12 nodes ) ?
> - ie: is recomanded that in a 9 nodes scenario I should have 3 separated 
> volumes,  but how should I deal with the folowing question

The reason for this limitation was a bug encountered when scaling a
replica 3 volume to distribute-replica. This has since been fixed in
the latest release of glusterfs.

>
> 2. If only one geo-replicated volume can be configured,  how should I deal 
> with 2nd and 3rd volume replication for disaster recovery

It is possible to have more than 1 geo-replicated volume as long as
your network and CPU resources support this.

>
> 3. If the limit of hosts per datacenter is 250, then (in theory ) the 
> recomended way in reaching this treshold would be to create 20 separated 
> oVirt logical clusters with 12 nodes per each ( and datacenter managed from 
> one ha-engine ) ?
>
> 4. In present, I have the folowing one 9 nodes cluster , all hosts 
> contributing with 2 disks each  to a single replica 3 distributed replicated 
> volume. They where added to the volume in the following order:
  > node1 - disk1
> node2 - disk1
> ..
> node9 - disk1
> node1 - disk2
> node2 - disk2
> ..
> node9 - disk2
> At the moment, the volume is arbitrated, but I intend to go for full 
> distributed replica 3.
>
> Is this a bad setup ? Why ?
> It oviously brakes the redhat recommended rules...
>
> Is there anyone so kind to discuss on these things ?
>
> Thank you very much !
>
> Leo
>
>
> --
> Best regards, Leo David
>
>
>
>
> --
> Best regards, Leo David
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QGZZJIT4JSLYSOVLVYZADXJTWVEM42KY/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DTOQQDE45GOTBYDVYWSFEJOHQR3DX4J2/

[ovirt-users] Re: Open_vSwitch no key error after upgrading to 4.2.8

[Dan Kenigsberg]

On Tue, Jan 29, 2019 at 1:42 AM Jorick Astrego  wrote:
>
> Noticed this one too on 4.3.0 rc2, didn't have time to check it out though.
>
> Today I saw it after I removed an OVS cluster and recreated the cluster with 
> "legacy" bridge networking.
>
> Regards,
>
> Jorick Astrego
>
> Netbulae
>
>
> On 1/28/19 2:34 PM, Jayme wrote:
>
> I upgraded oVirt to 4.2.8 and now I am spammed with the following message in 
> all host syslog.  How can I stop/fix this error?
>
> ovs-vsctl: ovs|1|db_ctl_base|ERR|no key "odl_os_hostconfig_hostid" in 
> Open_vSwitch record "." column external_ids
>


Sorry for the log noise you are experiencing.
Would you be kind to try this yet-untested patch to avoid it:
https://gerrit.ovirt.org/97391 ?
You'd need to modify /usr/libexec/vdsm/hooks/after_get_caps/50_openstacknet

Regards,
Dan.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MSZUX7EDACGKYRFWKS3OH72VWZUKTXYK/

[ovirt-users] Re: Clearing asynchronous task Unknown

[nicolas]

Hi Nicholas,

Thanks for this. Indeed, that was the problem. I opened the vdsm log and 
saw a lot of exceptions like this:


2019-01-28 10:56:54,792+ INFO  (jsonrpc/2) [vdsm.api] FINISH 
clearTask error=Operation is not allowed in this task state: ("can't 
clean in state running",) from=:::10.6.4.10,49326, flow_id=12aea163, 
task_id=b66d9abc-cfb2-4a62-bd54-5f46d32ca1c3 (api:50)
2019-01-28 10:56:54,792+ ERROR (jsonrpc/2) 
[storage.TaskManager.Task] (Task='b66d9abc-cfb2-4a62-bd54-5f46d32ca1c3') 
Unexpected error (task:872)

Traceback (most recent call last):
  File "/usr/share/vdsm/storage/task.py", line 879, in _run
return fn(*args, **kargs)
  File "", line 2, in clearTask
  File "/usr/lib/python2.7/site-packages/vdsm/common/api.py", line 48, 
in method

ret = func(*args, **kwargs)
  File "/usr/share/vdsm/storage/hsm.py", line 2260, in clearTask
return self.taskMng.clearTask(taskID=taskID)
  File "/usr/share/vdsm/storage/taskManager.py", line 175, in clearTask
t.clean()
  File "/usr/share/vdsm/storage/task.py", line 1049, in clean
raise se.TaskStateError("can't clean in state %s" % self.state)
TaskStateError: Operation is not allowed in this task state: ("can't 
clean in state running",)


I migrated all VMs to a different host, forcibly rebooted the SPM host 
and now the event stopped showing.


Thanks.

Regards.

El 2019-01-25 16:19, Nicholas Vaughan escribió:

Hi Nicolas,

We had a similar issue and it was caused by a stuck task in VDSM on
the host that was the SPM.

We found that VDSM tasks don't always show up in the oVirt GUI.  You
can check using 'vdsm-client Host getAllTasksStatuses' on the SPM
host.

We could not manually cancel any of the stuck VDSM tasks or move the
SPM to another host.  The only solution we found was to migrate all
the VM's off that host and restart it.  Once the remaining hosts had
contended to be the new SPM, we gave the engine a restart too.

Hope that helps,
Nick

On Fri, 25 Jan 2019 at 12:02,  wrote:


Hi,

We're running oVirt 4.1.9 (I know there's a new version, we can't
upgrade until [1] is implemented). The thing is that since some
days
we're having an event that floods our event list:

   Clearing asynchronous task Unknown that started at Tue Jan 22
14:33:17
WET 2019

The event shows up every minute. We tried restarting the
ovirt-engine,
but after some time it starts flooding again. No pending tasks in
the
task list.

How can I check what is happening and how to solve it?

Thanks.

   [1]: https://github.com/oVirt/ovirt-web-ui/issues/490 [1]
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/ [2]
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/ [3]
List Archives:


https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQ35IGLYZBYGY7F5IKUOXFMRUOXD6BK7/

[4]



Links:
--
[1] https://github.com/oVirt/ovirt-web-ui/issues/490
[2] https://www.ovirt.org/site/privacy-policy/
[3] https://www.ovirt.org/community/about/community-guidelines/
[4]
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YQ35IGLYZBYGY7F5IKUOXFMRUOXD6BK7/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4QMBYHRKP6SCI3QDOI4XBAQXHDIIXVD7/

[ovirt-users] [ANN] oVirt 4.2.8 async update is now available

[Sandro Bonazzola]

The oVirt Team has just released a new version of the following packages:
- ovirt-engine-metrics-1.1.8.1

The async release addresses the following bugs:
Bug 1631808  - Ensure
ovirt-engine-metrics in oVirt 4.2 doesn't have compatibility issues if
fluentd doesn't exist on host

This fix allows to have 4.3 nodes with 4.2 engine to ease upgrade.

-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GZXODHPY36HCXO2IL4TI622EFYZ32NMR/