[ovirt-users] Re: Engine installation failed at - get local vm ip

[Simone Tiraboschi]

Hi,
you
ovirt-hosted-engine-setup-ansible-bootstrap_local_vm-20191915333-gki5ri.log
is just 651 bytes long with no real error inside but the file seams
abruptly truncated;
I don't understand if it happened when you compressed the log archive or if
the setup process got somehow killed.
Without a complete log file is really hard to telly you what happened.


On Thu, Feb 14, 2019 at 6:52 AM Tailor, Bharat <
bha...@synergysystemsindia.com> wrote:

> Hi,
>
> I am still facing this issue. Any help would be appreciated.
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
>
>
> On Sun, Feb 10, 2019 at 9:36 PM Tailor, Bharat <
> bha...@synergysystemsindia.com> wrote:
>
>> Hi,
>>
>> Please find logs.
>>
>> Regrards
>> Bharat Kumar
>>
>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>> Udaipur (Raj.)
>> 313001
>> Mob: +91-9950-9960-25
>>
>>
>>
>>
>>
>>
>> On Sun, Feb 10, 2019 at 1:40 AM Simone Tiraboschi 
>> wrote:
>>
>>>
>>>
>>> On Sat, Feb 9, 2019 at 9:40 AM Tailor, Bharat <
>>> bha...@synergysystemsindia.com> wrote:
>>>
 Hi Simone,

 Any suggestions to troubleshoot this issue. I've gone through many
 community threads but didn't get relevant answer.

>>>
>>> Can you please share the whole /var/log/ovirt-hosted-engine-setup ?
>>> otherwise it's really difficult guessing what happened.
>>>
>>>

 On Sat, Feb 9, 2019, 12:55 AM Tailor, Bharat <
 bha...@synergysystemsindia.com wrote:

> Hi,
>
> I am trying to configure with static ip address.
> I don't have any dns server so using dns entry in /etc/hosts file.
> Didn't try to set anything about mac address. going with system
> generated settings only.
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
>
>
> On Sat, Feb 9, 2019 at 12:40 AM Simone Tiraboschi 
> wrote:
>
>>
>>
>> On Fri, Feb 8, 2019 at 7:49 PM Tailor, Bharat <
>> bha...@synergysystemsindia.com> wrote:
>>
>>> Hi,
>>>
>>> I am trying to test ovirt hyperconverged setup. I've a dell server &
>>> using vmware ESXi 6.7 as hypervisor. Prepared 3 VMs with cpu hw exposed.
>>>
>>> VM1 - Ovirt node 4.2
>>> 18GB RAM
>>> 2*2 vcpu
>>> nic 1 - for backend gluster
>>> nic 2 - for frontend vm network
>>>
>>> VM2 - Ovirt node 4.2
>>> 18GB RAM
>>> 2*2 vcpu
>>> nic 1 - for backend gluster
>>> nic 2 - for frontend vm network
>>>
>>> VM3- Ovirt node 4.2
>>> 18GB RAM
>>> 2*2 vcpu
>>> nic 1 - for backend gluster
>>> nic 2 - for frontend vm network
>>>
>>> I've configured gluster storage from cockpit and now trying to
>>> install engine from same cockpit but setup failed at "get local vm ip".
>>> I've gone through /var/log/ovirt-hosted-engine-setup file also but
>>> there are so many log files and I haven't find any related logs. Please
>>> help me to get out of it.
>>>
>>
>> Did you choose to configure the engine VM with a static address or
>> with DHCP? if so, do you have a proper address reservation for that mac
>> address?
>> Is the DNS correctly working?
>>
>>
>>
>>>
>>>
>>>
>>> Regrards
>>> Bharat Kumar
>>>
>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>> Udaipur (Raj.)
>>> 313001
>>> Mob: +91-9950-9960-25
>>>
>>>
>>>
>>>
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q3K34XKKGCIVNDFONFE4BCZUTLR32P7C/
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RDWJVWSQGWH7DKOKSDOP5OV6OHKLKGBN/

[ovirt-users] Vnic-Port mirroring

[ada per]

Hello everyone,

I am trying to allow port mirroring through the Vnic profile but no matter
what i do it stays grayed out. How can i enable this option?

When i am creating a new VNIC profile the options ,port mirroring and
passthrough are disabled.

the version i am using is 4.2.8.
Thanks!:)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/

[ovirt-users] Re: Engine installation failed at - get local vm ip

[Tailor, Bharat]

Hi,

Let me first clarify my infrastructure.

I've configured 3 nested ovirt node on Vmware esxi 6.7.
Enabled hardware assisted virtualization in ovirt vms.

Please confirm compatibility for ovirt on vmware nested virtualization.


Regrards
Bharat Kumar

G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
Udaipur (Raj.)
313001
Mob: +91-9950-9960-25






On Thu, Feb 14, 2019 at 2:04 PM Simone Tiraboschi 
wrote:

> Hi,
> you
> ovirt-hosted-engine-setup-ansible-bootstrap_local_vm-20191915333-gki5ri.log
> is just 651 bytes long with no real error inside but the file seams
> abruptly truncated;
> I don't understand if it happened when you compressed the log archive or
> if the setup process got somehow killed.
> Without a complete log file is really hard to telly you what happened.
>
>
> On Thu, Feb 14, 2019 at 6:52 AM Tailor, Bharat <
> bha...@synergysystemsindia.com> wrote:
>
>> Hi,
>>
>> I am still facing this issue. Any help would be appreciated.
>>
>> Regrards
>> Bharat Kumar
>>
>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>> Udaipur (Raj.)
>> 313001
>> Mob: +91-9950-9960-25
>>
>>
>>
>>
>>
>>
>> On Sun, Feb 10, 2019 at 9:36 PM Tailor, Bharat <
>> bha...@synergysystemsindia.com> wrote:
>>
>>> Hi,
>>>
>>> Please find logs.
>>>
>>> Regrards
>>> Bharat Kumar
>>>
>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>> Udaipur (Raj.)
>>> 313001
>>> Mob: +91-9950-9960-25
>>>
>>>
>>>
>>>
>>>
>>>
>>> On Sun, Feb 10, 2019 at 1:40 AM Simone Tiraboschi 
>>> wrote:
>>>


 On Sat, Feb 9, 2019 at 9:40 AM Tailor, Bharat <
 bha...@synergysystemsindia.com> wrote:

> Hi Simone,
>
> Any suggestions to troubleshoot this issue. I've gone through many
> community threads but didn't get relevant answer.
>

 Can you please share the whole /var/log/ovirt-hosted-engine-setup ?
 otherwise it's really difficult guessing what happened.


>
> On Sat, Feb 9, 2019, 12:55 AM Tailor, Bharat <
> bha...@synergysystemsindia.com wrote:
>
>> Hi,
>>
>> I am trying to configure with static ip address.
>> I don't have any dns server so using dns entry in /etc/hosts file.
>> Didn't try to set anything about mac address. going with system
>> generated settings only.
>>
>> Regrards
>> Bharat Kumar
>>
>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>> Udaipur (Raj.)
>> 313001
>> Mob: +91-9950-9960-25
>>
>>
>>
>>
>>
>>
>> On Sat, Feb 9, 2019 at 12:40 AM Simone Tiraboschi <
>> stira...@redhat.com> wrote:
>>
>>>
>>>
>>> On Fri, Feb 8, 2019 at 7:49 PM Tailor, Bharat <
>>> bha...@synergysystemsindia.com> wrote:
>>>
 Hi,

 I am trying to test ovirt hyperconverged setup. I've a dell server
 & using vmware ESXi 6.7 as hypervisor. Prepared 3 VMs with cpu hw 
 exposed.

 VM1 - Ovirt node 4.2
 18GB RAM
 2*2 vcpu
 nic 1 - for backend gluster
 nic 2 - for frontend vm network

 VM2 - Ovirt node 4.2
 18GB RAM
 2*2 vcpu
 nic 1 - for backend gluster
 nic 2 - for frontend vm network

 VM3- Ovirt node 4.2
 18GB RAM
 2*2 vcpu
 nic 1 - for backend gluster
 nic 2 - for frontend vm network

 I've configured gluster storage from cockpit and now trying to
 install engine from same cockpit but setup failed at "get local vm ip".
 I've gone through /var/log/ovirt-hosted-engine-setup file also but
 there are so many log files and I haven't find any related logs. Please
 help me to get out of it.

>>>
>>> Did you choose to configure the engine VM with a static address or
>>> with DHCP? if so, do you have a proper address reservation for that mac
>>> address?
>>> Is the DNS correctly working?
>>>
>>>
>>>



 Regrards
 Bharat Kumar

 G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
 Udaipur (Raj.)
 313001
 Mob: +91-9950-9960-25




 ___
 Users mailing list -- users@ovirt.org
 To unsubscribe send an email to users-le...@ovirt.org
 Privacy Statement: https://www.ovirt.org/site/privacy-policy/
 oVirt Code of Conduct:
 https://www.ovirt.org/community/about/community-guidelines/
 List Archives:
 https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q3K34XKKGCIVNDFONFE4BCZUTLR32P7C/

>>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.

[ovirt-users] Re: Creating a static route

[Lev Veyde]

Hi Doug,

Sorry that it took a bit of time to get back to you.
Managed to catch today somebody from the oVirt/RHV network team to discuss
the issue.
It seems that we don't currently support custom static routes on the hosts,
so the workaround that I suggested is the way to do it.

Thanks in advance,

On Tue, Feb 12, 2019 at 11:12 PM Doug Maxfield 
wrote:

> Will do.  Thanks again for all your help!!  Looking forward to a
> confirmation of the fix or a different solution.  Either way, I know I have
> a working fix.
>
>
>
> [image: Count On EMC] 
>
> *Doug Maxfield *| Senior Operating Systems Analyst
>
> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
> Tel: 515.345.4507 | Fax: 866.331.1522
> doug.l.maxfi...@emcins.com | www.emcins.com
>
>
>
>
>
> *From:* Lev Veyde 
> *Sent:* Tuesday, February 12, 2019 3:09 PM
> *To:* Doug Maxfield 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Creating a static route
>
>
>
> Hi Doug,
>
> Just a small note - the commands in the rc.local should be placed *before*
> the very last line (the touch ... command).
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 10:56 PM Lev Veyde  wrote:
>
> Hi Doug,
>
> Thanks, you're welcome!
>
> It's generally possible to add persistent rules by either using the legacy
> /etc/rc.d/rc.local boot script (chmod +x /etc/rc.d/rc.local and put the
> relevant commands at the end of the file, that way you can actually run any
> commands) or by using the /etc/sysconfig/network-scripts/rule- name> e.g. rule-ovirtmgmt or rule-eno3 (just put in the file "to
> 172.22.20.31 priority 32764" - without quotes), however of course this
> needs to be tested to verify that it works.
>
> I forwarded the issue to the network team and hopefully they will update
> soon.
>
>
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 10:17 PM Doug Maxfield 
> wrote:
>
> Lev,
>
> You have no idea how helpful you have been!!  I’ve been having this
> issue for over 2 months and starting to cause major problems.
>
>
>
> Please let me know if you find a better solution.  I’m going to wait to
> hear back from you before implementing.
>
>
>
> If we go with this workaround, is there a way to add the ip rule so it’s
> persistent?  I know how to make the ip route add persistent.
>
>
>
> [image: Count On EMC] 
>
> *Doug Maxfield *| Senior Operating Systems Analyst
>
> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
> Tel: 515.345.4507 | Fax: 866.331.1522
> doug.l.maxfi...@emcins.com | www.emcins.com
>
>
>
>
>
> *From:* Lev Veyde 
> *Sent:* Tuesday, February 12, 2019 2:14 PM
> *To:* Doug Maxfield 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Creating a static route
>
>
>
> Hi Doug,
>
> Yes, it looks like it did.
>
> I'll try to catch somebody from my local oVirt/RHV networking team to take
> a look at this issue, maybe there is a better solution for that issue than
> my workaround.
>
>
>
> But meanwhile you can use this workaround (ip route add + ip rule add),
> just please be aware that these should be run after each host reboot, since
> these commands are not persistent.
>
>
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 10:07 PM Doug Maxfield 
> wrote:
>
> Lev,
>
> Here’s the results.  It appears to fix the issue!!
>
>
>
> From non-working system:
>
>
>
> -bash-4.2# ip rule add to 172.22.20.31 priority 32764
>
>
>
> -bash-4.2# traceroute 172.22.20.31
>
> traceroute to 172.22.20.31 (172.22.20.31), 30 hops max, 60 byte packets
>
> 1  CenteraAmesAN1.emcins.com (172.21.12.61)  0.487 ms  1.082 ms  1.313 ms
>
> 2  192.168.90.9 (192.168.90.9)  1.507 ms  2.090 ms  2.294 ms
>
> 3  pdputopcomm01.emcins.com (172.22.20.31)  1.403 ms  1.401 ms  1.348 ms
>
>
>
> [image: Count On EMC] 
>
> *Doug Maxfield *| Senior Operating Systems Analyst
>
> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
> Tel: 515.345.4507 | Fax: 866.331.1522
> doug.l.maxfi...@emcins.com | www.emcins.com
>
>
>
>
>
> *From:* Lev Veyde 
> *Sent:* Tuesday, February 12, 2019 2:01 PM
> *To:* Doug Maxfield 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Creating a static route
>
>
>
> Hi Doug,
>
> OK, I think that I have a guess of what may have happened here...
>
> Can you please run the following command on the (non-working) host:
>
> ip rule add to 172.22.20.31 priority 32764
>
>
>
> This needs to be run in addition to the ip route add ... command.
>
>
>
> And then please run the traceroute command and let me know if that fixed
> the issue.
>
>
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 9:30 PM Doug Maxfield 
> wrote:
>
> Lev,
>
> Here you go.
>
>
>
> From non-working system
>
>
>
> -bash-4.2# ip rule
>
> 0:  from all lookup local
>
> 32764:  from all to 172.21.0.0/16 iif ovirtmgmt lookup 2887058719
>
> 32765:  from 172.21.0.0/16 lookup 2887058719
>
> 32766:  from all lookup main
>
> 32767:  from all lookup default
>
>
>
>
>
> From working system
>
>
>
> [root@paputopcomm04 ~]

[ovirt-users] Re: Engine installation failed at - get local vm ip

[Simone Tiraboschi]

On Thu, Feb 14, 2019 at 10:18 AM Tailor, Bharat <
bha...@synergysystemsindia.com> wrote:

> Hi,
>
> Let me first clarify my infrastructure.
>
> I've configured 3 nested ovirt node on Vmware esxi 6.7.
> Enabled hardware assisted virtualization in ovirt vms.
>
> Please confirm compatibility for ovirt on vmware nested virtualization.
>

No, AFAIK it's not working but honestly I didn't tried recently.
Maybe somebody else recently gave that a try.


>
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
>
>
> On Thu, Feb 14, 2019 at 2:04 PM Simone Tiraboschi 
> wrote:
>
>> Hi,
>> you
>> ovirt-hosted-engine-setup-ansible-bootstrap_local_vm-20191915333-gki5ri.log
>> is just 651 bytes long with no real error inside but the file seams
>> abruptly truncated;
>> I don't understand if it happened when you compressed the log archive or
>> if the setup process got somehow killed.
>> Without a complete log file is really hard to telly you what happened.
>>
>>
>> On Thu, Feb 14, 2019 at 6:52 AM Tailor, Bharat <
>> bha...@synergysystemsindia.com> wrote:
>>
>>> Hi,
>>>
>>> I am still facing this issue. Any help would be appreciated.
>>>
>>> Regrards
>>> Bharat Kumar
>>>
>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>> Udaipur (Raj.)
>>> 313001
>>> Mob: +91-9950-9960-25
>>>
>>>
>>>
>>>
>>>
>>>
>>> On Sun, Feb 10, 2019 at 9:36 PM Tailor, Bharat <
>>> bha...@synergysystemsindia.com> wrote:
>>>
 Hi,

 Please find logs.

 Regrards
 Bharat Kumar

 G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
 Udaipur (Raj.)
 313001
 Mob: +91-9950-9960-25






 On Sun, Feb 10, 2019 at 1:40 AM Simone Tiraboschi 
 wrote:

>
>
> On Sat, Feb 9, 2019 at 9:40 AM Tailor, Bharat <
> bha...@synergysystemsindia.com> wrote:
>
>> Hi Simone,
>>
>> Any suggestions to troubleshoot this issue. I've gone through many
>> community threads but didn't get relevant answer.
>>
>
> Can you please share the whole /var/log/ovirt-hosted-engine-setup ?
> otherwise it's really difficult guessing what happened.
>
>
>>
>> On Sat, Feb 9, 2019, 12:55 AM Tailor, Bharat <
>> bha...@synergysystemsindia.com wrote:
>>
>>> Hi,
>>>
>>> I am trying to configure with static ip address.
>>> I don't have any dns server so using dns entry in /etc/hosts file.
>>> Didn't try to set anything about mac address. going with system
>>> generated settings only.
>>>
>>> Regrards
>>> Bharat Kumar
>>>
>>> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
>>> Udaipur (Raj.)
>>> 313001
>>> Mob: +91-9950-9960-25
>>>
>>>
>>>
>>>
>>>
>>>
>>> On Sat, Feb 9, 2019 at 12:40 AM Simone Tiraboschi <
>>> stira...@redhat.com> wrote:
>>>


 On Fri, Feb 8, 2019 at 7:49 PM Tailor, Bharat <
 bha...@synergysystemsindia.com> wrote:

> Hi,
>
> I am trying to test ovirt hyperconverged setup. I've a dell server
> & using vmware ESXi 6.7 as hypervisor. Prepared 3 VMs with cpu hw 
> exposed.
>
> VM1 - Ovirt node 4.2
> 18GB RAM
> 2*2 vcpu
> nic 1 - for backend gluster
> nic 2 - for frontend vm network
>
> VM2 - Ovirt node 4.2
> 18GB RAM
> 2*2 vcpu
> nic 1 - for backend gluster
> nic 2 - for frontend vm network
>
> VM3- Ovirt node 4.2
> 18GB RAM
> 2*2 vcpu
> nic 1 - for backend gluster
> nic 2 - for frontend vm network
>
> I've configured gluster storage from cockpit and now trying to
> install engine from same cockpit but setup failed at "get local vm 
> ip".
> I've gone through /var/log/ovirt-hosted-engine-setup file also but
> there are so many log files and I haven't find any related logs. 
> Please
> help me to get out of it.
>

 Did you choose to configure the engine VM with a static address or
 with DHCP? if so, do you have a proper address reservation for that mac
 address?
 Is the DNS correctly working?



>
>
>
> Regrards
> Bharat Kumar
>
> G15- Vinayak Nagar complex,Opp.Maa Satiya, ayad
> Udaipur (Raj.)
> 313001
> Mob: +91-9950-9960-25
>
>
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> ht

[ovirt-users] Re: Cannot assign Network to Mellanox Interface

[Vinícius Ferrão]

Are you guys running IPoIB for Infiniband Storage? Is it true IB mode? Or 
Ethernet over IB?

If using NFS on top of it, RDMA is working
with NFSoRDMA?

I’m really curious about your setup.

Thanks,

Sent from my iPhone

> On 10 Feb 2019, at 23:55, darky...@gmail.com wrote:
> 
> You were just like me, I also thought it would pick up settings from cockpit, 
> but once I realized you had to configure the network again when adding to the 
> host, everything sort of fell into line.  I would make sure and monitor the 
> networks so you can see the traffic going through the infiniband and not the 
> ethernet.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WC6W7KRXDENXVCTXW6F24742YKDE6ZHK/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DVIIC5ZMV24SFHTUINHTP4P7UNCJRVKX/

[ovirt-users] Re: Deleted Hosted Engine

[Vinícius Ferrão]

Simone, I have a similar scenario. After redeploying the HE, the running VMs 
doesn’t show up.

There’s a way to make them appear? Since they are running I’m afraid of 
rebooting and losing the ability to power them on.

Thanks,

Sent from my iPhone

> On 8 Feb 2019, at 13:18, Simone Tiraboschi  wrote:
> 
> 
> 
>> On Fri, Feb 8, 2019 at 12:20 PM Manny SyS  wrote:
>> I have to deal with this oVirt 4.2 cluster, 4 nodes.
>> It seems someone smartly deleted hosted engine vm... how cool... so, all the 
>> VMs are still running, but no cluster management anymore :-).
>> It's a testing environment, no hosted engine backup.
>> 
>> I have no problems reinstalling the cluster... but I'd love to rescue the 
>> VMs... so I'm trying to understand what options I do have, so I ask you 
>> please if you have some hints, or maybe links to the right documentation.
>> 
>> - ssh to any ovirt cluster node and export the vms with virsh? possible?
>> - ssh to any ovirt cluster node and live migrate all the vms on one node? so 
>> that I can reinstall a new cluster on the freed nodes? Wondering which one 
>> is the correct path to do this... btw, virsh only works in readonly in ovirt 
>> cluster nodes
>> - it's a testing environment, so I could shutdown everything, reinstall a 
>> new cluster, reconnect the old storage to the new cluster... question is, 
>> how to reimport all the vms in the new cluster.
>> 
>> Please any suggestions?
> 
> If you don't have any backup of the hosted-engine VM, the best think you 
> could do is deploy hosted-engine from scratch and when you have the new 
> engine manually re-import the previous hosts and the previous datacenter.
> I think that you should be able to do it even with running VMs but if you 
> want to be on the safest side I suggest to manually shutdown all the VMs 
> before the migration.
>  
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4H6HMSRKOYV7I6XRC6FGGRBB2GKXRU52/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KRQ5NYP7QC5MQDDAZRIM7LJSI3OPY4HK/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DFQT4MJMM7SQUUKE2VJ5NPYSBKGLW7YL/

[ovirt-users] Re: ovirt-guest-agent is still needed?

[Vinícius Ferrão]

Thank you Michal.

I wasn’t aware of the SSO option. It looked really awesome. Coming from 
XenServer I’ve never seen this kind of feature.

I will continue installing the package from EPEL, and definitely gonna try the 
feature.

Thanks,

Sent from my iPhone

> On 13 Feb 2019, at 08:36, Michal Skrivanek  
> wrote:
> 
> 
> 
>> On 11 Feb 2019, at 23:39, Greg Sheremeta  wrote:
>> 
>> Hi,
>> 
>> ovirt-guest-agent isn't deprecated yet, so you can still use it in 4.3 no 
>> problem.
>> 
>> Best wishes,
>> Greg
>> 
>>> On Mon, Feb 11, 2019 at 2:33 PM Vinícius Ferrão  
>>> wrote:
>>> Hello,
>>> 
>>> I heard that ovirt-guest-agent is now deprecated and qemu-guest-agent 
>>> should be used instead.
>>> 
>>> As today I still install the ovirt-guest-agent from EPEL in my EL guests, 
>>> but should I continue doing this or using the shipped qemu-guest-agent 
>>> should be used instead?
> 
> qemu-guest-agent has always been used, it’s a dependency of 
> ovirt-guest-agent. The only thing we are changing is that we moved features 
> down from ovirt-ga to qemu-ga so it is less and less important to run also 
> ovirt-ga in addition.
> The biggest difference is SSO support, if you need/want SSO you still want 
> ovirt-ga, otherwise it doesn’t matter much and qemu-ga alone should work as 
> good as qemu-ga+ovirt-ga.
> 
>>> 
>>> What about Windows guests? Any modification needed?
>>> 
>>> Thanks,
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct: 
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives: 
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NN3XKCNTI3LGO2LJJEFZ7H3BSFV5WS5I/
>> 
>> 
>> -- 
>> GREG SHEREMETA
>> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>> Red Hat NA
>> 
>> gsher...@redhat.comIRC: gshereme
>> 
>> 
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EGT5NTG2DTLVDYQAJMKGXEDISDCBUTMU/
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FYWTI4TWBYKXFK3KKCQAWCYURSJ26DY6/

[ovirt-users] Re: Vnic-Port mirroring

[Greg Sheremeta]

Can you share a screenshot?

On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:

> Hello everyone,
>
> I am trying to allow port mirroring through the Vnic profile but no matter
> what i do it stays grayed out. How can i enable this option?
>
> When i am creating a new VNIC profile the options ,port mirroring and
> passthrough are disabled.
>
> the version i am using is 4.2.8.
> Thanks!:)
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>


-- 

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JGFPL6PF25DSRQ4Q7RUZXPXIUAD5NMSC/

[ovirt-users] Re: access engine by http

[Greg Sheremeta]

Sorry, I'm still not understanding what you are trying to achieve. Nothing
is on 8843 - ?

If you install ovirt-engine from source in a developer setup, it's 8080
http by default and no apache in front. Maybe try that.

Greg

On Thu, Feb 14, 2019 at 12:14 AM du_hon...@yeah.net 
wrote:

> hi Greg, Ravi
> thanks， https is ok，when I try to visit http://ip:8080/ovirt-engine but
> still rediect https://192.168.122.176:8443/tchyp-engine/,  I want to know
> How to redirect to 8843?
> Besides I try to disable ssl by comment /etc/httpd/conf/httpd.conf
> #IncludeOptional conf.d/*.conf,
> But http is still redirect to https,  I should how disable redirect?
> I find  this file  /usr/share/ovirt-engine/services/ovirt-engine/
> ovirt-engine.xml.in, I try to delete follow line. but ovirt-engine server
> is not boot
>  name="redirect"
> port="{{ HTTPS_PORT }}"/>
> /var/log/ovirt-engine/boot.log has some error?
> 13:12:43,144 INFO  [org.jboss.as] WFLYSRV0049: WildFly Full 11.0.0.Final
> (WildFly Core 3.0.8.Final) starting
> 13:12:44,644 INFO  [org.jboss.as.controller.management-deprecated]
> WFLYCTL0028: Attribute 'security-realm' in the resource at address
> '/core-service=management/management-interface=native-interface' is
> deprecated, and may be removed in future version. See the attribute
> description in the output of the read-resource-description operation to
> learn more about the deprecation.
> 13:12:44,646 INFO  [org.jboss.as.controller.management-deprecated]
> WFLYCTL0028: Attribute 'security-realm' in the resource at address
> '/core-service=management/management-interface=http-interface' is
> deprecated, and may be removed in future version. See the attribute
> description in the output of the read-resource-description operation to
> learn more about the deprecation.
> 13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated]
> WFLYCTL0028: Attribute 'security-realm' in the resource at address
> '/subsystem=undertow/server=default-server/https-listener=https' is
> deprecated, and may be removed in future version. See the attribute
> description in the output of the read-resource-description operation to
> learn more about the deprecation.
> 13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated]
> WFLYCTL0028: Attribute 'enabled-protocols' in the resource at address
> '/subsystem=undertow/server=default-server/https-listener=https' is
> deprecated, and may be removed in future version. See the attribute
> description in the output of the read-resource-description operation to
> learn more about the deprecation.
> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
> Found restapi.war in deployment directory. To trigger deployment create a
> file called restapi.war.dodeploy
> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
> Found engine.ear in deployment directory. To trigger deployment create a
> file called engine.ear.dodeploy
> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
> Found ovirt-web-ui.war in deployment directory. To trigger deployment
> create a file called ovirt-web-ui.war.dodeploy
> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
> Found apidoc.war in deployment directory. To trigger deployment create a
> file called apidoc.war.dodeploy
> 13:12:44,895 ERROR [org.jboss.as.controller] WFLYCTL0362: Capabilities
> required by resource
> '/subsystem=undertow/server=default-server/http-listener=http' are not
> available:
> org.wildfly.network.socket-binding.redirect; Possible registration
> points for this capability:
> /socket-binding-group=*/socket-binding=*
> 13:12:44,900 FATAL [org.jboss.as.server] WFLYSRV0056: Server boot has
> failed in an unrecoverable manner; exiting. See previous messages for
> details.
> 13:12:44,920 INFO  [org.jboss.as] WFLYSRV0050: WildFly Full 11.0.0.Final
> (WildFly Core 3.0.8.Final) stopped in 13ms
>
>
> --
>
> Regards
>
> Hongyu Du
>
>
> *From:* Greg Sheremeta 
> *Date:* 2019-02-14 04:08
> *To:* du_hon...@yeah.net; Ravi Nori 
> *CC:* users 
> *Subject:* Re: [ovirt-users] access engine by http
> What are you trying to achieve? SSL is good :)
>
> I suspect you have to disable ssl in the apache server
> /etc/httpd/conf.d/ssl.conf
> but I'm not really sure.
>
> And, if you do, I suspect some things that use certificates won't work,
> either (console, disk upload, etc.)
>
> Ravi might know more.
>
> Greg
>
> On Wed, Feb 13, 2019 at 3:39 AM du_hon...@yeah.net 
> wrote:
>
>> I want to access engine by http， after engine-setup success， I fix
>> /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf
>>
>> ENGINE_FQDN=localhost.localdomain
>> ENGINE_PROXY_ENABLED=false
>> ENGINE_PROXY_HTTP_PORT=None
>> ENGINE_PROXY_HTTPS_PORT=None
>> ENGINE_AJP_ENABLED=false
>> ENGINE_AJP_PORT=None
>> ENGINE_HTTP_ENABLED=true
>> ENGINE_HTTPS_ENABLED=false
>> ENGINE_HTTP_PORT=8080
>> ENGINE_HTTPS_PORT=443
>>
>> but I

[ovirt-users] Re: update to 4.2.8 fails

[Greg Sheremeta]

Hi,

On Wed, Feb 13, 2019 at 11:18 PM Vincent Royer 
wrote:

> wow am I crazy or is that not mentioned anywhere that I can find in the
> docs?
>

https://ovirt.org/documentation/upgrade-guide/appe-Manually_Updating_Hosts.html

Does that make sense, or do you think it needs enhancement? If it needs
enhancement, please open a documentation bug:
https://github.com/oVirt/ovirt-site/issues/new



>
> some combinations of commands and reboots finally got the update to take.
>
> Any idea about the messages about not being registered to an entitlement
> server?  whats that all about??
>

If you're on CentOS, it's a harmless side effect of cockpit being installed.
# cat  /etc/yum/pluginconf.d/subscription-manager.conf
[main]
enabled=1
# change to 0 if you prefer



>
>
>
> On Wed, Feb 13, 2019 at 7:30 PM Edward Berger  wrote:
>
>> If its a node-ng install, you should just update the whole image with
>> yum update ovirt-node-ng-image-update
>>
>> On Wed, Feb 13, 2019 at 8:12 PM Vincent Royer 
>> wrote:
>>
>>> Sorry, this is a node install w/ he.
>>>
>>> On Wed, Feb 13, 2019, 4:44 PM Vincent Royer >> wrote:
>>>
 trying to update from 4.2.6 to 4.2.8

 yum update fails with:

 --> Finished Dependency Resolution




 Error: Package: vdsm-4.20.46-1.el7.x86_64 (ovirt-4.2)




Requires: libvirt-daemon-kvm >= 4.5.0-10.el7_6.3




Installed: libvirt-daemon-kvm-3.9.0-14.el7_5.8.x86_64
 (installed)



libvirt-daemon-kvm = 3.9.0-14.el7_5.8




 Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
 (ovirt-4.2-centos-qemu-ev)



Requires: libepoxy.so.0()(64bit)




 Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
 (ovirt-4.2-centos-qemu-ev)



Requires: libibumad.so.3()(64bit)




 Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
 (ovirt-4.2-centos-qemu-ev)



Requires: libgbm.so.1()(64bit)




  You could try using --skip-broken to work around the problem




  You could try running: rpm -Va --nofiles --nodigest




 Uploading Enabled Repositories Report




 2019-02-13 16:42:14,190 [INFO] yum:17779:Dummy-18 @connection.py:868 -
 Connection built: host=subscription.rhsm.redhat.com port=443
 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/
 insecure=False

 Loaded plugins: fastestmirror, product-id, subscription-manager




 2019-02-13 16:42:14,199 [WARNING] yum:17779:Dummy-18 @logutil.py:141 -
 logging already initialized



 2019-02-13 16:42:14,200 [ERROR] yum:17779:Dummy-18 @identity.py:145 -
 Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an
 exception with msg: [Errno 2] No such file or directory:
 '/etc/pki/consumer/key.pem'

 2019-02-13 16:42:14,200 [INFO] yum:17779:Dummy-18 @connection.py:868 -
 Connection built: host=subscription.rhsm.redhat.com port=443
 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/
 insecure=False

 2019-02-13 16:42:14,201 [INFO] yum:17779:Dummy-18 @repolib.py:471 -
 repos updated: Repo updates








 Total repo updates: 0




 Updated




 




 Added (new)




 




 Deleted




 




 This system is not registered with an entitlement server. You can use
 subscription-manager to register.



 Cannot upload enabled repos report, is this client registered?




 [root@brian yum.repos.d]# yum repolist




 Loaded plugins: enabled_repos_upload, fastestmirror, imgbased-persist,
 package_upload, product-id, search-disabled-repos, subscription-manager,
 vdsmupgrade


 2019-02-13 16:42:36,489 [ERROR] yum:17809:MainThread @identity.py:145 -
 Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an
 exception with msg: [Errno 2] No such file or directory:
 '/etc/pki/consumer/key.pem'

 2019-02-13 16:42:36,490 [INFO] yum:17809:MainThread @connection.py:868
 - Connection built: host=subscription.rhsm.redhat.com port=443
 handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/
 insecure=False

 2019-02-13 16:42:36,491 [INFO] yum:17809:MainThread @repolib.py:471 -
 repos updated: Repo updates








 Total repo updates: 0




 Updated




 




 Added (new)




 




 Deleted

[ovirt-users] Re: understanding ovirt communication

[Greg Sheremeta]

Hi,

Please provide your engine.log from the engine and vdsm.log from the node.

Greg


On Wed, Feb 13, 2019 at 3:49 PM  wrote:

>
>
> Hallo,
>
> I installed ovirt-engine and ovirt-node.
> I try add host:new but received errormg InstallFailed.
>
> seem connection to following ports: 49076 49080 49084...
>
> Howto understanding ovirt communication?
>
> keywords: engine,dwh,ovn,libvirt,virtd,node,otopi,vdsmd,sshd,node,goferd
>
> regards Heiko
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/324LTF66XWUMEIQVXZS6KAQMTE4BDU7W/
>


-- 

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/43P2XVSCD2G3Q7AO4QQIQI73K7FXJFZE/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Ralf Schenk]

Hello,

my problems on gluster started with 4.2.6 or 4.2.7. around end of
September. I still have VM's paused the one or other day an they are
reactivated either by HA oder manually. So i want to testify your
experiences. Even while I'm using bonded network connections there are
communication problems without heavy load or other tasks running.

My new Cluster on EPYC Hardware running on NFS 4.2 storage volumes based
on ZFS runs rock solid and VM's are much faster regarding I/O. Gluster
3.12.5 sucks !

Bye

Am 14.02.2019 um 07:52 schrieb Jayme:
> I have a three node HCI gluster which was previously running 4.2 with
> zero problems.  I just upgraded it yesterday.  I ran in to a few bugs
> right away with the upgrade process, but aside from that I also
> discovered other users with severe GlusterFS problems since the
> upgrade to new GlusterFS version.  It is less than 24 hours since I
> upgrade my cluster and I just got a notice that one of my GlusterFS
> bricks is offline.  There does appear to be a very real and serious
> issue here with the latest updates.
>
>
> On Wed, Feb 13, 2019 at 7:26 PM  > wrote:
>
> I'm abandoning my production ovirt cluster due to instability.   I
> have a 7 host cluster running about 300 vms and have been for over
> a year.  It has become unstable over the past three days.  I have
> random hosts both, compute and storage disconnecting.  AND many
> vms disconnecting and becoming unusable.
>
> 7 host are 4 compute hosts running Ovirt 4.2.8 and three glusterfs
> hosts running 3.12.5.  I submitted a bugzilla bug and they
> immediately assigned it to the storage people but have not
> responded with any meaningful information.  I have submitted
> several logs. 
>
> I have found some discussion on problems with instability with
> gluster 3.12.5.  I would be willing to upgrade my gluster to a
> more stable version if that's the culprit.  I installed gluster
> using the ovirt gui and this is the version the ovirt gui installed.
>
> Is there an ovirt health monitor available?  Where should I be
> looking to get a resolution the problems I'm facing.
> ___
> Users mailing list -- users@ovirt.org 
> To unsubscribe send an email to users-le...@ovirt.org
> 
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BL4M3JQA3IEXCQUY4IGQXOAALRUQ7TVB/
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QULCBXHTKSCPKH4UV6GLMOLJE6J7M5UW/
-- 


*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
fax +49 (0) 24 05 / 40 83 759
mail *r...@databay.de* 
    
*Databay AG*
Jens-Otto-Krag-Straße 11
D-52146 Würselen
*www.databay.de* 

Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
Philipp Hermanns
Aufsichtsratsvorsitzender: Wilhelm Dohmen


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RLO37RGAEVJHRQW3YJT4LE5I7X52CUPU/

[ovirt-users] Re: admin user locked out (OVN invalid_grant)

[Андрей Русаков]

Hi

I was able to fix the problem.
I am not 100% sure, but seems like restart ovirt-provider-ovn didn't apply
changes.

So, what i did.
I perform secret Update, and restart services, and no changes.
Then i change debug, but log file didn't appear, so i perform stop/start...
And from this moment of time everything is working fine.

Should i enable "Automatic Synchronization" that you mention on first
message?

Andrey

вт, 12 февр. 2019 г. в 22:39, Dominik Holler :

> On Tue, 12 Feb 2019 21:06:24 +0300
> Андрей Русаков  wrote:
>
> > Hi Dominik,
> > Thank you for your reply.
> >
> > Automatic Synchronization  is Disabled already.
> >
> > yes,
> > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > is in place.
> > I  google a bit (before starting new thread) and find similar problem
> (the
> > case was in wrong/missing ovirt-sso-client-secret), and i try to update
> > ovirt-sso-client-secret.
>
> How did you update the secret?
> The procedure would be
> 1. Run /usr/share/ovirt-engine/bin/ovirt-register-sso-client-tool.sh
>with
>Client Id: ovirt-provider-ovn
>Client CA Certificate File Location:
> /etc/pki/ovirt-engine/certs/engine.cer
>Callback Prefix URL: https://:443/ovirt-engine/
> 2. Use the SSO_CLIENT_SECRET from the outfile produced by the previous
>command in
>/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> 3. Restart ovirt-engine and ovirt-provider-ovn
>systemctl restart ovirt-engine
>systemctl restart ovirt-provider-ovn
>
>
> If this does not solve the problem and you want to use the
> ovirt-provider-ovn, please increase logging in ovirt-provider-ovn via
> sudo sed -i.$(date +%F-%H-%M) 's/INFO/DEBUG/gi'
> /etc/ovirt-provider-ovn/logger.conf
> systemctl restart ovirt-provider-ovn
>
> and share the ovirt-provider-ovn.log with the error after the restart.
>
>
> > But it didn't help
> >
> > Andrey.
> >
> > вт, 12 февр. 2019 г. в 20:04, Dominik Holler :
> >
> > > On Tue, 12 Feb 2019 16:50:06 -
> > > Andrey  Rusakov  wrote:
> > >
> > > > Hi,
> > > >
> > > > Recently i upgrade my oVirt installation 4.2.8 to 4.3.
> > > > I was able to login right after upgrade (yum, setup, reboot).
> > > > But according to logs, account locks in 2-3 minutes.
> > > >
> > > > 2019-02-12 15:44:57,228+03 ERROR
> > > [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) []
> > > OAuthException invalid_grant: The provided authorization grant for the
> auth
> > > code has expired.
> > > > 2019-02-12 15:44:57,232+03 ERROR
> > > [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default
> task-2)
> > > [] Cannot authenticate using authentication Headers: invalid_grant: The
> > > provided authorization grant for the auth code has expired.
> > > > 2019-02-12 15:44:57,307+03 INFO
> > > [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
> task-2)
> > > [] locking user: admin due to interval failures
> > > >
> > > > I was able to unlock admin using CLI, but every time i go to OVN
> config
> > > it locks immediately.
> > > >
> > > > Checking OVN service logs i can see
> > > >
> > > > code 401, message Unauthorized
> > > > "POST /v2.0/tokens HTTP/1.1" 401 -
> > > >
> > > > And
> > > > "Error during SSO authentication invalid_grant : The provided
> > > authorization grant for the auth code has expired."
> > > > On OVN web page.
> > > >
> > >
> > >
> > > For a timely fix, please disable automatic synchronization of the
> > > ovirt-provider-ovn via web UI Administration -> Providers ->
> > > ovirt-provider-ovn -> Edit -> Disable Automatic Synchronization
> > >
> > > Is there a file
> > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > ?
> > >
> > > > Is it possible to  renew authorization grant or ...?
> > > >
> > > > ___
> > > > Users mailing list -- users@ovirt.org
> > > > To unsubscribe send an email to users-le...@ovirt.org
> > > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/
> > > > List Archives:
> > >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRTJIQSQGCANHY7HKQAPPBHGLRN2LDJK/
> > >
> > >
> >
>
>

-- 
С Уважением.
Русаков Андрей.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z2MJ44PZXJ3GLAR2UXRGEMUBLMRB6WNV/

[ovirt-users] Re: Vnic-Port mirroring

[ada per]

The one below is  my logical network configuration
[image: image.png]
The following one is the grayed out VNIC Profiles options

[image: image.png]

On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta  wrote:

> Can you share a screenshot?
>
> On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:
>
>> Hello everyone,
>>
>> I am trying to allow port mirroring through the Vnic profile but no
>> matter what i do it stays grayed out. How can i enable this option?
>>
>> When i am creating a new VNIC profile the options ,port mirroring and
>> passthrough are disabled.
>>
>> the version i am using is 4.2.8.
>> Thanks!:)
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>>
>
>
> --
>
> GREG SHEREMETA
>
> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>
> Red Hat NA
>
> 
>
> gsher...@redhat.comIRC: gshereme
> 
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4MDGNRNDEWNL6OPJ7Y4MKJGKFXSOI6IX/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Sahina Bose]

On Thu, Feb 14, 2019 at 4:56 AM  wrote:
>
> I'm abandoning my production ovirt cluster due to instability.   I have a 7 
> host cluster running about 300 vms and have been for over a year.  It has 
> become unstable over the past three days.  I have random hosts both, compute 
> and storage disconnecting.  AND many vms disconnecting and becoming unusable.
>
> 7 host are 4 compute hosts running Ovirt 4.2.8 and three glusterfs hosts 
> running 3.12.5.  I submitted a bugzilla bug and they immediately assigned it 
> to the storage people but have not responded with any meaningful information. 
>  I have submitted several logs.

Can you point to the bug filed?
+Krutika Dhananjay to look at it

>
> I have found some discussion on problems with instability with gluster 
> 3.12.5.  I would be willing to upgrade my gluster to a more stable version if 
> that's the culprit.  I installed gluster using the ovirt gui and this is the 
> version the ovirt gui installed.
>
> Is there an ovirt health monitor available?  Where should I be looking to get 
> a resolution the problems I'm facing.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BL4M3JQA3IEXCQUY4IGQXOAALRUQ7TVB/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NFFMACCICXTDNEFKRDATHQ44MX44YDVX/

[ovirt-users] Re: SURVEY: your NFS configuration (Bug 1666795 - SHE doesn't start after power-off, 4.1 to 4.3 upgrade - VolumeDoesNotExist: Volume does not exist )

[Vinícius Ferrão]

I’m running the NFS server on FreeNAS on top of VLAN tagged LACP interface.

root@freenas:~ # cat /etc/exports 
V4: / -sec=sys
/mnt/pool0/ovirt/he -network 192.168.10.0/29
/mnt/pool0/ovirt/vm -network 192.168.10.0/29
/mnt/pool0/ovirt/iso -network 192.168.10.0/29

Simple as this.

On this hosts it gets mounted as this:

192.168.10.6:/mnt/pool0/ovirt/he on 
/rhev/data-center/mnt/192.168.10.6:_mnt_pool0_ovirt_he type nfs4 
(rw,relatime,vers=4.1,rsize=131072,wsize=131072,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,clientaddr=192.168.10.1,local_lock=none,addr=192.168.10.6)
192.168.10.6:/mnt/pool0/ovirt/vm on 
/rhev/data-center/mnt/192.168.10.6:_mnt_pool0_ovirt_vm type nfs4 
(rw,relatime,vers=4.1,rsize=131072,wsize=131072,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,clientaddr=192.168.10.1,local_lock=none,addr=192.168.10.6)
192.168.10.6:/mnt/pool0/ovirt/iso on 
/rhev/data-center/mnt/192.168.10.6:_mnt_pool0_ovirt_iso type nfs4 
(rw,relatime,vers=4.1,rsize=131072,wsize=131072,namlen=255,soft,nosharecache,proto=tcp,timeo=600,retrans=6,sec=sys,clientaddr=192.168.10.1,local_lock=none,addr=192.168.10.6)

> On 12 Feb 2019, at 20:39, Nir Soffer  wrote:
> 
> Looking at
> https://bugzilla.redhat.com/1666795  
> 
> It seems that a change in vdsm/libvirt exposed NFS configuration issue, that 
> may was
> needed in the past and probably not needed now.
> 
> If you use NFS, I would like to see your /etc/exports (after sanitizing it if 
> needed).
> For extra bonus, output of "exportfs -v" would be useful.
> 
> In particular, I want to know if you use root_squash, all_squash, or 
> no_root_squash.
> 
> Thanks,
> Nir 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7J3ZV25DP2X5TD6A4IV63W5PANKWERTO/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KAX4M3SGCUZ56DWU5UDG5W77OOA7YFCT/

[ovirt-users] Error packages update after upgrade to ovirt 4.3

[Нон локалес]

Hello. Anyone please help, cannot upgrade host, yum update going in error.

https://pastebin.com/MWnsxVAa

What i have done and didnt work:
yum install dpdk
yum clean all
package-cleanup --cleandupes

Its clean centos 7 with installed host role throught ovirt engine/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/O2ZUYZDD42NBDDG6EGG44LWF2VZRGJIO/

[ovirt-users] Re: admin user locked out (OVN invalid_grant)

[Dominik Holler]

On Thu, 14 Feb 2019 15:28:52 +0300
Андрей Русаков  wrote:

> Hi
> 
> I was able to fix the problem.
> I am not 100% sure, but seems like restart ovirt-provider-ovn didn't apply
> changes.
> 
> So, what i did.
> I perform secret Update, and restart services, and no changes.
> Then i change debug, but log file didn't appear, so i perform stop/start...
> And from this moment of time everything is working fine.
> 

Thanks for letting me know!

> Should i enable "Automatic Synchronization" that you mention on first
> message?
> 

If you are adding or deleting networks on the ovirt-provider-ovn, e.g.
by ManageIQ or ansible, "Automatic Synchronization" would provide you
the comfort of keeping the representation of of ovn network in oVirt
updated.
If you are not accessing the ovirt-provider-ovn directly, it will add
no value.

> Andrey
> 
> вт, 12 февр. 2019 г. в 22:39, Dominik Holler :
> 
> > On Tue, 12 Feb 2019 21:06:24 +0300
> > Андрей Русаков  wrote:
> >
> > > Hi Dominik,
> > > Thank you for your reply.
> > >
> > > Automatic Synchronization  is Disabled already.
> > >
> > > yes,
> > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > is in place.
> > > I  google a bit (before starting new thread) and find similar problem
> > (the
> > > case was in wrong/missing ovirt-sso-client-secret), and i try to update
> > > ovirt-sso-client-secret.
> >
> > How did you update the secret?
> > The procedure would be
> > 1. Run /usr/share/ovirt-engine/bin/ovirt-register-sso-client-tool.sh
> >with
> >Client Id: ovirt-provider-ovn
> >Client CA Certificate File Location:
> > /etc/pki/ovirt-engine/certs/engine.cer
> >Callback Prefix URL: https://:443/ovirt-engine/
> > 2. Use the SSO_CLIENT_SECRET from the outfile produced by the previous
> >command in
> >/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > 3. Restart ovirt-engine and ovirt-provider-ovn
> >systemctl restart ovirt-engine
> >systemctl restart ovirt-provider-ovn
> >
> >
> > If this does not solve the problem and you want to use the
> > ovirt-provider-ovn, please increase logging in ovirt-provider-ovn via
> > sudo sed -i.$(date +%F-%H-%M) 's/INFO/DEBUG/gi'
> > /etc/ovirt-provider-ovn/logger.conf
> > systemctl restart ovirt-provider-ovn
> >
> > and share the ovirt-provider-ovn.log with the error after the restart.
> >
> >
> > > But it didn't help
> > >
> > > Andrey.
> > >
> > > вт, 12 февр. 2019 г. в 20:04, Dominik Holler :
> > >
> > > > On Tue, 12 Feb 2019 16:50:06 -
> > > > Andrey  Rusakov  wrote:
> > > >
> > > > > Hi,
> > > > >
> > > > > Recently i upgrade my oVirt installation 4.2.8 to 4.3.
> > > > > I was able to login right after upgrade (yum, setup, reboot).
> > > > > But according to logs, account locks in 2-3 minutes.
> > > > >
> > > > > 2019-02-12 15:44:57,228+03 ERROR
> > > > [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) []
> > > > OAuthException invalid_grant: The provided authorization grant for the
> > auth
> > > > code has expired.
> > > > > 2019-02-12 15:44:57,232+03 ERROR
> > > > [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default
> > task-2)
> > > > [] Cannot authenticate using authentication Headers: invalid_grant: The
> > > > provided authorization grant for the auth code has expired.
> > > > > 2019-02-12 15:44:57,307+03 INFO
> > > > [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
> > task-2)
> > > > [] locking user: admin due to interval failures
> > > > >
> > > > > I was able to unlock admin using CLI, but every time i go to OVN
> > config
> > > > it locks immediately.
> > > > >
> > > > > Checking OVN service logs i can see
> > > > >
> > > > > code 401, message Unauthorized
> > > > > "POST /v2.0/tokens HTTP/1.1" 401 -
> > > > >
> > > > > And
> > > > > "Error during SSO authentication invalid_grant : The provided
> > > > authorization grant for the auth code has expired."
> > > > > On OVN web page.
> > > > >
> > > >
> > > >
> > > > For a timely fix, please disable automatic synchronization of the
> > > > ovirt-provider-ovn via web UI Administration -> Providers ->
> > > > ovirt-provider-ovn -> Edit -> Disable Automatic Synchronization
> > > >
> > > > Is there a file
> > > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > > ?
> > > >
> > > > > Is it possible to  renew authorization grant or ...?
> > > > >
> > > > > ___
> > > > > Users mailing list -- users@ovirt.org
> > > > > To unsubscribe send an email to users-le...@ovirt.org
> > > > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > > > oVirt Code of Conduct:
> > > > https://www.ovirt.org/community/about/community-guidelines/
> > > > > List Archives:
> > > >
> > https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRTJIQSQGCANHY7HKQAPPBHGLRN2LDJK/
> > > >
> > > >
> > >
> >
> >
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an 

[ovirt-users] Re: Error packages update after upgrade to ovirt 4.3

[Gianluca Cecchi]

On Thu, Feb 14, 2019 at 2:18 PM Нон локалес  wrote:

> Hello. Anyone please help, cannot upgrade host, yum update going in error.
>
> https://pastebin.com/MWnsxVAa
>
> What i have done and didnt work:
> yum install dpdk
> yum clean all
> package-cleanup --cleandupes
>
> Its clean centos 7 with installed host role throught ovirt engine/
> ___
>
>
I know from Centos-devel mailing list that there are these kind of problems
in places, so possibly you are incurring in their effects on repos:
https://lists.centos.org/pipermail/centos-devel/2019-February/017223.html

Gianluca
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LPUXQMSYWDTHAKL6NHRKKZTTRLEWRTBN/

[ovirt-users] Re: Problem installing hyperconverged setup

[Sahina Bose]

You can edit per host in the cockpit UI if you have non-uniform hosts.
If you still run into issues, please paste the generated gdeploy
config file to check

On Wed, Feb 13, 2019 at 8:54 PM Edward Berger  wrote:
>
> I don't believe the wizard followed your wishes if it comes up with 1005gb 
> for the thinpool.
> 500gb data + 500gb vmstore +5gb metadata = 1005gb
>
> The wizard tries to do the same setup on all three gluster hosts.
> So if you change anything, you have to "check and edit" the config file it 
> generates in all three locations
> before deploy..
>
> With only 450gb min-size-disk, I'd start over again, delete the data and 
> vmstore domains during the wizard setup
> and bump up engine size to fill up the available space on the smallest disk 
> (400gb or so).
>
> The other domains aren't necessary and you might want to give them their own 
> larger disks later.
>
> On Wed, Feb 13, 2019 at 8:41 AM  wrote:
>>
>> Hi,
>>
>> I am currently setting up an Ovirt cluster in a test environment and cannot 
>> get the hyperconverged setup to run properly.  I have installed 3 nodes on 
>> version 4.2.8.
>>
>> I keep getting the following error -
>>
>> TASK [Create LVs with specified size for the VGs] 
>> **
>> failed: [node01.ovirt.local] (item={u'lv': u'gluster_thinpool_sdb', u'size': 
>> u'1005GB', u'extent': u'100%FREE', u'vg': u'gluster_vg_sdb'}) => {"changed": 
>> false, "item": {"extent": "100%FREE", "lv": "gluster_thinpool_sdb", "size": 
>> "1005GB", "vg": "gluster_vg_sdb"}, "msg": "  WARNING: Pool zeroing and 3.00 
>> MiB large chunk size slows down thin provisioning.\n  WARNING: Consider 
>> disabling zeroing (-Zn) or using smaller chunk size (<512.00 KiB).\n  Volume 
>> group \"gluster_vg_sdb\" has insufficient free space (157261 extents): 
>> 343040 required.\n", "rc": 5}
>> to retry, use: --limit @/tmp/tmpbXqHhw/lvcreate.retry
>>
>> All 3 nodes have an /sdb installed which are different sizes but all in 
>> excess of 450Gb.  I have specified JBOD in the setup.
>>
>> I have tried reducing the size of the engine, data and vmstore bricks to 
>> 50Gb each instead of the default but the installation still fails.
>>
>> I think it has something to do with the thin provisioning but not sure what.
>>
>> Any help would be much appreciated.
>>
>> Thanks
>> Paul.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BXNOIJCQHCOZCHEH4MLVB4F4AURGHBIZ/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4LQUWXCPNVTJWGH4UMO7WOVZRCGTBOPO/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KH5O35MZO72SVYIKY2ROPZNQHODILGXR/

[ovirt-users] Re: Vnic-Port mirroring

[ada per]

Thanks for your reply,

I have 2 clusters one is with linux bridge and the other one is OVS.

None seems to work.. I just retried the linux bridge cluster now and still
no luck.

On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, <
p.stanifo...@leedsbeckett.ac.uk> wrote:

> Is the cluster using linux bridge? OVS doesn't support Port Mirroring.
>
>
> Regards,
>
>  Paul S.
> --
> *From:* ada per 
> *Sent:* 14 February 2019 12:37
> *To:* Greg Sheremeta
> *Cc:* users
> *Subject:* [ovirt-users] Re: Vnic-Port mirroring
>
> The one below is  my logical network configuration
> [image: image.png]
> The following one is the grayed out VNIC Profiles options
>
> [image: image.png]
>
> On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
> wrote:
>
>> Can you share a screenshot?
>>
>> On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:
>>
>>> Hello everyone,
>>>
>>> I am trying to allow port mirroring through the Vnic profile but no
>>> matter what i do it stays grayed out. How can i enable this option?
>>>
>>> When i am creating a new VNIC profile the options ,port mirroring and
>>> passthrough are disabled.
>>>
>>> the version i am using is 4.2.8.
>>> Thanks!:)
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>>>
>>
>>
>> --
>>
>> GREG SHEREMETA
>>
>> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>>
>> Red Hat NA
>>
>> 
>>
>> gsher...@redhat.comIRC: gshereme
>> 
>>
> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HCEQ4GJXEWJOKWL47CL5UFDQDLTB562I/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Sandro Bonazzola]

Il giorno gio 14 feb 2019 alle ore 07:54 Jayme  ha
scritto:

> I have a three node HCI gluster which was previously running 4.2 with zero
> problems.  I just upgraded it yesterday.  I ran in to a few bugs right away
> with the upgrade process, but aside from that I also discovered other users
> with severe GlusterFS problems since the upgrade to new GlusterFS version.
> It is less than 24 hours since I upgrade my cluster and I just got a notice
> that one of my GlusterFS bricks is offline.  There does appear to be a very
> real and serious issue here with the latest updates.
>

tracking the issue on Gluster side on this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1677160
If you can help Gluster community providing requested logs it would be
great.




>
>
> On Wed, Feb 13, 2019 at 7:26 PM  wrote:
>
>> I'm abandoning my production ovirt cluster due to instability.   I have a
>> 7 host cluster running about 300 vms and have been for over a year.  It has
>> become unstable over the past three days.  I have random hosts both,
>> compute and storage disconnecting.  AND many vms disconnecting and becoming
>> unusable.
>>
>> 7 host are 4 compute hosts running Ovirt 4.2.8 and three glusterfs hosts
>> running 3.12.5.  I submitted a bugzilla bug and they immediately assigned
>> it to the storage people but have not responded with any meaningful
>> information.  I have submitted several logs.
>>
>> I have found some discussion on problems with instability with gluster
>> 3.12.5.  I would be willing to upgrade my gluster to a more stable version
>> if that's the culprit.  I installed gluster using the ovirt gui and this is
>> the version the ovirt gui installed.
>>
>> Is there an ovirt health monitor available?  Where should I be looking to
>> get a resolution the problems I'm facing.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BL4M3JQA3IEXCQUY4IGQXOAALRUQ7TVB/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QULCBXHTKSCPKH4UV6GLMOLJE6J7M5UW/
>


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FXNK7NRK3XJRN5ZOYWOTKGMT273NFFZ7/

[ovirt-users] Re: Vnic-Port mirroring

[ada per]

No it is not used by any vms.
We created a new vnic which is currently not assigned in any vm and still
no options available.

On Thu, 14 Feb 2019, 16:16 Staniforth, Paul, <
p.stanifo...@leedsbeckett.ac.uk> wrote:

> is the vNiC profile being used by any VMs , they need to be down to enable
> port-mirroring
> --
> *From:* ada per 
> *Sent:* 14 February 2019 14:08
> *To:* Staniforth, Paul
> *Cc:* Greg Sheremeta; users@ovirt.org
> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>
> Thanks for your reply,
>
> I have 2 clusters one is with linux bridge and the other one is OVS.
>
> None seems to work.. I just retried the linux bridge cluster now and still
> no luck.
>
> On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, <
> p.stanifo...@leedsbeckett.ac.uk> wrote:
>
>> Is the cluster using linux bridge? OVS doesn't support Port Mirroring.
>>
>>
>> Regards,
>>
>>  Paul S.
>> --
>> *From:* ada per 
>> *Sent:* 14 February 2019 12:37
>> *To:* Greg Sheremeta
>> *Cc:* users
>> *Subject:* [ovirt-users] Re: Vnic-Port mirroring
>>
>> The one below is  my logical network configuration
>> [image: image.png]
>> The following one is the grayed out VNIC Profiles options
>>
>> [image: image.png]
>>
>> On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
>> wrote:
>>
>>> Can you share a screenshot?
>>>
>>> On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:
>>>
 Hello everyone,

 I am trying to allow port mirroring through the Vnic profile but no
 matter what i do it stays grayed out. How can i enable this option?

 When i am creating a new VNIC profile the options ,port mirroring and
 passthrough are disabled.

 the version i am using is 4.2.8.
 Thanks!:)
 ___
 Users mailing list -- users@ovirt.org
 To unsubscribe send an email to users-le...@ovirt.org
 Privacy Statement: https://www.ovirt.org/site/privacy-policy/
 oVirt Code of Conduct:
 https://www.ovirt.org/community/about/community-guidelines/
 List Archives:
 https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/

>>>
>>>
>>> --
>>>
>>> GREG SHEREMETA
>>>
>>> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>>>
>>> Red Hat NA
>>>
>>> 
>>>
>>> gsher...@redhat.comIRC: gshereme
>>> 
>>>
>> To view the terms under which this email is distributed, please go to:-
>> http://leedsbeckett.ac.uk/disclaimer/email/
>>
>> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JIIBWSIXW6KDSMQWHCHLU6UTN7B7KTMF/

[ovirt-users] Re: access engine by http

[du_hon...@yeah.net]

sorry I describe errror，
 my /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf 

ENGINE_FQDN=localhost.localdomain
ENGINE_PROXY_ENABLED=false
ENGINE_PROXY_HTTP_PORT=None
ENGINE_PROXY_HTTPS_PORT=None
ENGINE_AJP_ENABLED=false
ENGINE_AJP_PORT=None
ENGINE_HTTP_ENABLED=true
ENGINE_HTTPS_ENABLED=false
ENGINE_HTTP_PORT=8080
ENGINE_HTTPS_PORT=8443

I know install ovirt-engine from source in a developer setup， this can visit 
engine by http.  and  not apache  in the frontend.  but I want to visit engine 
that is installed rpm by http？

Besides I realize apache not redirect http to https  ovirt  jboss redirect http 
to https？ 



Regards
Hongyu Du
 
From: Greg Sheremeta
Date: 2019-02-14 19:24
To: du_hon...@yeah.net
CC: Ravi Nori; users
Subject: Re: Re: [ovirt-users] access engine by http
Sorry, I'm still not understanding what you are trying to achieve. Nothing is 
on 8843 - ?

If you install ovirt-engine from source in a developer setup, it's 8080 http by 
default and no apache in front. Maybe try that.

Greg

On Thu, Feb 14, 2019 at 12:14 AM du_hon...@yeah.net  wrote:
hi Greg, Ravi
thanks， https is ok，when I try to visit http://ip:8080/ovirt-engine but still 
rediect https://192.168.122.176:8443/tchyp-engine/,  I want to know How to 
redirect to 8843? 
Besides I try to disable ssl by comment /etc/httpd/conf/httpd.conf   
#IncludeOptional conf.d/*.conf,
But http is still redirect to https,  I should how disable redirect?
I find  this file  
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, I try to 
delete follow line. but ovirt-engine server is not boot

/var/log/ovirt-engine/boot.log has some error?
13:12:43,144 INFO  [org.jboss.as] WFLYSRV0049: WildFly Full 11.0.0.Final 
(WildFly Core 3.0.8.Final) starting
13:12:44,644 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/core-service=management/management-interface=native-interface' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,646 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/core-service=management/management-interface=http-interface' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/subsystem=undertow/server=default-server/https-listener=https' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'enabled-protocols' in the resource at address 
'/subsystem=undertow/server=default-server/https-listener=https' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
restapi.war in deployment directory. To trigger deployment create a file called 
restapi.war.dodeploy
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
engine.ear in deployment directory. To trigger deployment create a file called 
engine.ear.dodeploy
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
ovirt-web-ui.war in deployment directory. To trigger deployment create a file 
called ovirt-web-ui.war.dodeploy
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
apidoc.war in deployment directory. To trigger deployment create a file called 
apidoc.war.dodeploy
13:12:44,895 ERROR [org.jboss.as.controller] WFLYCTL0362: Capabilities required 
by resource '/subsystem=undertow/server=default-server/http-listener=http' are 
not available:
org.wildfly.network.socket-binding.redirect; Possible registration points 
for this capability:
/socket-binding-group=*/socket-binding=*
13:12:44,900 FATAL [org.jboss.as.server] WFLYSRV0056: Server boot has failed in 
an unrecoverable manner; exiting. See previous messages for details.
13:12:44,920 INFO  [org.jboss.as] WFLYSRV0050: WildFly Full 11.0.0.Final 
(WildFly Core 3.0.8.Final) stopped in 13ms




Regards
Hongyu Du
 
From: Greg Sheremeta
Date: 2019-02-14 04:08
To: du_hon...@yeah.net; Ravi Nori
CC: users
Subject: Re: [ovirt-users] access engine by http
What are you trying to achieve? SSL is good :)

I suspect you have to disable ssl in the apache server
/etc/httpd/conf.d/ssl.conf
but I'm not really sure.

And, if you do, I suspect some things that use certificates won't work

[ovirt-users] Re: possibly corrupted disk during 4.3 upgrade

[Sandro Bonazzola]

Il giorno ven 8 feb 2019 alle ore 01:03 Jason Brooks 
ha scritto:

> I have a ovirt+gluster cluster that I've been running for a while now
> -- across several versions of oVirt. I was upgrading to 4.3 today, and
> am halfway through the upgrade. I've upgraded two of my four hosts to
> 4.3, as well as the engine, but the hosted-ha agents aren't running on
> my new hosts.
>
> Also, one of my two upgraded hosts won't connect to one of my domains
> -- I'm not sure whether that's the master data domain or the hosted
> engine domain.
>
> The *main* thing I'm concerned about, though, is that the disk for one
> of my large VMs appears to have been truncated -- it's virtual size is
> 300GB, I think the actual size was probably just under half of that,
> but it's actual size is now reported to be less than a gig, and it's
> taking up only 300MB of space. I'm afraid the answer is no, but I'm
> hoping that the data might be recoverable from somewhere on the
> bricks...
>
> Any thoughts?
>

Can you please open a bug to track this?
If you open one, please add it to the tracker:
https://bugzilla.redhat.com/show_bug.cgi?id=1677319


>
> Jason
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6XO2TGSMOCQHPWZPGO6XQJZHXYRQNMH6/
>


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CPFS556J64MYF4M345TGKB7E7CGZOIEY/

[ovirt-users] Re: glusterevents daemon fails after upgrade from 4.2.8 to 4.3

[Sandro Bonazzola]

Il giorno lun 11 feb 2019 alle ore 08:11 Sahina Bose  ha
scritto:

> On Fri, Feb 8, 2019 at 11:31 AM Aravinda  wrote:
> >
> > Looks like Python 3 porting issue. I will work on the fix soon. Thanks
>
> Do we have a bug in gluster to track this?
>

Please add it to the tracker:
https://bugzilla.redhat.com/show_bug.cgi?id=1677319



>
> >
> >
> > On Thu, 2019-02-07 at 13:27 +0530, Sahina Bose wrote:
> > > +Aravinda Vishwanathapura Krishna Murthy can you take a look? oVirt
> > > 4.3 has Gluster 5
> > >
> > > On Wed, Feb 6, 2019 at 7:35 PM Edward Berger 
> > > wrote:
> > > > I upgraded some nodes from 4.28 to 4.3 and now when I look at the
> > > > cockpit "services"
> > > > tab I see a red failure for Gluster Events Notifier and clicking
> > > > through I get these messages below.
> > > >
> > > > 14:00
> > > > glustereventsd.service failed.
> > > > systemd
> > > > 14:00
> > > > Unit glustereventsd.service entered failed state.
> > > > systemd
> > > > 14:00
> > > > glustereventsd.service: main process exited, code=exited,
> > > > status=1/FAILURE
> > > > systemd
> > > > 14:00
> > > > ValueError: Attempted relative import in non-package
> > > > glustereventsd
> > > > 14:00
> > > > from .eventsapiconf import (LOG_FILE,
> > > > glustereventsd
> > > > 14:00
> > > > File "/usr/libexec/glusterfs/events/utils.py", line 29, in 
> > > > glustereventsd
> > > > 14:00
> > > > import utils
> > > > glustereventsd
> > > > 14:00
> > > > File "/usr/libexec/glusterfs/events/handlers.py", line 12, in
> > > > 
> > > > glustereventsd
> > > > 14:00
> > > > import handlers
> > > > glustereventsd
> > > > 14:00
> > > > File "/usr/sbin/glustereventsd", line 24, in 
> > > > glustereventsd
> > > > ___
> > > > Users mailing list -- users@ovirt.org
> > > > To unsubscribe send an email to users-le...@ovirt.org
> > > > Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> > > > oVirt Code of Conduct:
> > > > https://www.ovirt.org/community/about/community-guidelines/
> > > > List Archives:
> > > >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/K6N5EWVRPYRAXBUON2XNJVT5OH42PDEN/
> > --
> > regards
> > Aravinda
> >
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/6EKAE54IAMA5ZF36Q2PD7GXNYIEQUD7R/
>


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PWQD7GRIOMSRSQZ354X7POEE2JUJ5QHX/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Jayme]

https://bugzilla.redhat.com/show_bug.cgi?id=1677160 doesn't seem relevant
to me?  Is that the correct link?

Like I mentioned in a previous email I'm also having problems with Gluster
bricks going offline since upgrading to oVirt 4.3 yesterday (previously
I've never had a single issue with gluster nor have had a brick ever go
down).  I suspect this will continue to happen daily as some other users on
this group have suggested.  I was able to pull some logs from engine and
gluster from around the time the brick dropped.  My setup is 3 node HCI and
I was previously running the latest 4.2 updates (before upgrading to 4.3).
My hardware is has a lot of overhead and I'm on 10Gbe gluster backend (the
servers were certainly not under any significant amount of load when the
brick went offline).  To recover I had to place the host in maintenance
mode and reboot (although I suspect I could have simply unmounted and
remounted gluster mounts).

grep "2019-02-14" engine.log-20190214 | grep "GLUSTER_BRICK_STATUS_CHANGED"
2019-02-14 02:41:48,018-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler1) [5ff5b093] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/non_prod_b/non_prod_b of volume
non_prod_b of cluster Default from UP to DOWN via cli.
2019-02-14 03:20:11,189-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/engine/engine of volume engine of
cluster Default from DOWN to UP via cli.
2019-02-14 03:20:14,819-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/prod_b/prod_b of volume prod_b of
cluster Default from DOWN to UP via cli.
2019-02-14 03:20:19,692-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/isos/isos of volume isos of
cluster Default from DOWN to UP via cli.
2019-02-14 03:20:25,022-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/prod_a/prod_a of volume prod_a of
cluster Default from DOWN to UP via cli.
2019-02-14 03:20:29,088-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/non_prod_b/non_prod_b of volume
non_prod_b of cluster Default from DOWN to UP via cli.
2019-02-14 03:20:34,099-04 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler3) [760f7851] EVENT_ID:
GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
host2.replaced.domain.com:/gluster_bricks/non_prod_a/non_prod_a of volume
non_prod_a of cluster Default from DOWN to UP via cli

glusterd.log

# grep -B20 -A20 "2019-02-14 02:41" glusterd.log
[2019-02-14 02:36:49.585034] I [MSGID: 106499]
[glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
Received status volume req for volume non_prod_b
[2019-02-14 02:36:49.597788] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
The message "E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler" repeated 2 times between [2019-02-14 02:36:49.597788] and
[2019-02-14 02:36:49.900505]
[2019-02-14 02:36:53.437539] I [MSGID: 106499]
[glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
Received status volume req for volume non_prod_a
[2019-02-14 02:36:53.452816] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
[2019-02-14 02:36:53.864153] I [MSGID: 106499]
[glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
Received status volume req for volume non_prod_a
[2019-02-14 02:36:53.875835] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
[2019-02-14 02:36:30.958649] I [MSGID: 106499]
[glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
Received status volume req for volume engine
[2019-02-14 02:36:35.322129] I [MSGID: 106499]
[glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
Received status volume req for volume prod_b
[2019-02-14

[ovirt-users] Re: admin user locked out (OVN invalid_grant)

[Андрей Русаков]

ManageIQ  ...
I would like to use it, But i am getting "Unable to obtain a collection:
'security_groups' in a service: 'neutron' through API. Please, fix your
OpenStack ins... "  All the time. (On Network --> Providers --> 
Network Manager page )



чт, 14 февр. 2019 г. в 16:24, Dominik Holler :

> On Thu, 14 Feb 2019 15:28:52 +0300
> Андрей Русаков  wrote:
>
> > Hi
> >
> > I was able to fix the problem.
> > I am not 100% sure, but seems like restart ovirt-provider-ovn didn't
> apply
> > changes.
> >
> > So, what i did.
> > I perform secret Update, and restart services, and no changes.
> > Then i change debug, but log file didn't appear, so i perform
> stop/start...
> > And from this moment of time everything is working fine.
> >
>
> Thanks for letting me know!
>
> > Should i enable "Automatic Synchronization" that you mention on first
> > message?
> >
>
> If you are adding or deleting networks on the ovirt-provider-ovn, e.g.
> by ManageIQ or ansible, "Automatic Synchronization" would provide you
> the comfort of keeping the representation of of ovn network in oVirt
> updated.
> If you are not accessing the ovirt-provider-ovn directly, it will add
> no value.
>
> > Andrey
> >
> > вт, 12 февр. 2019 г. в 22:39, Dominik Holler :
> >
> > > On Tue, 12 Feb 2019 21:06:24 +0300
> > > Андрей Русаков  wrote:
> > >
> > > > Hi Dominik,
> > > > Thank you for your reply.
> > > >
> > > > Automatic Synchronization  is Disabled already.
> > > >
> > > > yes,
> > > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > > is in place.
> > > > I  google a bit (before starting new thread) and find similar problem
> > > (the
> > > > case was in wrong/missing ovirt-sso-client-secret), and i try to
> update
> > > > ovirt-sso-client-secret.
> > >
> > > How did you update the secret?
> > > The procedure would be
> > > 1. Run /usr/share/ovirt-engine/bin/ovirt-register-sso-client-tool.sh
> > >with
> > >Client Id: ovirt-provider-ovn
> > >Client CA Certificate File Location:
> > > /etc/pki/ovirt-engine/certs/engine.cer
> > >Callback Prefix URL: https://:443/ovirt-engine/
> > > 2. Use the SSO_CLIENT_SECRET from the outfile produced by the previous
> > >command in
> > >/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > 3. Restart ovirt-engine and ovirt-provider-ovn
> > >systemctl restart ovirt-engine
> > >systemctl restart ovirt-provider-ovn
> > >
> > >
> > > If this does not solve the problem and you want to use the
> > > ovirt-provider-ovn, please increase logging in ovirt-provider-ovn via
> > > sudo sed -i.$(date +%F-%H-%M) 's/INFO/DEBUG/gi'
> > > /etc/ovirt-provider-ovn/logger.conf
> > > systemctl restart ovirt-provider-ovn
> > >
> > > and share the ovirt-provider-ovn.log with the error after the restart.
> > >
> > >
> > > > But it didn't help
> > > >
> > > > Andrey.
> > > >
> > > > вт, 12 февр. 2019 г. в 20:04, Dominik Holler :
> > > >
> > > > > On Tue, 12 Feb 2019 16:50:06 -
> > > > > Andrey  Rusakov  wrote:
> > > > >
> > > > > > Hi,
> > > > > >
> > > > > > Recently i upgrade my oVirt installation 4.2.8 to 4.3.
> > > > > > I was able to login right after upgrade (yum, setup, reboot).
> > > > > > But according to logs, account locks in 2-3 minutes.
> > > > > >
> > > > > > 2019-02-12 15:44:57,228+03 ERROR
> > > > > [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) []
> > > > > OAuthException invalid_grant: The provided authorization grant for
> the
> > > auth
> > > > > code has expired.
> > > > > > 2019-02-12 15:44:57,232+03 ERROR
> > > > > [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default
> > > task-2)
> > > > > [] Cannot authenticate using authentication Headers:
> invalid_grant: The
> > > > > provided authorization grant for the auth code has expired.
> > > > > > 2019-02-12 15:44:57,307+03 INFO
> > > > > [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
> > > task-2)
> > > > > [] locking user: admin due to interval failures
> > > > > >
> > > > > > I was able to unlock admin using CLI, but every time i go to OVN
> > > config
> > > > > it locks immediately.
> > > > > >
> > > > > > Checking OVN service logs i can see
> > > > > >
> > > > > > code 401, message Unauthorized
> > > > > > "POST /v2.0/tokens HTTP/1.1" 401 -
> > > > > >
> > > > > > And
> > > > > > "Error during SSO authentication invalid_grant : The provided
> > > > > authorization grant for the auth code has expired."
> > > > > > On OVN web page.
> > > > > >
> > > > >
> > > > >
> > > > > For a timely fix, please disable automatic synchronization of the
> > > > > ovirt-provider-ovn via web UI Administration -> Providers ->
> > > > > ovirt-provider-ovn -> Edit -> Disable Automatic Synchronization
> > > > >
> > > > > Is there a file
> > > > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > > > ?
> > > > >
> > > > > > Is it possible to  renew authorization grant or ...?
> > > > > >
> > > > > > ___

[ovirt-users] Re: Vnic-Port mirroring

[ada per]

No it is not. I think  it is shown in the first screenshot that is logical

On Thu, 14 Feb 2019, 16:36 Staniforth, Paul, <
p.stanifo...@leedsbeckett.ac.uk> wrote:

> I don't know I assume it's not an external network?
> --
> *From:* ada per 
> *Sent:* 14 February 2019 14:24
> *To:* Staniforth, Paul
> *Cc:* Greg Sheremeta; users@ovirt.org
> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>
> No it is not used by any vms.
> We created a new vnic which is currently not assigned in any vm and still
> no options available.
>
> On Thu, 14 Feb 2019, 16:16 Staniforth, Paul, <
> p.stanifo...@leedsbeckett.ac.uk> wrote:
>
>> is the vNiC profile being used by any VMs , they need to be down to
>> enable port-mirroring
>> --
>> *From:* ada per 
>> *Sent:* 14 February 2019 14:08
>> *To:* Staniforth, Paul
>> *Cc:* Greg Sheremeta; users@ovirt.org
>> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>>
>> Thanks for your reply,
>>
>> I have 2 clusters one is with linux bridge and the other one is OVS.
>>
>> None seems to work.. I just retried the linux bridge cluster now and
>> still no luck.
>>
>> On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, <
>> p.stanifo...@leedsbeckett.ac.uk> wrote:
>>
>>> Is the cluster using linux bridge? OVS doesn't support Port Mirroring.
>>>
>>>
>>> Regards,
>>>
>>>  Paul S.
>>> --
>>> *From:* ada per 
>>> *Sent:* 14 February 2019 12:37
>>> *To:* Greg Sheremeta
>>> *Cc:* users
>>> *Subject:* [ovirt-users] Re: Vnic-Port mirroring
>>>
>>> The one below is  my logical network configuration
>>> [image: image.png]
>>> The following one is the grayed out VNIC Profiles options
>>>
>>> [image: image.png]
>>>
>>> On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
>>> wrote:
>>>
 Can you share a screenshot?

 On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:

> Hello everyone,
>
> I am trying to allow port mirroring through the Vnic profile but no
> matter what i do it stays grayed out. How can i enable this option?
>
> When i am creating a new VNIC profile the options ,port mirroring and
> passthrough are disabled.
>
> the version i am using is 4.2.8.
> Thanks!:)
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>


 --

 GREG SHEREMETA

 SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

 Red Hat NA

 

 gsher...@redhat.comIRC: gshereme
 

>>> To view the terms under which this email is distributed, please go to:-
>>> http://leedsbeckett.ac.uk/disclaimer/email/
>>>
>>> To view the terms under which this email is distributed, please go to:-
>> http://leedsbeckett.ac.uk/disclaimer/email/
>>
>> To view the terms under which this email is distributed, please go to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FDTK7XZZGAGZPIAU7JIR6VAAJUA5YLDU/

[ovirt-users] Re: Creating a static route

[Lev Veyde]

Hi Doug,

Sure, np.

>> 1. - yes it is the priority setting of the specific rule. Basically you
put in the file the post "ip rule add" part of the command e.g. for "ip
rule add to 172.22.20.31 priority 32764" you need to put a line of "to
172.22.20.31 priority 32764"

>> 2. - yes, the same priority can be used for all of them. E.g. if you
want to route 172.22.20.31, 172.22.34.56 and 172.22.67.89 you will need to
add:

to 172.22.20.31 priority 32764
to 172.22.34.56 priority 32764
to 172.22.67.89 priority 32764

into the rule- file e.g. rule-ovirtmgmt or rule-eno3.

Please note that you will also need to add the static route for each one of
these as well w/ "ip route add ... " command e.g. "ip route add
172.22.20.31 via 172.21.12.61".

You can also use the route- putting just the route info
part, similar to the "ip rule" e.g. for equivalent of "ip route add
172.22.20.31 via 172.21.12.61" you need put in the file a line with the
content "172.22.20.31 via 172.21.12.61".
For routes it's important to use specifically the route-ovirtmgmt file
since the script automatically adds the device to the route command i.e.
you can put the following lines into your route-ovirtmgmt file:

172.22.20.31 via 172.21.12.61
172.22.34.56 via 172.21.12.61
172.22.67.89 via 172.21.12.68

(In case the first 2 of the mentioned IPs should be routed through the
172.21.12.61 gateway, and the last one should be routed through the
172.21.12.68 gateway).

For the reference you can take a look at the
/etc/sysconfig/network-scripts/ifup-routes script.
It does the actual processing of both "route" and "rule" files for all
network interfaces on a system.

Please feel free to contact if you have further questions.

Thanks in advance,

On Thu, Feb 14, 2019 at 3:39 PM Doug Maxfield 
wrote:

> Lev,
>
> Thanks for the response.  I was just getting ready to contact you about
> this.  I do have 2 follow-up questions, if you don’t mind.
>
>
>
>1. When we were talking about creating the route that would be enabled
>again after a reboot, you said to modify “the
>/etc/sysconfig/network-scripts/rule- e.g. rule-ovirtmgmt or
>rule-eno3 (just put in the file "to 172.22.20.31 priority 32764”.  Is
>priority 32764 for the ip rule command?
>2. If I have multiple IPs that I would need to create a static route,
>would the priority be 32764 for all of them?
>
>
>
> Once again, thank you for all of your help with this!!
>
>
>
> [image: Count On EMC] 
>
> *Doug Maxfield *| Senior Operating Systems Analyst
>
> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
> Tel: 515.345.4507 | Fax: 866.331.1522
> doug.l.maxfi...@emcins.com | www.emcins.com
>
>
>
>
>
> *From:* Lev Veyde 
> *Sent:* Thursday, February 14, 2019 3:19 AM
> *To:* Doug Maxfield 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Creating a static route
>
>
>
> Hi Doug,
>
> Sorry that it took a bit of time to get back to you.
> Managed to catch today somebody from the oVirt/RHV network team to discuss
> the issue.
>
> It seems that we don't currently support custom static routes on the
> hosts, so the workaround that I suggested is the way to do it.
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 11:12 PM Doug Maxfield 
> wrote:
>
> Will do.  Thanks again for all your help!!  Looking forward to a
> confirmation of the fix or a different solution.  Either way, I know I have
> a working fix.
>
>
>
> [image: Count On EMC] 
>
> *Doug Maxfield *| Senior Operating Systems Analyst
>
> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
> Tel: 515.345.4507 | Fax: 866.331.1522
> doug.l.maxfi...@emcins.com | www.emcins.com
>
>
>
>
>
> *From:* Lev Veyde 
> *Sent:* Tuesday, February 12, 2019 3:09 PM
> *To:* Doug Maxfield 
> *Cc:* users 
> *Subject:* Re: [ovirt-users] Creating a static route
>
>
>
> Hi Doug,
>
> Just a small note - the commands in the rc.local should be placed *before*
> the very last line (the touch ... command).
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 10:56 PM Lev Veyde  wrote:
>
> Hi Doug,
>
> Thanks, you're welcome!
>
> It's generally possible to add persistent rules by either using the legacy
> /etc/rc.d/rc.local boot script (chmod +x /etc/rc.d/rc.local and put the
> relevant commands at the end of the file, that way you can actually run any
> commands) or by using the /etc/sysconfig/network-scripts/rule- name> e.g. rule-ovirtmgmt or rule-eno3 (just put in the file "to
> 172.22.20.31 priority 32764" - without quotes), however of course this
> needs to be tested to verify that it works.
>
> I forwarded the issue to the network team and hopefully they will update
> soon.
>
>
>
> Thanks in advance,
>
>
>
> On Tue, Feb 12, 2019 at 10:17 PM Doug Maxfield 
> wrote:
>
> Lev,
>
> You have no idea how helpful you have been!!  I’ve been having this
> issue for over 2 months and starting to cause major problems.
>
>
>
> Please let me know if you find a better solution.  I’m going to wait

[ovirt-users] Re: Creating a static route

[Lev Veyde]

Hi Doug,

Just one more thing that I forgot to mention, even though it may be obvious
- you can use subnets in both rules and routes.
So if all the IPs you want to route sit in the same subnet then you can
contain them with a single command e.g. "to 172.22.20.0/24 priority 32764"

Thanks in advance,

On Thu, Feb 14, 2019 at 4:59 PM Lev Veyde  wrote:

> Hi Doug,
>
> Sure, np.
>
> >> 1. - yes it is the priority setting of the specific rule. Basically you
> put in the file the post "ip rule add" part of the command e.g. for "ip
> rule add to 172.22.20.31 priority 32764" you need to put a line of "to
> 172.22.20.31 priority 32764"
>
> >> 2. - yes, the same priority can be used for all of them. E.g. if you
> want to route 172.22.20.31, 172.22.34.56 and 172.22.67.89 you will need to
> add:
>
> to 172.22.20.31 priority 32764
> to 172.22.34.56 priority 32764
> to 172.22.67.89 priority 32764
>
> into the rule- file e.g. rule-ovirtmgmt or rule-eno3.
>
> Please note that you will also need to add the static route for each one
> of these as well w/ "ip route add ... " command e.g. "ip route add
> 172.22.20.31 via 172.21.12.61".
>
> You can also use the route- putting just the route info
> part, similar to the "ip rule" e.g. for equivalent of "ip route add
> 172.22.20.31 via 172.21.12.61" you need put in the file a line with the
> content "172.22.20.31 via 172.21.12.61".
> For routes it's important to use specifically the route-ovirtmgmt file
> since the script automatically adds the device to the route command i.e.
> you can put the following lines into your route-ovirtmgmt file:
>
> 172.22.20.31 via 172.21.12.61
> 172.22.34.56 via 172.21.12.61
> 172.22.67.89 via 172.21.12.68
>
> (In case the first 2 of the mentioned IPs should be routed through the
> 172.21.12.61 gateway, and the last one should be routed through the
> 172.21.12.68 gateway).
>
> For the reference you can take a look at the
> /etc/sysconfig/network-scripts/ifup-routes script.
> It does the actual processing of both "route" and "rule" files for all
> network interfaces on a system.
>
> Please feel free to contact if you have further questions.
>
> Thanks in advance,
>
> On Thu, Feb 14, 2019 at 3:39 PM Doug Maxfield 
> wrote:
>
>> Lev,
>>
>> Thanks for the response.  I was just getting ready to contact you about
>> this.  I do have 2 follow-up questions, if you don’t mind.
>>
>>
>>
>>1. When we were talking about creating the route that would be
>>enabled again after a reboot, you said to modify “the
>>/etc/sysconfig/network-scripts/rule- e.g. rule-ovirtmgmt 
>> or
>>rule-eno3 (just put in the file "to 172.22.20.31 priority 32764”.  Is
>>priority 32764 for the ip rule command?
>>2. If I have multiple IPs that I would need to create a static route,
>>would the priority be 32764 for all of them?
>>
>>
>>
>> Once again, thank you for all of your help with this!!
>>
>>
>>
>> [image: Count On EMC] 
>>
>> *Doug Maxfield *| Senior Operating Systems Analyst
>>
>> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
>> Tel: 515.345.4507 | Fax: 866.331.1522
>> doug.l.maxfi...@emcins.com | www.emcins.com
>>
>>
>>
>>
>>
>> *From:* Lev Veyde 
>> *Sent:* Thursday, February 14, 2019 3:19 AM
>> *To:* Doug Maxfield 
>> *Cc:* users 
>> *Subject:* Re: [ovirt-users] Creating a static route
>>
>>
>>
>> Hi Doug,
>>
>> Sorry that it took a bit of time to get back to you.
>> Managed to catch today somebody from the oVirt/RHV network team to
>> discuss the issue.
>>
>> It seems that we don't currently support custom static routes on the
>> hosts, so the workaround that I suggested is the way to do it.
>>
>> Thanks in advance,
>>
>>
>>
>> On Tue, Feb 12, 2019 at 11:12 PM Doug Maxfield <
>> doug.l.maxfi...@emcins.com> wrote:
>>
>> Will do.  Thanks again for all your help!!  Looking forward to a
>> confirmation of the fix or a different solution.  Either way, I know I have
>> a working fix.
>>
>>
>>
>> [image: Count On EMC] 
>>
>> *Doug Maxfield *| Senior Operating Systems Analyst
>>
>> *EMC Insurance Companies *717 Mulberry St | Des Moines, IA 50265
>> Tel: 515.345.4507 | Fax: 866.331.1522
>> doug.l.maxfi...@emcins.com | www.emcins.com
>>
>>
>>
>>
>>
>> *From:* Lev Veyde 
>> *Sent:* Tuesday, February 12, 2019 3:09 PM
>> *To:* Doug Maxfield 
>> *Cc:* users 
>> *Subject:* Re: [ovirt-users] Creating a static route
>>
>>
>>
>> Hi Doug,
>>
>> Just a small note - the commands in the rc.local should be placed
>> *before* the very last line (the touch ... command).
>>
>> Thanks in advance,
>>
>>
>>
>> On Tue, Feb 12, 2019 at 10:56 PM Lev Veyde  wrote:
>>
>> Hi Doug,
>>
>> Thanks, you're welcome!
>>
>> It's generally possible to add persistent rules by either using the
>> legacy /etc/rc.d/rc.local boot script (chmod +x /etc/rc.d/rc.local and put
>> the relevant commands at the end of the file, that way you can actually run
>> any commands) or by using the
>> /etc/sysconfig/network-scripts/rule- e.g. ru

[ovirt-users] Re: access engine by http

[Ravi Shankar Nori]

Apache uses ajp to communicate with engine on port 8702. You can redirect
from Apache with a simple RewriteCond
to jboss port 8543 but certificate verification is not going to work which
will cause issues with all oVirt tools.

More over oVirt SSO is not going to let you access UI on port other than
443 when installed through rpms.
You will need to fiddle with the database to update the redirect uris in
the sso_clients table.

The best you can do is change the proxy port in
/etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf and keep the AJP in
place.

Why are you trying to by pass Apache?

On Thu, Feb 14, 2019 at 9:25 AM du_hon...@yeah.net 
wrote:

> sorry I describe errror，
>  my /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf
>
> ENGINE_FQDN=localhost.localdomain
> ENGINE_PROXY_ENABLED=false
> ENGINE_PROXY_HTTP_PORT=None
> ENGINE_PROXY_HTTPS_PORT=None
> ENGINE_AJP_ENABLED=false
> ENGINE_AJP_PORT=None
> ENGINE_HTTP_ENABLED=true
> ENGINE_HTTPS_ENABLED=false
> ENGINE_HTTP_PORT=8080
> ENGINE_HTTPS_PORT=8443
>
> I know install ovirt-engine from source in a developer setup， this can
> visit engine by http.  and  not apache  in the frontend.  but I want to
> visit engine that is installed rpm by http？
>
> Besides I realize apache not redirect http to https  ovirt  jboss redirect
> http to https？
>
> --
>
> Regards
>
> Hongyu Du
>
>
> *From:* Greg Sheremeta 
> *Date:* 2019-02-14 19:24
> *To:* du_hon...@yeah.net
> *CC:* Ravi Nori ; users 
> *Subject:* Re: Re: [ovirt-users] access engine by http
> Sorry, I'm still not understanding what you are trying to achieve. Nothing
> is on 8843 - ?
>
> If you install ovirt-engine from source in a developer setup, it's 8080
> http by default and no apache in front. Maybe try that.
>
> Greg
>
> On Thu, Feb 14, 2019 at 12:14 AM du_hon...@yeah.net 
> wrote:
>
>> hi Greg, Ravi
>> thanks， https is ok，when I try to visit http://ip:8080/ovirt-engine but
>> still rediect https://192.168.122.176:8443/tchyp-engine/,  I want to
>> know How to redirect to 8843?
>> Besides I try to disable ssl by comment /etc/httpd/conf/httpd.conf
>> #IncludeOptional conf.d/*.conf,
>> But http is still redirect to https,  I should how disable redirect?
>> I find  this file  /usr/share/ovirt-engine/services/ovirt-engine/
>> ovirt-engine.xml.in, I try to delete follow line. but ovirt-engine
>> server is not boot
>> > name="redirect"
>> port="{{ HTTPS_PORT }}"/>
>> /var/log/ovirt-engine/boot.log has some error?
>> 13:12:43,144 INFO  [org.jboss.as] WFLYSRV0049: WildFly Full 11.0.0.Final
>> (WildFly Core 3.0.8.Final) starting
>> 13:12:44,644 INFO  [org.jboss.as.controller.management-deprecated]
>> WFLYCTL0028: Attribute 'security-realm' in the resource at address
>> '/core-service=management/management-interface=native-interface' is
>> deprecated, and may be removed in future version. See the attribute
>> description in the output of the read-resource-description operation to
>> learn more about the deprecation.
>> 13:12:44,646 INFO  [org.jboss.as.controller.management-deprecated]
>> WFLYCTL0028: Attribute 'security-realm' in the resource at address
>> '/core-service=management/management-interface=http-interface' is
>> deprecated, and may be removed in future version. See the attribute
>> description in the output of the read-resource-description operation to
>> learn more about the deprecation.
>> 13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated]
>> WFLYCTL0028: Attribute 'security-realm' in the resource at address
>> '/subsystem=undertow/server=default-server/https-listener=https' is
>> deprecated, and may be removed in future version. See the attribute
>> description in the output of the read-resource-description operation to
>> learn more about the deprecation.
>> 13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated]
>> WFLYCTL0028: Attribute 'enabled-protocols' in the resource at address
>> '/subsystem=undertow/server=default-server/https-listener=https' is
>> deprecated, and may be removed in future version. See the attribute
>> description in the output of the read-resource-description operation to
>> learn more about the deprecation.
>> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
>> Found restapi.war in deployment directory. To trigger deployment create a
>> file called restapi.war.dodeploy
>> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
>> Found engine.ear in deployment directory. To trigger deployment create a
>> file called engine.ear.dodeploy
>> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
>> Found ovirt-web-ui.war in deployment directory. To trigger deployment
>> create a file called ovirt-web-ui.war.dodeploy
>> 13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004:
>> Found apidoc.war in deployment directory. To trigger deployment create a
>> file called apidoc.war.dodeploy
>> 13:12:44,895 ERROR [org.jboss.as

[ovirt-users] Re: access engine by http

[du_hon...@yeah.net]

thanks Ravi， because  my engine certification is signed by myself, when I visit 
my ovirt-engine by browser,  browser need add security exception, so I want to 
engine by http.

I realise /etc/httpd/conf.d/z-ovirt-engine-proxy.conf redirect /ovirt-engine to 
127.0.0.1:8702  , but I do not know how to  redirect https , I do not find some 
redirect https info.

I fix "ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5"   to 
"ProxyPassMatch ajp://127.0.0.1:8543 timeout=3600 retry=5"?



Regards
Hongyu Du
 
From: Ravi Shankar Nori
Date: 2019-02-14 23:16
To: du_hon...@yeah.net
CC: Greg Sheremeta; users
Subject: Re: Re: [ovirt-users] access engine by http
Apache uses ajp to communicate with engine on port 8702. You can redirect from 
Apache with a simple RewriteCond 
to jboss port 8543 but certificate verification is not going to work which will 
cause issues with all oVirt tools.

More over oVirt SSO is not going to let you access UI on port other than 443 
when installed through rpms. 
You will need to fiddle with the database to update the redirect uris in the 
sso_clients table.

The best you can do is change the proxy port in 
/etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf and keep the AJP in 
place.

Why are you trying to by pass Apache?

On Thu, Feb 14, 2019 at 9:25 AM du_hon...@yeah.net  wrote:
sorry I describe errror，
 my /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf 

ENGINE_FQDN=localhost.localdomain
ENGINE_PROXY_ENABLED=false
ENGINE_PROXY_HTTP_PORT=None
ENGINE_PROXY_HTTPS_PORT=None
ENGINE_AJP_ENABLED=false
ENGINE_AJP_PORT=None
ENGINE_HTTP_ENABLED=true
ENGINE_HTTPS_ENABLED=false
ENGINE_HTTP_PORT=8080
ENGINE_HTTPS_PORT=8443

I know install ovirt-engine from source in a developer setup， this can visit 
engine by http.  and  not apache  in the frontend.  but I want to visit engine 
that is installed rpm by http？

Besides I realize apache not redirect http to https  ovirt  jboss redirect http 
to https？ 



Regards
Hongyu Du
 
From: Greg Sheremeta
Date: 2019-02-14 19:24
To: du_hon...@yeah.net
CC: Ravi Nori; users
Subject: Re: Re: [ovirt-users] access engine by http
Sorry, I'm still not understanding what you are trying to achieve. Nothing is 
on 8843 - ?

If you install ovirt-engine from source in a developer setup, it's 8080 http by 
default and no apache in front. Maybe try that.

Greg

On Thu, Feb 14, 2019 at 12:14 AM du_hon...@yeah.net  wrote:
hi Greg, Ravi
thanks， https is ok，when I try to visit http://ip:8080/ovirt-engine but still 
rediect https://192.168.122.176:8443/tchyp-engine/,  I want to know How to 
redirect to 8843? 
Besides I try to disable ssl by comment /etc/httpd/conf/httpd.conf   
#IncludeOptional conf.d/*.conf,
But http is still redirect to https,  I should how disable redirect?
I find  this file  
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, I try to 
delete follow line. but ovirt-engine server is not boot

/var/log/ovirt-engine/boot.log has some error?
13:12:43,144 INFO  [org.jboss.as] WFLYSRV0049: WildFly Full 11.0.0.Final 
(WildFly Core 3.0.8.Final) starting
13:12:44,644 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/core-service=management/management-interface=native-interface' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,646 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/core-service=management/management-interface=http-interface' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'security-realm' in the resource at address 
'/subsystem=undertow/server=default-server/https-listener=https' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,677 INFO  [org.jboss.as.controller.management-deprecated] WFLYCTL0028: 
Attribute 'enabled-protocols' in the resource at address 
'/subsystem=undertow/server=default-server/https-listener=https' is deprecated, 
and may be removed in future version. See the attribute description in the 
output of the read-resource-description operation to learn more about the 
deprecation.
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
restapi.war in deployment directory. To trigger deployment create a file called 
restapi.war.dodeploy
13:12:44,840 INFO  [org.jboss.as.server.deployment.scanner] WFLYDS0004: Found 
engine.ear in deployment directory. To trigger deployment create a file called 
engine.ear.dodeploy
13:12:44,840 INFO  [org

[ovirt-users] Re: Ovirt Cluster completely unstable

[Sandro Bonazzola]

Il giorno gio 14 feb 2019 alle ore 16:12 Darryl Scott <
dsc...@umbctraining.com> ha scritto:

> Sandro
>
>
> I don't have ovirt-log-collector on my ovirt engine.  How can obtain?  I
> see a github repo to make file, I do not want to be making files on my
> ovirt-engine, just not yet, I could possible on weekend.
>

> Where can I obtain the ovirt-log-collector?
>
>
>
Just "yum install ovirt-log-collector" should install it for you :-)


>
> --
> *From:* Sandro Bonazzola 
> *Sent:* Thursday, February 14, 2019 9:16:05 AM
> *To:* Jayme
> *Cc:* Darryl Scott; users
> *Subject:* Re: [ovirt-users] Re: Ovirt Cluster completely unstable
>
>
>
> Il giorno gio 14 feb 2019 alle ore 07:54 Jayme  ha
> scritto:
>
> I have a three node HCI gluster which was previously running 4.2 with zero
> problems.  I just upgraded it yesterday.  I ran in to a few bugs right away
> with the upgrade process, but aside from that I also discovered other users
> with severe GlusterFS problems since the upgrade to new GlusterFS version.
> It is less than 24 hours since I upgrade my cluster and I just got a notice
> that one of my GlusterFS bricks is offline.  There does appear to be a very
> real and serious issue here with the latest updates.
>
>
> tracking the issue on Gluster side on this bug:
> https://bugzilla.redhat.com/show_bug.cgi?id=1677160
> If you can help Gluster community providing requested logs it would be
> great.
>
>
>
>
>
>
> On Wed, Feb 13, 2019 at 7:26 PM  wrote:
>
> I'm abandoning my production ovirt cluster due to instability.   I have a
> 7 host cluster running about 300 vms and have been for over a year.  It has
> become unstable over the past three days.  I have random hosts both,
> compute and storage disconnecting.  AND many vms disconnecting and becoming
> unusable.
>
> 7 host are 4 compute hosts running Ovirt 4.2.8 and three glusterfs hosts
> running 3.12.5.  I submitted a bugzilla bug and they immediately assigned
> it to the storage people but have not responded with any meaningful
> information.  I have submitted several logs.
>
> I have found some discussion on problems with instability with gluster
> 3.12.5.  I would be willing to upgrade my gluster to a more stable version
> if that's the culprit.  I installed gluster using the ovirt gui and this is
> the version the ovirt gui installed.
>
> Is there an ovirt health monitor available?  Where should I be looking to
> get a resolution the problems I'm facing.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BL4M3JQA3IEXCQUY4IGQXOAALRUQ7TVB/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/QULCBXHTKSCPKH4UV6GLMOLJE6J7M5UW/
>
>
>
> --
>
> SANDRO BONAZZOLA
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
>
> Red Hat EMEA 
>
> sbona...@redhat.com
> 
>


-- 

SANDRO BONAZZOLA

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA 

sbona...@redhat.com

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EEVEUNX7IKS6LM7TV45475GTKAY5R4J3/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Jayme]

Oliver,

Thanks for the input, I do recall reading that thread before, I'm 99.9%
sure it's not the problem here but I will double check, if anything to rule
it out.  These bricks are new enterprise SSDs that are less than 3 months
old with almost 0 wear on them and the issues I'm experiencing only started
within hours after upgrading my environment to oVirt 4.3 (and is the same
issue other users are complaining about regarding gluster bricks going
offline after upgrading to 4.3).  I think it's fairly clear that there is a
gluster problem in play.

On Thu, Feb 14, 2019 at 11:45 AM Oliver Riesener <
oliver.riese...@hs-bremen.de> wrote:

>
> Hi Jayme,
>
> btw. in the past there was  a long hunting for gluster problems on this
> list.
> as resolution, there was a failed single disk drive on one gluster host.
> the drive was direct connected without controller and smart checks,
> so no alert was generated, only gluster problems over days.
>
> please check you *physical* existents and online status of your gluster
> drives.
>
> my two cents
>
> Oliver
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LDFUIJFUZGAVVO4EVTSVXZGUCUAKSIDP/

[ovirt-users] Re: admin user locked out (OVN invalid_grant)

[Dominik Holler]

On Thu, 14 Feb 2019 17:40:18 +0300
Андрей Русаков  wrote:

> ManageIQ  ...
> I would like to use it, But i am getting "Unable to obtain a collection:
> 'security_groups' in a service: 'neutron' through API. Please, fix your
> OpenStack ins... "  All the time. (On Network --> Providers --> 
> Network Manager page )
> 

Sounds not good, would you please create a bug and let me know the bug
number?

> 
> 
> чт, 14 февр. 2019 г. в 16:24, Dominik Holler :
> 
> > On Thu, 14 Feb 2019 15:28:52 +0300
> > Андрей Русаков  wrote:
> >
> > > Hi
> > >
> > > I was able to fix the problem.
> > > I am not 100% sure, but seems like restart ovirt-provider-ovn didn't
> > apply
> > > changes.
> > >
> > > So, what i did.
> > > I perform secret Update, and restart services, and no changes.
> > > Then i change debug, but log file didn't appear, so i perform
> > stop/start...
> > > And from this moment of time everything is working fine.
> > >
> >
> > Thanks for letting me know!
> >
> > > Should i enable "Automatic Synchronization" that you mention on first
> > > message?
> > >
> >
> > If you are adding or deleting networks on the ovirt-provider-ovn, e.g.
> > by ManageIQ or ansible, "Automatic Synchronization" would provide you
> > the comfort of keeping the representation of of ovn network in oVirt
> > updated.
> > If you are not accessing the ovirt-provider-ovn directly, it will add
> > no value.
> >
> > > Andrey
> > >
> > > вт, 12 февр. 2019 г. в 22:39, Dominik Holler :
> > >
> > > > On Tue, 12 Feb 2019 21:06:24 +0300
> > > > Андрей Русаков  wrote:
> > > >
> > > > > Hi Dominik,
> > > > > Thank you for your reply.
> > > > >
> > > > > Automatic Synchronization  is Disabled already.
> > > > >
> > > > > yes,
> > > > > /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > > > is in place.
> > > > > I  google a bit (before starting new thread) and find similar problem
> > > > (the
> > > > > case was in wrong/missing ovirt-sso-client-secret), and i try to
> > update
> > > > > ovirt-sso-client-secret.
> > > >
> > > > How did you update the secret?
> > > > The procedure would be
> > > > 1. Run /usr/share/ovirt-engine/bin/ovirt-register-sso-client-tool.sh
> > > >with
> > > >Client Id: ovirt-provider-ovn
> > > >Client CA Certificate File Location:
> > > > /etc/pki/ovirt-engine/certs/engine.cer
> > > >Callback Prefix URL: https://:443/ovirt-engine/
> > > > 2. Use the SSO_CLIENT_SECRET from the outfile produced by the previous
> > > >command in
> > > >/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
> > > > 3. Restart ovirt-engine and ovirt-provider-ovn
> > > >systemctl restart ovirt-engine
> > > >systemctl restart ovirt-provider-ovn
> > > >
> > > >
> > > > If this does not solve the problem and you want to use the
> > > > ovirt-provider-ovn, please increase logging in ovirt-provider-ovn via
> > > > sudo sed -i.$(date +%F-%H-%M) 's/INFO/DEBUG/gi'
> > > > /etc/ovirt-provider-ovn/logger.conf
> > > > systemctl restart ovirt-provider-ovn
> > > >
> > > > and share the ovirt-provider-ovn.log with the error after the restart.
> > > >
> > > >
> > > > > But it didn't help
> > > > >
> > > > > Andrey.
> > > > >
> > > > > вт, 12 февр. 2019 г. в 20:04, Dominik Holler :
> > > > >
> > > > > > On Tue, 12 Feb 2019 16:50:06 -
> > > > > > Andrey  Rusakov  wrote:
> > > > > >
> > > > > > > Hi,
> > > > > > >
> > > > > > > Recently i upgrade my oVirt installation 4.2.8 to 4.3.
> > > > > > > I was able to login right after upgrade (yum, setup, reboot).
> > > > > > > But according to logs, account locks in 2-3 minutes.
> > > > > > >
> > > > > > > 2019-02-12 15:44:57,228+03 ERROR
> > > > > > [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) []
> > > > > > OAuthException invalid_grant: The provided authorization grant for
> > the
> > > > auth
> > > > > > code has expired.
> > > > > > > 2019-02-12 15:44:57,232+03 ERROR
> > > > > > [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default
> > > > task-2)
> > > > > > [] Cannot authenticate using authentication Headers:
> > invalid_grant: The
> > > > > > provided authorization grant for the auth code has expired.
> > > > > > > 2019-02-12 15:44:57,307+03 INFO
> > > > > > [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
> > > > task-2)
> > > > > > [] locking user: admin due to interval failures
> > > > > > >
> > > > > > > I was able to unlock admin using CLI, but every time i go to OVN
> > > > config
> > > > > > it locks immediately.
> > > > > > >
> > > > > > > Checking OVN service logs i can see
> > > > > > >
> > > > > > > code 401, message Unauthorized
> > > > > > > "POST /v2.0/tokens HTTP/1.1" 401 -
> > > > > > >
> > > > > > > And
> > > > > > > "Error during SSO authentication invalid_grant : The provided
> > > > > > authorization grant for the auth code has expired."
> > > > > > > On OVN web page.
> > > > > > >
> > > > > >
> > > > > >
> > > > > > For a timely fix, please disable automatic synchronization of the
> >

[ovirt-users] Re: Ovirt Cluster completely unstable

[Oliver Riesener]

Hi Jayme,

btw. in the past there was  a long hunting for gluster problems on this list.
as resolution, there was a failed single disk drive on one gluster host.
the drive was direct connected without controller and smart checks,
so no alert was generated, only gluster problems over days.

please check you *physical* existents and online status of your gluster drives.

my two cents

Oliver
 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CBZIZPNEJ5B2L4VSASAQ6LO7P3WODDHZ/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Sahina Bose]

On Thu, Feb 14, 2019 at 8:24 PM Jayme  wrote:

> https://bugzilla.redhat.com/show_bug.cgi?id=1677160 doesn't seem relevant
> to me?  Is that the correct link?
>
> Like I mentioned in a previous email I'm also having problems with Gluster
> bricks going offline since upgrading to oVirt 4.3 yesterday (previously
> I've never had a single issue with gluster nor have had a brick ever go
> down).  I suspect this will continue to happen daily as some other users on
> this group have suggested.  I was able to pull some logs from engine and
> gluster from around the time the brick dropped.  My setup is 3 node HCI and
> I was previously running the latest 4.2 updates (before upgrading to 4.3).
> My hardware is has a lot of overhead and I'm on 10Gbe gluster backend (the
> servers were certainly not under any significant amount of load when the
> brick went offline).  To recover I had to place the host in maintenance
> mode and reboot (although I suspect I could have simply unmounted and
> remounted gluster mounts).
>

Anything in the brick logs..the below logs only indicate that engine
detected that brick was down. To get to why the brick was marked down, the
bricks logs would help


> grep "2019-02-14" engine.log-20190214 | grep "GLUSTER_BRICK_STATUS_CHANGED"
> 2019-02-14 02:41:48,018-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler1) [5ff5b093] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/non_prod_b/non_prod_b of volume
> non_prod_b of cluster Default from UP to DOWN via cli.
> 2019-02-14 03:20:11,189-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/engine/engine of volume engine
> of cluster Default from DOWN to UP via cli.
> 2019-02-14 03:20:14,819-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/prod_b/prod_b of volume prod_b
> of cluster Default from DOWN to UP via cli.
> 2019-02-14 03:20:19,692-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/isos/isos of volume isos of
> cluster Default from DOWN to UP via cli.
> 2019-02-14 03:20:25,022-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/prod_a/prod_a of volume prod_a
> of cluster Default from DOWN to UP via cli.
> 2019-02-14 03:20:29,088-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/non_prod_b/non_prod_b of volume
> non_prod_b of cluster Default from DOWN to UP via cli.
> 2019-02-14 03:20:34,099-04 WARN
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
> host2.replaced.domain.com:/gluster_bricks/non_prod_a/non_prod_a of volume
> non_prod_a of cluster Default from DOWN to UP via cli
>
> glusterd.log
>
> # grep -B20 -A20 "2019-02-14 02:41" glusterd.log
> [2019-02-14 02:36:49.585034] I [MSGID: 106499]
> [glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
> Received status volume req for volume non_prod_b
> [2019-02-14 02:36:49.597788] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 2 times between [2019-02-14 02:36:49.597788] and
> [2019-02-14 02:36:49.900505]
> [2019-02-14 02:36:53.437539] I [MSGID: 106499]
> [glusterd-handler.c:4389:__glusterd_handle_status_volume] 0-management:
> Received status volume req for volume non_prod_a
> [2019-02-14 02:36:53.452816] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> [2019-02-14 02:36:53.864153]

[ovirt-users] stucked snapshot, locked disk

[Jiří Sléžka]

Hello,

we are using ovirt 4.2.8.2-1.el7.

One our user probably tried to preview taken snapshot but the task is
stucked and never finished. Also disk is locked.

Here is engine.log

https://pastebin.com/izBJ1BUg

I am not sure what went wrong except one java.lang.NullPointerException
error... Could it be some bug?

Also I would like to unlock disk and clean this task. I can see locked
snapshot and disk

[root@ovirt dbutils]# ./unlock_entity.sh -q -t snapshot -c

Locked snapshots

vm_id | snapshot_id

--+--
 df27ee13-9961-41d5-a4eb-bbb0aadf9086 | 58998020-08cb-4c84-8847-0cb6790724ba

[root@ovirt dbutils]# ./unlock_entity.sh -q -t disk -c

Locked disks

vm_id |   disk_id

--+--
 df27ee13-9961-41d5-a4eb-bbb0aadf9086 | f6405448-baf8-4cc2-8ee7-798ca11cad10

but no runnig tasks

[root@ovirt dbutils]# ./taskcleaner.sh -o
 t

but in ovirt-manager I see this stucked task...

Preview VM Snapshot predsysprep of VM install_10_64bit_LTSB_UK_ucebny -
Started: Feb 12, 2019, 11:28:04 AM
Validating - Completed: Feb 12, 2019, 11:28:04 AM
Executing - Completed: Feb 12, 2019, 11:28:15 AM
Creating Volume - Completed: Feb 12, 2019, 11:28:15 AM
Finalizing - Started: Feb 12, 2019, 11:28:15 AM

what is best approach to unlock and clean this?

Thanks in advance,

Cheers, Jiri



smime.p7s
Description: S/MIME Cryptographic Signature
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FVJTQ25MGI2PRAXJIEHSLEOL62VRPOT2/

[ovirt-users] Re: Vnic-Port mirroring

[Miguel Duarte de Mora Barroso]

On Thu, Feb 14, 2019 at 4:11 PM ada per  wrote:

> No it is not. I think  it is shown in the first screenshot that is logical
>

I think you've hit a bug on the frontend code.

Would you be kind enough to report it on [0], setting 'BLL.network' as the
component ? Please reply with the bug ID so we can track it.

As a workaround, I think you could try the REST interface - check [1] and
[2] - to update your vnic profile's port mirroring attribute.

[0] - https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt-engine
[1] -
http://ovirt.github.io/ovirt-engine-api-model/master/#services/vnic_profile/methods/update
[2] -
http://ovirt.github.io/ovirt-engine-api-model/master/#types/vnic_profile/attributes/port_mirroring


> On Thu, 14 Feb 2019, 16:36 Staniforth, Paul, <
> p.stanifo...@leedsbeckett.ac.uk> wrote:
>
>> I don't know I assume it's not an external network?
>> --
>> *From:* ada per 
>> *Sent:* 14 February 2019 14:24
>> *To:* Staniforth, Paul
>> *Cc:* Greg Sheremeta; users@ovirt.org
>> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>>
>> No it is not used by any vms.
>> We created a new vnic which is currently not assigned in any vm and still
>> no options available.
>>
>> On Thu, 14 Feb 2019, 16:16 Staniforth, Paul, <
>> p.stanifo...@leedsbeckett.ac.uk> wrote:
>>
>>> is the vNiC profile being used by any VMs , they need to be down to
>>> enable port-mirroring
>>> --
>>> *From:* ada per 
>>> *Sent:* 14 February 2019 14:08
>>> *To:* Staniforth, Paul
>>> *Cc:* Greg Sheremeta; users@ovirt.org
>>> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>>>
>>> Thanks for your reply,
>>>
>>> I have 2 clusters one is with linux bridge and the other one is OVS.
>>>
>>> None seems to work.. I just retried the linux bridge cluster now and
>>> still no luck.
>>>
>>> On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, <
>>> p.stanifo...@leedsbeckett.ac.uk> wrote:
>>>
 Is the cluster using linux bridge? OVS doesn't support Port Mirroring.


 Regards,

  Paul S.
 --
 *From:* ada per 
 *Sent:* 14 February 2019 12:37
 *To:* Greg Sheremeta
 *Cc:* users
 *Subject:* [ovirt-users] Re: Vnic-Port mirroring

 The one below is  my logical network configuration
 [image: image.png]
 The following one is the grayed out VNIC Profiles options

 [image: image.png]

 On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
 wrote:

> Can you share a screenshot?
>
> On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:
>
>> Hello everyone,
>>
>> I am trying to allow port mirroring through the Vnic profile but no
>> matter what i do it stays grayed out. How can i enable this option?
>>
>> When i am creating a new VNIC profile the options ,port mirroring and
>> passthrough are disabled.
>>
>> the version i am using is 4.2.8.
>> Thanks!:)
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>>
>
>
> --
>
> GREG SHEREMETA
>
> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>
> Red Hat NA
>
> 
>
> gsher...@redhat.comIRC: gshereme
> 
>
 To view the terms under which this email is distributed, please go to:-
 http://leedsbeckett.ac.uk/disclaimer/email/

 To view the terms under which this email is distributed, please go to:-
>>> http://leedsbeckett.ac.uk/disclaimer/email/
>>>
>>> To view the terms under which this email is distributed, please go to:-
>> http://leedsbeckett.ac.uk/disclaimer/email/
>>
>> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FDTK7XZZGAGZPIAU7JIR6VAAJUA5YLDU/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IKXIV7U26XIVXFYBMZAYIM3FOTUFWISN/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Jayme]

4 02:57:35.071899] and
[2019-02-14 02:59:29.398638]
[2019-02-14 02:59:33.501166] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
[2019-02-14 03:00:01.622537] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
The message "E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler" repeated 21104 times between [2019-02-14 02:59:33.501166] and
[2019-02-14 03:01:29.325701]
[2019-02-14 03:01:30.635130] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
The message "E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler" repeated 640 times between [2019-02-14 03:01:30.635130] and
[2019-02-14 03:03:29.020755]
[2019-02-14 03:03:31.238543] E [MSGID: 101191]
[event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
handler
[2019-02-14 03:04:00.722382] I [addr.c:54:compare_addr_and_update]
0-/gluster_bricks/non_prod_b/non_prod_b: allowed = "*", received addr =
"10.11.0.221"
[2019-02-14 03:04:00.722466] I [login.c:110:gf_auth] 0-auth/login: allowed
user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
[2019-02-14 03:04:00.722499] I [MSGID: 115029]
[server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
client from
CTX_ID:ca4e5703-7129-4242-9fbf-9b119de9e0eb-GRAPH_ID:0-PID:35692-HOST:host1.replaced.domain.comm-PC_NAME:non_prod_b-client-2-RECON_NO:-0
(version: 5.3)

On Thu, Feb 14, 2019 at 11:52 AM Sahina Bose  wrote:

>
>
> On Thu, Feb 14, 2019 at 8:24 PM Jayme  wrote:
>
>> https://bugzilla.redhat.com/show_bug.cgi?id=1677160 doesn't seem
>> relevant to me?  Is that the correct link?
>>
>> Like I mentioned in a previous email I'm also having problems with
>> Gluster bricks going offline since upgrading to oVirt 4.3 yesterday
>> (previously I've never had a single issue with gluster nor have had a brick
>> ever go down).  I suspect this will continue to happen daily as some other
>> users on this group have suggested.  I was able to pull some logs from
>> engine and gluster from around the time the brick dropped.  My setup is 3
>> node HCI and I was previously running the latest 4.2 updates (before
>> upgrading to 4.3).  My hardware is has a lot of overhead and I'm on 10Gbe
>> gluster backend (the servers were certainly not under any significant
>> amount of load when the brick went offline).  To recover I had to place the
>> host in maintenance mode and reboot (although I suspect I could have simply
>> unmounted and remounted gluster mounts).
>>
>
> Anything in the brick logs..the below logs only indicate that engine
> detected that brick was down. To get to why the brick was marked down, the
> bricks logs would help
>
>
>> grep "2019-02-14" engine.log-20190214 | grep
>> "GLUSTER_BRICK_STATUS_CHANGED"
>> 2019-02-14 02:41:48,018-04 WARN
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler1) [5ff5b093] EVENT_ID:
>> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
>> host2.replaced.domain.com:/gluster_bricks/non_prod_b/non_prod_b of
>> volume non_prod_b of cluster Default from UP to DOWN via cli.
>> 2019-02-14 03:20:11,189-04 WARN
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
>> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
>> host2.replaced.domain.com:/gluster_bricks/engine/engine of volume engine
>> of cluster Default from DOWN to UP via cli.
>> 2019-02-14 03:20:14,819-04 WARN
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
>> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
>> host2.replaced.domain.com:/gluster_bricks/prod_b/prod_b of volume prod_b
>> of cluster Default from DOWN to UP via cli.
>> 2019-02-14 03:20:19,692-04 WARN
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
>> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
>> host2.replaced.domain.com:/gluster_bricks/isos/isos of volume isos of
>> cluster Default from DOWN to UP via cli.
>> 2019-02-14 03:20:25,022-04 WARN
>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (DefaultQuartzScheduler3) [760f7851] EVENT_ID:
>> GLUSTER_BRICK_STATUS_CHANGED(4,086), Detected change in status of brick
>> host2.replaced.domain.com:/gluste

[ovirt-users] Re: Ovirt self-hosted engine won't come up

[joshuaosko]

I managed to connect briefly but the console said ok at the top and it didn't 
appear I had any control. I sent ctrl-alt-delete which apparently closed the 
session and this was the output I saw (with O and CN appropriately populated):

$ remote-viewer --debug --spice-ca-file="/tmp/ca-cert.pem" 
--spice-host-subject="O=, CN="  spice://?tls-port=5901
(remote-viewer:22260): remote-viewer-DEBUG: Opening display to 
spice://?tls-port=5901
(remote-viewer:22260): remote-viewer-DEBUG: Guest (null) has a spice display
(remote-viewer:22260): remote-viewer-DEBUG: After open connection callback fd=-1
(remote-viewer:22260): remote-viewer-DEBUG: Opening connection to display at 
spice://?tls-port=5901
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x28b2bd0 
SpiceMainChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0
(remote-viewer:22260): remote-viewer-DEBUG: main channel: auth failure (wrong 
username/password?)
(remote-viewer:22260): remote-viewer-DEBUG: main channel: auth failure (wrong 
username/password?)
(remote-viewer:22260): remote-viewer-DEBUG: main channel: opened
(remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0
(remote-viewer:22260): remote-viewer-DEBUG: virt_viewer_app_set_uuid_string: 
UUID changed to b048c0af-a6d6-42eb-9716-f1a00806e02d
(remote-viewer:22260): remote-viewer-DEBUG: app is not in full screen
(remote-viewer:22260): remote-viewer-DEBUG: app is not in full screen
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x27d9250 
SpiceRecordChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2a39390 
SpicePlaybackChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: new audio channel
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2684580 
SpiceCursorChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x2874290 
SpiceDisplayChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: New spice channel 0x285a240 
SpiceInputsChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: new inputs channel
(remote-viewer:22260): remote-viewer-DEBUG: creating spice display (#:0)
(remote-viewer:22260): remote-viewer-DEBUG: Insert display 0 0x27ea700
(remote-viewer:22260): remote-viewer-DEBUG: Found a window without a display, 
reusing for this display...
(remote-viewer:22260): remote-viewer-DEBUG: Zoom level not changed, using: 100
(remote-viewer:22260): remote-viewer-DEBUG: notebook show display 0x266a2a0

(remote-viewer:22260): GSpice-WARNING **: Warning no automount-inhibiting 
implementation available
(remote-viewer:22260): remote-viewer-DEBUG: Allocated 1024x768
(remote-viewer:22260): remote-viewer-DEBUG: Child allocate 1024x768
(remote-viewer:22260): remote-viewer-DEBUG: main channel: closed
(remote-viewer:22260): remote-viewer-DEBUG: Not removing main window 0 0x26678f0
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceInputsChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceDisplayChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: zap display channel (#0)
(remote-viewer:22260): remote-viewer-DEBUG: Destroying spice display 0x27ea700
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceCursorChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpicePlaybackChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: zap audio channel
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceRecordChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceMainChannel 0
(remote-viewer:22260): remote-viewer-DEBUG: zap main channel
(remote-viewer:22260): remote-viewer-DEBUG: notebook show status 0x266a2a0
(remote-viewer:22260): remote-viewer-DEBUG: Guest HostedEngine display has 
disconnected, shutting down
(remote-viewer:22260): remote-viewer-DEBUG: Disposing window 0x26678f0

(remote-viewer:22260): remote-viewer-DEBUG: Set connect info: 
(null),(null),(null),-1,(null),(null),(null),0


Now when I attempt to reconnect I see:
$ remote-viewer --debug --spice-ca-file="/tmp/ca-cert.pem" 
--spice-host-subject="O=, CN="  spice://?tls-port=5901
(remote-viewer:22497): remote-viewer-DEBUG: Opening display to 
spice://?tls-port=5901
(remote-viewer:22497): remote-viewer-DEBUG: Guest (null) has a spice display
(remote-viewer:22497): remote-viewer-DEBUG: After open connection callback fd=-1
(remote-viewer:22497): remote-viewer-DEBUG: Opening connection to display at 
spice://?tls-port=5901
(remote-viewer:22497): remote-viewer-DEBUG: New spice channel 0x9b1c40 
SpiceMainChannel 0
(remote-viewer:22497): remote-viewer-DEBUG: notebook show status 0x7662a0
(remote-viewer:22497): remote-viewer-DEBUG: main channel: failed to connect 
Could not connect to : Connection refused
(remote-viewer:22497): remote-viewer-DEBUG: Destroy SPICE channel 
SpiceMainChannel 0
(remote-viewer:22497): remote-viewer-DEBUG: zap main channel
(remote-viewer:22497): remote-viewer-DEBUG: Dispo

[ovirt-users] Re: Ovirt self-hosted engine won't come up

[joshuaosko]

It appears the engine is down entirely now and hosted-engine --vm-start doesn't 
appear to change anything.

Engine status  : {"reason": "bad vm status", "health": 
"bad", "vm": "down_unexpected", "detail": "Down"}
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2CADFURYFT5ULVQ6EYHNTYICSALACZ2V/

[ovirt-users] please help with console issues on vGPU enabled VMs.

[Edward Berger]

We are attempting to get vGPU-enabled guests working with our oVirt 4.3.0
configuration, but have run into problems.

We are running:
   NVidia License Server version 2018.09
   NVidia License Client Manager 2018.10.0.25098346
and that license info is correctly retrieved by the clients.

With a Centos 7.6 guest, we can ssh into the guest and see that the X
server is running and a gdm process is also running, but when we open a
remote console viewer, all we get is a black screen.  The X server reports
the correct vGPU profile.  The only error we see in the Xorg.0.log file is:
[ 5.176] (EE) NVIDIA(GPU-0): Failed to update the GLS device with FRL
configuration
but that is not fatal.

With a Windows 10 guest, we do get a login screen to appear, but the mouse
and keyboard do not seem to be functional.

Host configuration:
 host is running oVirt-node 4.3.0
 NVidia driver NVIDIA-vGPU-rhel-7.6-410.91.x86_64.rpm installed
CentOS 7.6 guest configuration:
 NVidia driver NVIDIA-Linux-x86_64-410.92-grid.run installed
 added an explicit BusID in the guest's xorg.conf file
 disabled SELinux
Windows 10 guest configuration:
NVidia driver 412.16_grid_win10_server2016_64bit_international.exe
installed
Remote viewer:
 remote-viewer 5.0-11.el7 running on CentOS 7.3

Both host and guest NVidia drivers come from the
NVIDIA-GRID-RHEL-7.6-410.92-410.91-412.16.zip package.  We have tried with
both V100 and P4 GPUs (with ECC disabled), and encounter similar problems.
Any ideas on what to try, or how to better diagnose the cause of these
problems?
Thanks.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RS2DHOWGM45K7AM5KKEJQIR3LDIT7BO5/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Donny Davis]

-4c68-4e15-b0e2-0197bc358ddd-GRAPH_ID:0-PID:885-HOST:host2.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 19 times between [2019-02-14 02:55:30.445077] and
> [2019-02-14 02:57:28.589205]
> [2019-02-14 02:57:35.071899] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> [2019-02-14 02:58:33.855724] I [addr.c:54:compare_addr_and_update]
> 0-/gluster_bricks/non_prod_b/non_prod_b: allowed = "*", received addr =
> "10.11.0.220"
> [2019-02-14 02:58:33.855805] I [login.c:110:gf_auth] 0-auth/login: allowed
> user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
> [2019-02-14 02:58:33.855838] I [MSGID: 115029]
> [server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
> client from
> CTX_ID:868382a8-7e38-481c-b5a3-80c1bdd21f28-GRAPH_ID:0-PID:4631-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> (version: 5.3)
> [2019-02-14 02:58:33.864814] I [MSGID: 115036]
> [server.c:469:server_rpc_notify] 0-non_prod_b-server: disconnecting
> connection from
> CTX_ID:868382a8-7e38-481c-b5a3-80c1bdd21f28-GRAPH_ID:0-PID:4631-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> [2019-02-14 02:58:33.865124] I [MSGID: 101055]
> [client_t.c:435:gf_client_unref] 0-non_prod_b-server: Shutting down
> connection
> CTX_ID:868382a8-7e38-481c-b5a3-80c1bdd21f28-GRAPH_ID:0-PID:4631-HOST:host0.replaced.domain.com-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 35 times between [2019-02-14 02:57:35.071899] and
> [2019-02-14 02:59:29.398638]
> [2019-02-14 02:59:33.501166] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> [2019-02-14 03:00:01.622537] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 21104 times between [2019-02-14 02:59:33.501166] and
> [2019-02-14 03:01:29.325701]
> [2019-02-14 03:01:30.635130] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> The message "E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler" repeated 640 times between [2019-02-14 03:01:30.635130] and
> [2019-02-14 03:03:29.020755]
> [2019-02-14 03:03:31.238543] E [MSGID: 101191]
> [event-epoll.c:671:event_dispatch_epoll_worker] 0-epoll: Failed to dispatch
> handler
> [2019-02-14 03:04:00.722382] I [addr.c:54:compare_addr_and_update]
> 0-/gluster_bricks/non_prod_b/non_prod_b: allowed = "*", received addr =
> "10.11.0.221"
> [2019-02-14 03:04:00.722466] I [login.c:110:gf_auth] 0-auth/login: allowed
> user names: 7b741fe4-72ca-41ba-8efb-7add1e4fe6f3
> [2019-02-14 03:04:00.722499] I [MSGID: 115029]
> [server-handshake.c:537:server_setvolume] 0-non_prod_b-server: accepted
> client from
> CTX_ID:ca4e5703-7129-4242-9fbf-9b119de9e0eb-GRAPH_ID:0-PID:35692-HOST:host1.replaced.domain.comm-PC_NAME:non_prod_b-client-2-RECON_NO:-0
> (version: 5.3)
>
> On Thu, Feb 14, 2019 at 11:52 AM Sahina Bose  wrote:
>
>>
>>
>> On Thu, Feb 14, 2019 at 8:24 PM Jayme  wrote:
>>
>>> https://bugzilla.redhat.com/show_bug.cgi?id=1677160 doesn't seem
>>> relevant to me?  Is that the correct link?
>>>
>>> Like I mentioned in a previous email I'm also having problems with
>>> Gluster bricks going offline since upgrading to oVirt 4.3 yesterday
>>> (previously I've never had a single issue with gluster nor have had a brick
>>> ever go down).  I suspect this will continue to happen daily as some other
>>> users on this group have suggested.  I was able to pull some logs from
>>> engine and gluster from around the time the brick dropped.  My setup is 3
>>> node HCI and I was previously running the latest 4.2 updates (before
>>> upgrading to 4.3).  My hardware is has a lot of overhead and I'm on 10Gbe
>>> gluster backend (the servers were certainly not under any significant
>>> amount of load when the brick went offline).  To recover I had to place the
>>> host in maintenance mode and reboot (although I suspect I could have simply
>>> unmounted and remounted gluster mounts).
>>>
>>
>> Anything in the brick logs..the below logs

[ovirt-users] Tracking down high writes in GlusterFS volume

[Jayme]

Running an oVirt 4.3 HCI 3-way replica cluster with SSD backed storage.
I've noticed that my SSD writes (smart Total_LBAs_Written) are quite high
on one particular drive.  Specifically I've noticed one volume is much much
higher total bytes written than others (despite using less overall space).
My volume is writing over 1TB of data per day (by my manual calculation,
and with glusterfs profiling) and wearing my SSDs quickly, how can I best
determine which VM or process is at fault here?

There are 5 low use VMs using the volume in question.  I'm attempting to
track iostats on each of the vm's individually but so far I'm not seeing
anything obvious that would account for 1TB of writes per day that the
gluster volume is reporting.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OZHZXQS4GUPPJXOZSBTO6X5ZL6CATFXK/

[ovirt-users] Re: update to 4.2.8 fails

[Vincent Royer]

Greg,

The first thing on the list in your link is to check what repos are enabled
with yum repolist, but makes no mention of what repos *should *be enabled
on node-ng, nor what to do about it if you have the wrong ones. I've never
had an Ovirt update go the way it was "supposed" to go, despite having a
bunch of documentation at hand.  Usually I end up blowing away the hosts
and starting with a fresh ISO.

The page you linked makes no mention of the command Edward mentioned that
got things working for me:

yum update ovirt-node-ng-image-update

All the instructions I can find just say to run yum update, but that
resulted in a bunch of dependency errors for me, on a normal 4.2.6 node
install that I haven't touched since installation.  Why?  If I'm following
the instructions, shouldn't it work?


running this command in the upgrade guide:

[image: image.png]

Gives me "This system is not registered with an entitlement server".   Is
that an outdated instruction?  Does it apply to the particular update I'm
trying to apply?   No way to tell...

What would really help is a clear separation between commands intended for
centos/RHEL and commands intended for Node.  As an outsider, it's very
difficult to know.   Every chapter, where there is any difference in
procedure, the documents should be split with RHEL on one side and NODE on
the other.

The documentation would also benefit from tags like dates and versions that
they apply to.  "Valid for Ovirt 4.2.6 to 4.2.8 as of Feb 2, 2019".Then
the documents should be tested and the dates/versions adjusted, or the docs
adjusted, as needed.

Ovirt is awesome.  But the docs are the project's worst enemy.



On Thu, Feb 14, 2019 at 3:34 AM Greg Sheremeta  wrote:

> Hi,
>
> On Wed, Feb 13, 2019 at 11:18 PM Vincent Royer 
> wrote:
>
>> wow am I crazy or is that not mentioned anywhere that I can find in the
>> docs?
>>
>
>
> https://ovirt.org/documentation/upgrade-guide/appe-Manually_Updating_Hosts.html
>
> Does that make sense, or do you think it needs enhancement? If it needs
> enhancement, please open a documentation bug:
> https://github.com/oVirt/ovirt-site/issues/new
>
>
>
>>
>> some combinations of commands and reboots finally got the update to take.
>>
>> Any idea about the messages about not being registered to an entitlement
>> server?  whats that all about??
>>
>
> If you're on CentOS, it's a harmless side effect of cockpit being
> installed.
> # cat  /etc/yum/pluginconf.d/subscription-manager.conf
> [main]
> enabled=1
> # change to 0 if you prefer
>
>
>
>>
>>
>>
>> On Wed, Feb 13, 2019 at 7:30 PM Edward Berger 
>> wrote:
>>
>>> If its a node-ng install, you should just update the whole image with
>>> yum update ovirt-node-ng-image-update
>>>
>>> On Wed, Feb 13, 2019 at 8:12 PM Vincent Royer 
>>> wrote:
>>>
 Sorry, this is a node install w/ he.

 On Wed, Feb 13, 2019, 4:44 PM Vincent Royer >>> wrote:

> trying to update from 4.2.6 to 4.2.8
>
> yum update fails with:
>
> --> Finished Dependency Resolution
>
>
>
>
> Error: Package: vdsm-4.20.46-1.el7.x86_64 (ovirt-4.2)
>
>
>
>
>Requires: libvirt-daemon-kvm >= 4.5.0-10.el7_6.3
>
>
>
>
>Installed: libvirt-daemon-kvm-3.9.0-14.el7_5.8.x86_64
> (installed)
>
>
>
>libvirt-daemon-kvm = 3.9.0-14.el7_5.8
>
>
>
>
> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
> (ovirt-4.2-centos-qemu-ev)
>
>
>
>Requires: libepoxy.so.0()(64bit)
>
>
>
>
> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
> (ovirt-4.2-centos-qemu-ev)
>
>
>
>Requires: libibumad.so.3()(64bit)
>
>
>
>
> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
> (ovirt-4.2-centos-qemu-ev)
>
>
>
>Requires: libgbm.so.1()(64bit)
>
>
>
>
>  You could try using --skip-broken to work around the problem
>
>
>
>
>  You could try running: rpm -Va --nofiles --nodigest
>
>
>
>
> Uploading Enabled Repositories Report
>
>
>
>
> 2019-02-13 16:42:14,190 [INFO] yum:17779:Dummy-18 @connection.py:868 -
> Connection built: host=subscription.rhsm.redhat.com port=443
> handler=/subscription auth=identity_cert ca_dir=/etc/rhsm/ca/
> insecure=False
>
> Loaded plugins: fastestmirror, product-id, subscription-manager
>
>
>
>
> 2019-02-13 16:42:14,199 [WARNING] yum:17779:Dummy-18 @logutil.py:141 -
> logging already initialized
>
>
>
> 2019-02-13 16:42:14,200 [ERROR] yum:17779:Dummy-18 @identity.py:145 -
> Reload of consumer identity cert /etc/pki/consumer/cert.pem raised an
> exception with msg: [Errno 2] No such file or directory:
> '/etc/pki/consumer/key.pem'
>
> 2019-02-13 16:42:14,200 [INFO] yum:1777

[ovirt-users] Centos 7.6 and kernel upgrading

[Erick Perez]

Good day,
What is the Ovirt position on upgrading Centos 7.6 kernel from 3.10 to 
latext/stable 4.x series?
I cannot find a document related to the support.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OFU23D472QOHQJFACHLCE3A64QP3PVYA/

[ovirt-users] Re: Ovirt Cluster completely unstable

[Darryl Scott]

I do believe something went wrong after fully updating everything last Friday.  
I updated all the ovirt compute nodes on Friday and gluster/engine on Saturday. 
 I have been experiencing these issues every since.  I have pour over 
engine.log and seems to be connection to storage issue.



From: Jayme 
Sent: Thursday, February 14, 2019 1:52:59 AM
To: Darryl Scott
Cc: users
Subject: Re: [ovirt-users] Ovirt Cluster completely unstable

I have a three node HCI gluster which was previously running 4.2 with zero 
problems.  I just upgraded it yesterday.  I ran in to a few bugs right away 
with the upgrade process, but aside from that I also discovered other users 
with severe GlusterFS problems since the upgrade to new GlusterFS version.  It 
is less than 24 hours since I upgrade my cluster and I just got a notice that 
one of my GlusterFS bricks is offline.  There does appear to be a very real and 
serious issue here with the latest updates.


On Wed, Feb 13, 2019 at 7:26 PM 
mailto:dsc...@umbctraining.com>> wrote:
I'm abandoning my production ovirt cluster due to instability.   I have a 7 
host cluster running about 300 vms and have been for over a year.  It has 
become unstable over the past three days.  I have random hosts both, compute 
and storage disconnecting.  AND many vms disconnecting and becoming unusable.

7 host are 4 compute hosts running Ovirt 4.2.8 and three glusterfs hosts 
running 3.12.5.  I submitted a bugzilla bug and they immediately assigned it to 
the storage people but have not responded with any meaningful information.  I 
have submitted several logs.

I have found some discussion on problems with instability with gluster 3.12.5.  
I would be willing to upgrade my gluster to a more stable version if that's the 
culprit.  I installed gluster using the ovirt gui and this is the version the 
ovirt gui installed.

Is there an ovirt health monitor available?  Where should I be looking to get a 
resolution the problems I'm facing.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BL4M3JQA3IEXCQUY4IGQXOAALRUQ7TVB/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IMUKFFANNJXLKXNVGMMJ6Y7MOLW2CQE3/

[ovirt-users] Re: Vnic-Port mirroring

[Staniforth, Paul]

is the vNiC profile being used by any VMs , they need to be down to enable 
port-mirroring


From: ada per 
Sent: 14 February 2019 14:08
To: Staniforth, Paul
Cc: Greg Sheremeta; users@ovirt.org
Subject: Re: [ovirt-users] Re: Vnic-Port mirroring

Thanks for your reply,

I have 2 clusters one is with linux bridge and the other one is OVS.

None seems to work.. I just retried the linux bridge cluster now and still no 
luck.

On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, 
mailto:p.stanifo...@leedsbeckett.ac.uk>> wrote:

Is the cluster using linux bridge? OVS doesn't support Port Mirroring.


Regards,

 Paul S.


From: ada per mailto:adap...@gmail.com>>
Sent: 14 February 2019 12:37
To: Greg Sheremeta
Cc: users
Subject: [ovirt-users] Re: Vnic-Port mirroring

The one below is  my logical network configuration
[image.png]
The following one is the grayed out VNIC Profiles options

[image.png]

On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Can you share a screenshot?

On Thu, Feb 14, 2019 at 4:14 AM ada per 
mailto:adap...@gmail.com>> wrote:
Hello everyone,

I am trying to allow port mirroring through the Vnic profile but no matter what 
i do it stays grayed out. How can i enable this option?

When i am creating a new VNIC profile the options ,port mirroring and 
passthrough are disabled.

the version i am using is 4.2.8.
Thanks!:)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/


--

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

[https://www.redhat.com/files/brand/email/sig-redhat.png]
To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/

To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WOOFHKLZXEEIETBCED2ASFE67O7G6J4D/

[ovirt-users] Re: Vnic-Port mirroring

[ada per]

Thanks everyone for the replies
Bug ID:1677426 
-On Thu, Feb 14, 2019 at 6:11 PM Miguel Duarte de Mora Barroso <
mdbarr...@redhat.com> wrote:

>
> As a workaround, I think you could try the REST interface - check [1] and
> [2] - to update your vnic profile's port mirroring attribute.
> [1] -
> http://ovirt.github.io/ovirt-engine-api-model/master/#services/vnic_profile/methods/update
> [2] -
> http://ovirt.github.io/ovirt-engine-api-model/master/#types/vnic_profile/attributes/port_mirroring
>
> I am using ovirtsdk -python is there any example on how to resolve that
there?

Thank you

On Thu, Feb 14, 2019 at 6:11 PM Miguel Duarte de Mora Barroso <
mdbarr...@redhat.com> wrote:

>
>
> On Thu, Feb 14, 2019 at 4:11 PM ada per  wrote:
>
>> No it is not. I think  it is shown in the first screenshot that is
>> logical
>>
>
> I think you've hit a bug on the frontend code.
>
> Would you be kind enough to report it on [0], setting 'BLL.network' as the
> component ? Please reply with the bug ID so we can track it.
>
> As a workaround, I think you could try the REST interface - check [1] and
> [2] - to update your vnic profile's port mirroring attribute.
>
> [0] - https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt-engine
> [1] -
> http://ovirt.github.io/ovirt-engine-api-model/master/#services/vnic_profile/methods/update
> [2] -
> http://ovirt.github.io/ovirt-engine-api-model/master/#types/vnic_profile/attributes/port_mirroring
>
>
>> On Thu, 14 Feb 2019, 16:36 Staniforth, Paul, <
>> p.stanifo...@leedsbeckett.ac.uk> wrote:
>>
>>> I don't know I assume it's not an external network?
>>> --
>>> *From:* ada per 
>>> *Sent:* 14 February 2019 14:24
>>> *To:* Staniforth, Paul
>>> *Cc:* Greg Sheremeta; users@ovirt.org
>>> *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring
>>>
>>> No it is not used by any vms.
>>> We created a new vnic which is currently not assigned in any vm and
>>> still no options available.
>>>
>>> On Thu, 14 Feb 2019, 16:16 Staniforth, Paul, <
>>> p.stanifo...@leedsbeckett.ac.uk> wrote:
>>>
 is the vNiC profile being used by any VMs , they need to be down to
 enable port-mirroring
 --
 *From:* ada per 
 *Sent:* 14 February 2019 14:08
 *To:* Staniforth, Paul
 *Cc:* Greg Sheremeta; users@ovirt.org
 *Subject:* Re: [ovirt-users] Re: Vnic-Port mirroring

 Thanks for your reply,

 I have 2 clusters one is with linux bridge and the other one is OVS.

 None seems to work.. I just retried the linux bridge cluster now and
 still no luck.

 On Thu, 14 Feb 2019, 15:58 Staniforth, Paul, <
 p.stanifo...@leedsbeckett.ac.uk> wrote:

> Is the cluster using linux bridge? OVS doesn't support Port Mirroring.
>
>
> Regards,
>
>  Paul S.
> --
> *From:* ada per 
> *Sent:* 14 February 2019 12:37
> *To:* Greg Sheremeta
> *Cc:* users
> *Subject:* [ovirt-users] Re: Vnic-Port mirroring
>
> The one below is  my logical network configuration
> [image: image.png]
> The following one is the grayed out VNIC Profiles options
>
> [image: image.png]
>
> On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
> wrote:
>
>> Can you share a screenshot?
>>
>> On Thu, Feb 14, 2019 at 4:14 AM ada per  wrote:
>>
>>> Hello everyone,
>>>
>>> I am trying to allow port mirroring through the Vnic profile but no
>>> matter what i do it stays grayed out. How can i enable this option?
>>>
>>> When i am creating a new VNIC profile the options ,port mirroring
>>> and passthrough are disabled.
>>>
>>> the version i am using is 4.2.8.
>>> Thanks!:)
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/
>>>
>>
>>
>> --
>>
>> GREG SHEREMETA
>>
>> SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX
>>
>> Red Hat NA
>>
>> 
>>
>> gsher...@redhat.comIRC: gshereme
>> 
>>
> To view the terms under which this email is distributed, please go
> to:-
> http://leedsbeckett.ac.uk/disclaimer/email/
>
> To view the terms under which this email is distributed, please go
 to:-
 http://leedsbeckett.ac.uk/disclaimer/email/

 To view the terms under which this email is distributed, please go to:-
>>> http://leedsbeckett.ac.uk/disclaimer/email/
>>>
>>> 

[ovirt-users] Re: Ovirt self-hosted engine won't come up

[Strahil Nikolov]

 I have noticed that sometimes virsh shows the real error (like firewalld being 
stopped).Can you try to start paused and then ask virsh to resume:hosted-engine 
--vm-start-paused
virsh -c qemu:///system?authfile=/etc/ovirt-hosted-engine/virsh_auth.conf list

virsh -c qemu:///system?authfile=/etc/ovirt-hosted-engine/virsh_auth.conf 
resume HostedEngine

Best Regards,Strahil Nikolov
В четвъртък, 14 февруари 2019 г., 19:39:35 ч. Гринуич+2, 
joshuao...@gmail.com  написа:  
 
 It appears the engine is down entirely now and hosted-engine --vm-start 
doesn't appear to change anything.

Engine status                      : {"reason": "bad vm status", "health": 
"bad", "vm": "down_unexpected", "detail": "Down"}
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2CADFURYFT5ULVQ6EYHNTYICSALACZ2V/
  ___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HJZO23SUZS7UIHOSGRAZFUFLWFTOR2F6/

[ovirt-users] Re: update to 4.2.8 fails

[Greg Sheremeta]

On Thu, Feb 14, 2019 at 2:16 PM Vincent Royer  wrote:

> Greg,
>
> The first thing on the list in your link is to check what repos are
> enabled with yum repolist, but makes no mention of what repos *should *be
> enabled on node-ng, nor what to do about it if you have the wrong ones.
> I've never had an Ovirt update go the way it was "supposed" to go, despite
> having a bunch of documentation at hand.  Usually I end up blowing away the
> hosts and starting with a fresh ISO.
>
> The page you linked makes no mention of the command Edward mentioned that
> got things working for me:
>
> yum update ovirt-node-ng-image-update
>
> All the instructions I can find just say to run yum update, but that
> resulted in a bunch of dependency errors for me, on a normal 4.2.6 node
> install that I haven't touched since installation.  Why?  If I'm following
> the instructions, shouldn't it work?
>
>
> running this command in the upgrade guide:
>
> [image: image.png]
>
> Gives me "This system is not registered with an entitlement server".   Is
> that an outdated instruction?  Does it apply to the particular update I'm
> trying to apply?   No way to tell...
>

It only applies to RHEL. If you are not on RHEL, you wouldn't run that.
So it definitely needs improvement.


>
> What would really help is a clear separation between commands intended for
> centos/RHEL and commands intended for Node.  As an outsider, it's very
> difficult to know.   Every chapter, where there is any difference in
> procedure, the documents should be split with RHEL on one side and NODE on
> the other.
>

+1.


>
> The documentation would also benefit from tags like dates and versions
> that they apply to.  "Valid for Ovirt 4.2.6 to 4.2.8 as of Feb 2, 2019".
> Then the documents should be tested and the dates/versions adjusted, or the
> docs adjusted, as needed.
>

Agree.


>
> Ovirt is awesome.
>

Agree :)


> But the docs are the project's worst enemy.
>

I understand your frustrations. We've been trying to improve the
documentation lately, and feedback like yours is crucial. So thank you.
I opened to https://github.com/oVirt/ovirt-site/issues/1906 track this.

Best wishes,
Greg



>
>
>
> On Thu, Feb 14, 2019 at 3:34 AM Greg Sheremeta 
> wrote:
>
>> Hi,
>>
>> On Wed, Feb 13, 2019 at 11:18 PM Vincent Royer 
>> wrote:
>>
>>> wow am I crazy or is that not mentioned anywhere that I can find in the
>>> docs?
>>>
>>
>>
>> https://ovirt.org/documentation/upgrade-guide/appe-Manually_Updating_Hosts.html
>>
>> Does that make sense, or do you think it needs enhancement? If it needs
>> enhancement, please open a documentation bug:
>> https://github.com/oVirt/ovirt-site/issues/new
>>
>>
>>
>>>
>>> some combinations of commands and reboots finally got the update to
>>> take.
>>>
>>> Any idea about the messages about not being registered to an entitlement
>>> server?  whats that all about??
>>>
>>
>> If you're on CentOS, it's a harmless side effect of cockpit being
>> installed.
>> # cat  /etc/yum/pluginconf.d/subscription-manager.conf
>> [main]
>> enabled=1
>> # change to 0 if you prefer
>>
>>
>>
>>>
>>>
>>>
>>> On Wed, Feb 13, 2019 at 7:30 PM Edward Berger 
>>> wrote:
>>>
 If its a node-ng install, you should just update the whole image with
 yum update ovirt-node-ng-image-update

 On Wed, Feb 13, 2019 at 8:12 PM Vincent Royer 
 wrote:

> Sorry, this is a node install w/ he.
>
> On Wed, Feb 13, 2019, 4:44 PM Vincent Royer  wrote:
>
>> trying to update from 4.2.6 to 4.2.8
>>
>> yum update fails with:
>>
>> --> Finished Dependency Resolution
>>
>>
>>
>>
>> Error: Package: vdsm-4.20.46-1.el7.x86_64 (ovirt-4.2)
>>
>>
>>
>>
>>Requires: libvirt-daemon-kvm >= 4.5.0-10.el7_6.3
>>
>>
>>
>>
>>Installed: libvirt-daemon-kvm-3.9.0-14.el7_5.8.x86_64
>> (installed)
>>
>>
>>
>>libvirt-daemon-kvm = 3.9.0-14.el7_5.8
>>
>>
>>
>>
>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>> (ovirt-4.2-centos-qemu-ev)
>>
>>
>>
>>Requires: libepoxy.so.0()(64bit)
>>
>>
>>
>>
>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>> (ovirt-4.2-centos-qemu-ev)
>>
>>
>>
>>Requires: libibumad.so.3()(64bit)
>>
>>
>>
>>
>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>> (ovirt-4.2-centos-qemu-ev)
>>
>>
>>
>>Requires: libgbm.so.1()(64bit)
>>
>>
>>
>>
>>  You could try using --skip-broken to work around the problem
>>
>>
>>
>>
>>  You could try running: rpm -Va --nofiles --nodigest
>>
>>
>>
>>
>> Uploading Enabled Repositories Report
>>
>>
>>
>>
>> 2019-02-13 16:42:14,190 [INFO] yum:17779:Dummy-18 @connection.py:868
>> - Connection built: host=subscription.

[ovirt-users] Re: access engine by http

[du_hon...@yeah.net]

hi Ravi
 sorry, I do not understand when I visit http:192.168.122.176:80/ovirt-engine 
still redirect to https:192.168.122.176:443/ovirt-engine, I already fix 
sso_clients table;
who redirect http to https??
 thanks

engine=# select * from sso_clients
engine-# ;
 id | client_id  |  

client_secret 

  | callback_prefix |   
   certificate_location   
   |notification_callback|
description | email |   

 scope  

  
| trusted | notification_callback_protocol | 
notification_callback_verify_host | notification_callback_verify_chain 
++
--+-+-
---+-++---+---
--
+-++---+
  1 | ovirt-engine-core  | 
eyJhcnRpZmFjdCI6IkVudmVsb3BlUEJFIiwic2FsdCI6ImRSc3Y1bnNCR2F0b3M1WTNNOHhiQktGaDlSbEd4SnpjWWxmdzY3NmNUaFk9Iiwic2VjcmV0IjoicE5RM2E0TXQ2aU40MU5YVVY3R0ZMZjcvVnZBMWlWWnN
oOE1ERXozQkIwZz0iLCJ2ZXJzaW9uIjoiMSIsIml0ZXJhdGlvbnMiOiI0MDAwIiwiYWxnb3JpdGhtIjoiUEJLREYyV2l0aEhtYWNTSEExIn0=
 | http://192.168.122.176:80/ovirt-engine/ | 
/etc/pki/ovirt-engine/certs/engine.c
er | http:/192.168.122.176:80/ovirt-engine/services/sso-callback | oVirt Engine 
  |   | openid ovirt-app-portal ovirt-app-admin ovirt-app-api 
ovirt-ext=auth:identity ovirt-ext=token:
password-access ovirt-ext=auth:sequence-priority 
ovirt-ext=token:login-on-behalf ovirt-ext=token-info:authz-search 
ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovir
t-ext=revoke:revoke-all | t   | TLS| f  
   | t
  2 | ovirt-provider-ovn | 
eyJhcnRpZmFjdCI6IkVudmVsb3BlUEJFIiwic2FsdCI6Ikh0Zlp5eFJEUXB2RmVaOTJCeU83NUxISXR3Uk9Nd05YUWYzd2wyS2lvSkE9Iiwic2VjcmV0IjoiOVlMZldRSHRiZDdBbVVQdnRNcTgwdndzWG8xMzN6a1V
5WXN2dEJxVEttWT0iLCJ2ZXJzaW9uIjoiMSIsIml0ZXJhdGlvbnMiOiI0MDAwIiwiYWxnb3JpdGhtIjoiUEJLREYyV2l0aEhtYWNTSEExIn0=
 | http://192.168.122.176:80/ovirt-engine/ | 
/etc/pki/ovirt-engine/certs/engine.c
er | http:/192.168.122.176:80/ovirt-engine/services/sso-callback | 
ovirt-provider-ovn |   | ovirt-app-api ovirt-ext=token-info:validate 
ovirt-ext=token-info:public-authz-search  


  
| t   | TLS| f  
   | t
(2 rows)



Regards
Hongyu Du
 
From: du_hon...@yeah.net
Date: 2019-02-14 23:32
To: Ravi Nori
CC: users
Subject: [ovirt-users] Re: access engine by http
thanks Ravi， because  my engine certification is signed by myself, when I visit 
my ovirt-engine by browser,  browser need add security exception, so I want to 
engine by http.

I realise /etc/httpd/conf.d/z-ovirt-engine-proxy.conf redirect /ovirt-engine to 
127.0.0.1:8702  , but I do not know how to  redirect https , I do not find some 
redirect https info.

I fix "ProxyPassMatch ajp://127.0.0.1:8702 timeout=3600 retry=5"   to 
"ProxyPassMatch ajp://127.0.0.1:8543 timeout=3600 retry=5"?



Regards
Hongyu Du
 
From: Ravi Shankar Nori
Date: 2019-02-14 23:16
To: du_hon...@yeah.net
CC: Greg Sheremeta; users
Subject: Re: Re: [ovirt-users] access engine by http
Apache uses ajp to communicate with engine on port 8702. You can redirect from 
Apache with a simple RewriteCond 
to jboss port 8543 but certificate verification is not going to work which will 
cause issues with all oVirt tools.

More over oVirt SSO is not going to let you access UI on port other than 443 
when installed through rpms. 
Yo

[ovirt-users] Re: update to 4.2.8 fails

[Vincent Royer]

Greg,

Can I contribute?



On Thu, Feb 14, 2019 at 2:05 PM Greg Sheremeta  wrote:

>
> On Thu, Feb 14, 2019 at 2:16 PM Vincent Royer 
> wrote:
>
>> Greg,
>>
>> The first thing on the list in your link is to check what repos are
>> enabled with yum repolist, but makes no mention of what repos *should *be
>> enabled on node-ng, nor what to do about it if you have the wrong ones.
>> I've never had an Ovirt update go the way it was "supposed" to go, despite
>> having a bunch of documentation at hand.  Usually I end up blowing away the
>> hosts and starting with a fresh ISO.
>>
>> The page you linked makes no mention of the command Edward mentioned that
>> got things working for me:
>>
>> yum update ovirt-node-ng-image-update
>>
>> All the instructions I can find just say to run yum update, but that
>> resulted in a bunch of dependency errors for me, on a normal 4.2.6 node
>> install that I haven't touched since installation.  Why?  If I'm following
>> the instructions, shouldn't it work?
>>
>>
>> running this command in the upgrade guide:
>>
>> [image: image.png]
>>
>> Gives me "This system is not registered with an entitlement server".   Is
>> that an outdated instruction?  Does it apply to the particular update I'm
>> trying to apply?   No way to tell...
>>
>
> It only applies to RHEL. If you are not on RHEL, you wouldn't run that.
> So it definitely needs improvement.
>
>
>>
>> What would really help is a clear separation between commands intended
>> for centos/RHEL and commands intended for Node.  As an outsider, it's very
>> difficult to know.   Every chapter, where there is any difference in
>> procedure, the documents should be split with RHEL on one side and NODE on
>> the other.
>>
>
> +1.
>
>
>>
>> The documentation would also benefit from tags like dates and versions
>> that they apply to.  "Valid for Ovirt 4.2.6 to 4.2.8 as of Feb 2, 2019".
>> Then the documents should be tested and the dates/versions adjusted, or the
>> docs adjusted, as needed.
>>
>
> Agree.
>
>
>>
>> Ovirt is awesome.
>>
>
> Agree :)
>
>
>> But the docs are the project's worst enemy.
>>
>
> I understand your frustrations. We've been trying to improve the
> documentation lately, and feedback like yours is crucial. So thank you.
> I opened to https://github.com/oVirt/ovirt-site/issues/1906 track this.
>
> Best wishes,
> Greg
>
>
>
>>
>>
>>
>> On Thu, Feb 14, 2019 at 3:34 AM Greg Sheremeta 
>> wrote:
>>
>>> Hi,
>>>
>>> On Wed, Feb 13, 2019 at 11:18 PM Vincent Royer 
>>> wrote:
>>>
 wow am I crazy or is that not mentioned anywhere that I can find in the
 docs?

>>>
>>>
>>> https://ovirt.org/documentation/upgrade-guide/appe-Manually_Updating_Hosts.html
>>>
>>> Does that make sense, or do you think it needs enhancement? If it needs
>>> enhancement, please open a documentation bug:
>>> https://github.com/oVirt/ovirt-site/issues/new
>>>
>>>
>>>

 some combinations of commands and reboots finally got the update to
 take.

 Any idea about the messages about not being registered to an
 entitlement server?  whats that all about??

>>>
>>> If you're on CentOS, it's a harmless side effect of cockpit being
>>> installed.
>>> # cat  /etc/yum/pluginconf.d/subscription-manager.conf
>>> [main]
>>> enabled=1
>>> # change to 0 if you prefer
>>>
>>>
>>>



 On Wed, Feb 13, 2019 at 7:30 PM Edward Berger 
 wrote:

> If its a node-ng install, you should just update the whole image with
> yum update ovirt-node-ng-image-update
>
> On Wed, Feb 13, 2019 at 8:12 PM Vincent Royer 
> wrote:
>
>> Sorry, this is a node install w/ he.
>>
>> On Wed, Feb 13, 2019, 4:44 PM Vincent Royer > wrote:
>>
>>> trying to update from 4.2.6 to 4.2.8
>>>
>>> yum update fails with:
>>>
>>> --> Finished Dependency Resolution
>>>
>>>
>>>
>>>
>>> Error: Package: vdsm-4.20.46-1.el7.x86_64 (ovirt-4.2)
>>>
>>>
>>>
>>>
>>>Requires: libvirt-daemon-kvm >= 4.5.0-10.el7_6.3
>>>
>>>
>>>
>>>
>>>Installed: libvirt-daemon-kvm-3.9.0-14.el7_5.8.x86_64
>>> (installed)
>>>
>>>
>>>
>>>libvirt-daemon-kvm = 3.9.0-14.el7_5.8
>>>
>>>
>>>
>>>
>>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>>> (ovirt-4.2-centos-qemu-ev)
>>>
>>>
>>>
>>>Requires: libepoxy.so.0()(64bit)
>>>
>>>
>>>
>>>
>>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>>> (ovirt-4.2-centos-qemu-ev)
>>>
>>>
>>>
>>>Requires: libibumad.so.3()(64bit)
>>>
>>>
>>>
>>>
>>> Error: Package: 10:qemu-kvm-ev-2.12.0-18.el7_6.3.1.x86_64
>>> (ovirt-4.2-centos-qemu-ev)
>>>
>>>
>>>
>>>Requires: libgbm.so.1()(64bit)
>>>
>>>
>>>
>>>
>>>  You could try using --skip-broken to work around the problem
>>>
>>>
>>

[ovirt-users] Huge Pages

[Vincent Royer]

How do I know how many huge pages my hosts can support?

cat /proc/meminfo | grep Huge
 AnonHugePages:  17684480 kB
HugePages_Total:   0
HugePages_Free:0
HugePages_Rsvd:0
HugePages_Surp:0
Hugepagesize:   2048 kB

[image: image.png]

And once I know, I set the kernel parameters here, and reboot the host,
correct?

[image: image.png]


And then I assume I assign them to the VM here?  How do I decide how many
huge pages and what size a particular VM can benefit from?

[image: image.png]


Is there a part of the docs I am not finding that covers this?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZMGN7YZXSQ5UUZ43U5RPSXTZOTYI2XAZ/

[ovirt-users] Facing issues with settings up shared data-center

[Jinesh Ks]

Host Node3 cannot access the Storage Domain(s)  attached to the Data 
Center Default. Setting Host state to Non-Operational.

VDSM Node3 command ConnectStoragePoolVDS failed: Cannot find master domain: 
u'spUUID=a171b7d6-2c10-11e9-acee-10604b98fee8, 
msdUUID=bb73461e-02a2-45a6-85fa-5e39d860485c'

The error message for connection 10.0.10.11:/exports/data returned by VDSM was: 
Problem while trying to mount target
---
we have 3 Nodes, using NFS  for storage domain... using shared data center. 

Anybody can help me?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OOULCMHTHVWRCZTK4JE6HBDL4SRD2WWK/

[ovirt-users] Re: Vnic-Port mirroring

[Staniforth, Paul]

Is the cluster using linux bridge? OVS doesn't support Port Mirroring.


Regards,

 Paul S.


From: ada per 
Sent: 14 February 2019 12:37
To: Greg Sheremeta
Cc: users
Subject: [ovirt-users] Re: Vnic-Port mirroring

The one below is  my logical network configuration
[image.png]
The following one is the grayed out VNIC Profiles options

[image.png]

On Thu, Feb 14, 2019 at 1:18 PM Greg Sheremeta 
mailto:gsher...@redhat.com>> wrote:
Can you share a screenshot?

On Thu, Feb 14, 2019 at 4:14 AM ada per 
mailto:adap...@gmail.com>> wrote:
Hello everyone,

I am trying to allow port mirroring through the Vnic profile but no matter what 
i do it stays grayed out. How can i enable this option?

When i am creating a new VNIC profile the options ,port mirroring and 
passthrough are disabled.

the version i am using is 4.2.8.
Thanks!:)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YFD5NVE4LF5IL7SX2Z2FB3YGFNQSEFP4/


--

GREG SHEREMETA

SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX

Red Hat NA



gsher...@redhat.comIRC: gshereme

[https://www.redhat.com/files/brand/email/sig-redhat.png]
To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GC7672AQKESSZEIOGPEDWRJWN2KFFLMV/