date:20190731

[ovirt-users] Re: Use public-signed SSL certs?

2019-07-31 Thread Chris Adams

Circling back to an old email...

Once upon a time, Yedidyah Bar David  said:
> On Wed, Jan 30, 2019 at 10:28 PM Chris Adams  wrote:
> > However, while digging, I also noticed that now the engine is not
> > communicating with ovirt-provider-ovn, possibly due to a similar issue?
> > It is having the reverse problem; it rejects the engine's cert.
> 
> Didn't try this yet, adding Dominik.

Was anybody able to look at this?  I had to use my dev hardware for
something else for a bit, so re-installed with 4.3.5 yesterday.  The
imageio SSL cert issue looks good, but I still can't figure out the
ovirt-provider-ovn CA usage.

My little bit of digging seems to show that the engine connects to the
provider and is using an SSL client cert, and that cert is signed by
something... but I'm not sure what.  I think the provider side is trying
to validate with the following setting from
/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf

[OVIRT]
ovirt-ca-file=/etc/pki/ovirt-engine/apache-ca.pem

Following the general "3rd-party SSL", that is now the Let's Encrypt CA.
I tried changing it to point to the original self-signed oVirt CA (same
directory, just "ca.pem"), but that didn't work either.

Any suggestions?
-- 
Chris Adams 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VBM4JSHX2IC2DLEZJB2O3FBPRILPU3HV/

[ovirt-users] hosted engine installation / multipath / iscsi

2019-07-31 Thread Michael Frank

Hi,

 since several days i try to install the hosted engine initially to an iscsi 
multipath device without success.
Some information on the environment:
- Version 4.3.3
- using two 10gbe interfaces as single bond for the ovirtmgmt interface 
- using two 10gbe storage interfaces on each hypervisor for iscsi storage
-- each storage interface is configured without any bonding, etc
-- each storage interface lives in a separate vlan were also the iscsi 
Portals/target are available, the iscsi portals have 4x10ge interfaces each, (2 
in vlan xx and 2 interfaces in vlan yy )
-- so; each storage interface is connected to two iscsi Portals via 4 
interfaces 

The documentation here is for me unclear:
https://ovirt.org/documentation/self-hosted/chap-Deploying_Self-Hosted_Engine.html
>Note: To specify more than one iSCSI target, you must enable multipathing 
>before deploying the self-hosted engine. There is also a Multipath >Helper 
>tool that generates a script to install and configure multipath with different 
>options.

This indicates for me that it should be possbile to install the HE directly on 
the /dev/mapper/mpath device which is availibale when I have prepared the host 
accordingly before installing the HE (log in to multiple iscsi targets, create 
proper multipath,conf, etc) - right ?

I login to the two iscsi portals and get in sum 8 pathes, 4 from each interface 
and iscsi target.
Basically I have then the mpath device on the hypervisor available and i can  
mount the mpath device and put data on it.
In the cockpit interface the mount can also be activated and is recognized 
correctly.
multipathd -ll and lsblk looks good. Everything seems to be fine.

But when I run the "hosted-engine" --deploy, the last option while running the 
assistant is to enter the iscsi data.
So, basically i just want to define my mpath device - when entering the data 
(ip, port)for the iscsi Portal I can see the 4 pathes of the single hosted 
Engine target,
and when i choose the path where the "lun" is finally available it fails. I 
think in general this option is not that what i want to have 
here for using the multipath device.

I' m lost - what is the usual way to install the HE on a multipath device ?

Do i have to change the configuration of the storage interfaces or the iscsi 
network design?
Did I missed something obvious ?
Can I put in my multipath data into the answerfile to get rid of the last step 
of the assistant ?
Can I use the related ansible role for specify the Mpath device which is 
available when activating the multipath service ?

Is it not possible in general ?? :
https://bugzilla.redhat.com/show_bug.cgi?id=1193961

Sorry in advance for the long mail  1!^^

br,
michael

Sent from a mobile device ___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QRL2FYUD66C5J2RKC4UJZP4OQJWXWSB5/

[ovirt-users] Re: Manual Migration not working and Dashboard broken after 4.3.4 update

2019-07-31 Thread Neil

Hi Sharon,

This issue still persists, and when I saw that 4.3.5 was released I've
tried to upgrade, but I see it says there are no packages available,
however I see I have 11 updates that are version locked. Could this
possibly be causing issues in terms of why updating to 4.3.5 when it was in
"pre" that it didn't resolve the dashboard problem?

[root@ovirt]# yum update "ovirt-*-setup*"
Loaded plugins: fastestmirror, versionlock
Repository centos-sclo-rh-release is listed more than once in the
configuration
Repository ovirt-4.3-epel is listed more than once in the configuration
Repository ovirt-4.3-centos-gluster6 is listed more than once in the
configuration
Repository ovirt-4.3-virtio-win-latest is listed more than once in the
configuration
Repository ovirt-4.3-centos-qemu-ev is listed more than once in the
configuration
Repository ovirt-4.3-centos-ovirt43 is listed more than once in the
configuration
Repository ovirt-4.3-centos-opstools is listed more than once in the
configuration
Repository centos-sclo-rh-release is listed more than once in the
configuration
Repository sac-gluster-ansible is listed more than once in the configuration
Repository ovirt-4.3 is listed more than once in the configuration
Loading mirror speeds from cached hostfile
ovirt-4.3-epel/x86_64/metalink
 |  46 kB  00:00:00
 * base: mirror.pcsp.co.za
 * extras: mirror.pcsp.co.za
 * ovirt-4.1: mirror.slu.cz
 * ovirt-4.1-epel: ftp.uni-bayreuth.de
 * ovirt-4.2: mirror.slu.cz
 * ovirt-4.2-epel: ftp.uni-bayreuth.de
 * ovirt-4.3-epel: ftp.uni-bayreuth.de
 * updates: mirror.bitco.co.za
ovirt-4.3-centos-gluster6
| 2.9 kB  00:00:00
ovirt-4.3-centos-opstools
| 2.9 kB  00:00:00
ovirt-4.3-centos-ovirt43
 | 2.9 kB  00:00:00
ovirt-4.3-centos-qemu-ev
 | 2.9 kB  00:00:00
ovirt-4.3-virtio-win-latest
| 3.0 kB  00:00:00
sac-gluster-ansible
| 3.3 kB  00:00:00
Excluding 11 updates due to versionlock (use "yum versionlock status" to
show them)
No packages marked for update

[root@ovirt yum.repos.d]# yum versionlock status
Loaded plugins: fastestmirror, versionlock
Repository centos-sclo-rh-release is listed more than once in the
configuration
Repository ovirt-4.3-epel is listed more than once in the configuration
Repository ovirt-4.3-centos-gluster6 is listed more than once in the
configuration
Repository ovirt-4.3-virtio-win-latest is listed more than once in the
configuration
Repository ovirt-4.3-centos-qemu-ev is listed more than once in the
configuration
Repository ovirt-4.3-centos-ovirt43 is listed more than once in the
configuration
Repository ovirt-4.3-centos-opstools is listed more than once in the
configuration
Repository centos-sclo-rh-release is listed more than once in the
configuration
Repository sac-gluster-ansible is listed more than once in the configuration
Repository ovirt-4.3 is listed more than once in the configuration
Loading mirror speeds from cached hostfile
 * base: mirror.pcsp.co.za
 * extras: mirror.pcsp.co.za
 * ovirt-4.1: mirror.slu.cz
 * ovirt-4.1-epel: ftp.uni-bayreuth.de
 * ovirt-4.2: mirror.slu.cz
 * ovirt-4.2-epel: ftp.uni-bayreuth.de
 * ovirt-4.3-epel: ftp.uni-bayreuth.de
 * updates: mirror.bitco.co.za
0:ovirt-engine-webadmin-portal-4.2.8.2-1.el7.*
0:ovirt-engine-dwh-4.2.4.3-1.el7.*
0:ovirt-engine-tools-backup-4.2.8.2-1.el7.*
0:ovirt-engine-restapi-4.2.8.2-1.el7.*
0:ovirt-engine-dbscripts-4.2.8.2-1.el7.*
0:ovirt-engine-4.2.8.2-1.el7.*
0:ovirt-engine-backend-4.2.8.2-1.el7.*
0:ovirt-engine-wildfly-14.0.1-3.el7.*
0:ovirt-engine-wildfly-overlay-14.0.1-3.el7.*
0:ovirt-engine-tools-4.2.8.2-1.el7.*
0:ovirt-engine-extension-aaa-jdbc-1.1.7-1.el7.centos.*
versionlock status done

Any ideas?

Thank you.
Regards.
Neil Wilson.



On Wed, Jul 24, 2019 at 3:46 PM Neil  wrote:

> Hi Sharon,
>
> Thank you for the info and apologies for the very late reply.
>
> I've done the service ovirt-engine-dwhd restart, and unfortunately
> there's no difference, below is the log
>
> 2019-07-24
> 03:00:00|3lI186|A138nf|XhBMpJ|OVIRT_ENGINE_DWH|DeleteTimeKeepingJob|Default|6|Java
> Exception|tJDBCInput_10|org.postgresql.util.PSQLException:This connection
> has been closed.|1
> Exception in component tJDBCInput_10
> org.postgresql.util.PSQLException: This connection has been closed.
> at
> org.postgresql.jdbc2.AbstractJdbc2Connection.checkClosed(AbstractJdbc2Connection.java:822)
> at
> org.postgresql.jdbc3.AbstractJdbc3Connection.createStatement(AbstractJdbc3Connection.java:229)
> at
> org.postgresql.jdbc2.AbstractJdbc2Connection.createStatement(AbstractJdbc2Connection.java:294)
> at
> ovirt_engine_dwh.deletetimekeepingjob_4_3.DeleteTimeKeepingJob.tJDBCInput_10Process(DeleteTimeKeepingJob.java:1493)
> at
>

[ovirt-users] [ANN] oVirt 4.3.5 first async is now available

2019-07-31 Thread Sandro Bonazzola

The oVirt Team has just released a new version of the following packages:

   -

   ovirt-ansible-disaster-recovery-1.2.0
   -

   ovirt-ansible-hosted-engine-setup-1.0.24
   -

   ovirt-engine-dwh-4.3.5.1
   -

   ovirt-engine-metrics-1.3.3.3
   -

   ovirt-release43-4.3.5.1


The async release includes additional fixes:

   -

   [BZ 1721073 ] Run metrics ansible
   role only if the ovirt-engine-metrics rpm installed
   -

   [BZ 1731871 ] Unable to install
   metrics VM on rhev - failed to connect to  master VM
   -

   [BZ 1727064 ] Deployment from
   Bastion Machine fails with Ansible 2.8 on upstream
   -

   [BZ 169 ] Update task "Get
   bastion ssh public key" to use ansible module other then command
   -

   [BZ 1730384 ] Connection closed
   with an exception
   -

   [BZ 1683157 ] CVE-2019-10194
   
   ovirt-engine-metrics: disclosure of sensitive passwords in log files and
   ansible playbooks



Notes:

- oVirt Appliance is already available

- oVirt Node is already available[2]

oVirt Node and Appliance have been updated including above packages and:

- latest CentOS Virt and Storage SIG updates:

   -

   ansible-2.8.3:
   
https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2.8.rst#v2-8-3
   -

   glusterfs-6.4: https://docs.gluster.org/en/latest/release-notes/6.4
   -

   cockpit 195: https://cockpit-project.org/blog/cockpit-195.html
   -

   openvswitch 2.11: http://openvswitch.org/releases/NEWS-2.11.0




Additional Resources:

* Read more about the oVirt 4.3.5 release highlights:
http://www.ovirt.org/release/4.3.5/

* Get more oVirt Project updates on Twitter: https://twitter.com/ovirt

* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/



[1] http://www.ovirt.org/release/4.3.5/
[2] http://resources.ovirt.org/pub/ovirt-4.3/iso/

-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com
*Red Hat respects your work life balance.
Therefore there is no need to answer this email out of your office hours.*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HJ5PQ5CS4MBIXDE3I4D3PPDF4E666IUM/

[ovirt-users] Re: 4.3.5 update error

2019-07-31 Thread Yedidyah Bar David

On Wed, Jul 31, 2019 at 12:50 PM Michal Skrivanek
 wrote:
>
> Didi,
> is this the same thing you’ve found out recently?

Yes, this one:

https://bugzilla.redhat.com/show_bug.cgi?id=1734699

>
> Thanks,
> michal
>
> On 31 Jul 2019, at 10:01, Kapetanakis Giannis  
> wrote:
>
> On 31/07/2019 10:47, Kapetanakis Giannis wrote:
>
> Hi,
>
> Trying today engine-setup to update from 4.3.3 -> 4.3.5 I got this error:
>
> [ ERROR ] Failed to execute stage 'Setup validation': local variable 
> 'snapshot_cl' referenced before assignment
>
> In log file I see:
>
> 2019-07-31 10:43:00,375+0300 DEBUG otopi.context context._executeMethod:145 
> method exception
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in 
> _executeMethod
> method['method']()
>   File 
> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>  line 437, in _validation
> self._checkSnapshotCompatibilityVersion()
>   File 
> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>  line 212, in _checkSnapshotCompatibilityVersion
> 'v': snapshot_cl,
> UnboundLocalError: local variable 'snapshot_cl' referenced before assignment
> 2019-07-31 10:43:00,381+0300 ERROR otopi.context context._executeMethod:154 
> Failed to execute stage 'Setup validation': local variable 'snapshot_cl' 
> referenced before assignment
>
> Any hints?
>
> thanks
>
> Giannis
>
>
>
> After removing all snapshots, I was able to continue the upgrade.
>
> G
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JDGJW2C4JWRZJK5AVDXCDMBCL374K246/
>
>


-- 
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AUCM6TYNCFJF3VUAQIMPV7TNLRW6DOIN/

[ovirt-users] Re: 4.3.5 update error

2019-07-31 Thread Michal Skrivanek

Didi,
is this the same thing you’ve found out recently?

Thanks,
michal

> On 31 Jul 2019, at 10:01, Kapetanakis Giannis  
> wrote:
> 
> On 31/07/2019 10:47, Kapetanakis Giannis wrote:
>> Hi,
>> 
>> Trying today engine-setup to update from 4.3.3 -> 4.3.5 I got this error:
>> 
>> [ ERROR ] Failed to execute stage 'Setup validation': local variable 
>> 'snapshot_cl' referenced before assignment
>> 
>> In log file I see:
>> 
>> 2019-07-31 10:43:00,375+0300 DEBUG otopi.context context._executeMethod:145 
>> method exception
>> Traceback (most recent call last):
>>   File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in 
>> _executeMethod
>> method['method']()
>>   File 
>> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>>  line 437, in _validation
>> self._checkSnapshotCompatibilityVersion()
>>   File 
>> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>>  line 212, in _checkSnapshotCompatibilityVersion
>> 'v': snapshot_cl,
>> UnboundLocalError: local variable 'snapshot_cl' referenced before assignment
>> 2019-07-31 10:43:00,381+0300 ERROR otopi.context context._executeMethod:154 
>> Failed to execute stage 'Setup validation': local variable 'snapshot_cl' 
>> referenced before assignment
>> 
>> Any hints?
>> 
>> thanks
>> 
>> Giannis
> 
> 
> After removing all snapshots, I was able to continue the upgrade.
> 
> G
> ___
> Users mailing list -- users@ovirt.org 
> To unsubscribe send an email to users-le...@ovirt.org 
> 
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ 
> 
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/ 
> 
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/JDGJW2C4JWRZJK5AVDXCDMBCL374K246/
>  
> 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FFCYHYB3WQOTVZ5MRARN6UH53B4TO6WD/

[ovirt-users] Re: 4.3.5 update error

2019-07-31 Thread Kapetanakis Giannis

On 31/07/2019 10:47, Kapetanakis Giannis wrote:
> Hi,
>
> Trying today engine-setup to update from 4.3.3 -> 4.3.5 I got this error:
>
> [ ERROR ] Failed to execute stage 'Setup validation': local variable 
> 'snapshot_cl' referenced before assignment
>
> In log file I see:
>
> 2019-07-31 10:43:00,375+0300 DEBUG otopi.context context._executeMethod:145 
> method exception
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in 
> _executeMethod
>     method['method']()
>   File 
> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>  line 437, in _validation
>     self._checkSnapshotCompatibilityVersion()
>   File 
> "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
>  line 212, in _checkSnapshotCompatibilityVersion
>     'v': snapshot_cl,
> UnboundLocalError: local variable 'snapshot_cl' referenced before assignment
> 2019-07-31 10:43:00,381+0300 ERROR otopi.context context._executeMethod:154 
> Failed to execute stage 'Setup validation': local variable 'snapshot_cl' 
> referenced before assignment
>
> Any hints?
>
> thanks
>
> Giannis


After removing all snapshots, I was able to continue the upgrade.

G
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JDGJW2C4JWRZJK5AVDXCDMBCL374K246/

[ovirt-users] 4.3.5 update error

2019-07-31 Thread Kapetanakis Giannis

Hi,

Trying today engine-setup to update from 4.3.3 -> 4.3.5 I got this error:

[ ERROR ] Failed to execute stage 'Setup validation': local variable 
'snapshot_cl' referenced before assignment

In log file I see:

2019-07-31 10:43:00,375+0300 DEBUG otopi.context context._executeMethod:145 
method exception
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in 
_executeMethod
    method['method']()
  File 
"/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
 line 437, in _validation
    self._checkSnapshotCompatibilityVersion()
  File 
"/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/db/schema.py",
 line 212, in _checkSnapshotCompatibilityVersion
    'v': snapshot_cl,
UnboundLocalError: local variable 'snapshot_cl' referenced before assignment
2019-07-31 10:43:00,381+0300 ERROR otopi.context context._executeMethod:154 
Failed to execute stage 'Setup validation': local variable 'snapshot_cl' 
referenced before assignment

Any hints?

thanks

Giannis
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KFGPTHVU2IZIGGOXDSHY6IUVKSZP63PZ/

[ovirt-users] Re: Use public-signed SSL certs?

[ovirt-users] hosted engine installation / multipath / iscsi

[ovirt-users] Re: Manual Migration not working and Dashboard broken after 4.3.4 update

[ovirt-users] [ANN] oVirt 4.3.5 first async is now available

[ovirt-users] Re: 4.3.5 update error

[ovirt-users] Re: 4.3.5 update error

[ovirt-users] Re: 4.3.5 update error

[ovirt-users] 4.3.5 update error

8 matches

Site Navigation

Mail list logo

Footer information