[ovirt-users] Re: Cluster CPU type update

[Mathieu Simon]

Hi Roy

> To make this change, I assume the process would be to turn off all VMs, set 
> cluster cpu type to broadwell, then turn on VMs to get the new CPU flags?
Exactly, you can only reliably change the CPU type for a cluster once
the last Westmere-based host is gone.

That's what I had to do when I when we upgraded CPU microcode on
clusters to enable the various CPU mitigations within the guests.
After changing the CPU type at the cluster level, you should see an
orange triangle shown with each VM in the Web UI indicating what
VM needs a restart in order to pick up the change.

Because of those various updates to CPU microcodes, check your current
BIOS/UEFI (though microcode is part of CentOS/RHEL) then check the
CPU Type in the tab of each Broadwell-based host. As of writing,
ideally set "Intel Broadwell IBRS SSBD MDS" (or the -noTSX) variant.

Regards
Mathieu
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LC74TBOBTFQ24YBHZJ7X3LDJB6SACD5/

[ovirt-users] Cluster CPU type update

[Morris, Roy]

Hello,

I'm running a 4.3 cluster with 56 VMs all set to default cluster and the 
cluster itself is set to Intel Westmere Family. I am getting a new server and 
retiring 3 old ones which brings me to my question.

When implementing the new host into the cluster and retiring the older hosts. I 
want to change the CPU type setting in the cluster default to Broadwell which 
is what my new 3 host cluster will be. To make this change, I assume the 
process would be to turn off all VMs, set cluster cpu type to broadwell, then 
turn on VMs to get the new CPU flags?

Just wanted to reach out and see if someone else has had to go through this 
before and has any notes/tips.

Best regards,
Roy
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKFGEOW5OI6A2U7X3TM57UUANL7UPGKW/

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[m . skrzetuski]

Now I find errors about subject alternative DNS names in the engine log.
My SSL certificate is generated for a DNS that is configured as alternate FQDN. 
How do I use SSL certificates with that?

2020-01-03 15:11:05,672+01 INFO  
[org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool 
-- 53) [] Value of property 'CINDERLIB_DB_PASSWORD' is '***'.
...skipping...
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleInitializing(TransferDiskImageCommand.java:552)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.executeStateHandler(TransferDiskImageCommand.java:478)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.proceedCommandExecution(TransferDiskImageCommand.java:465)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferImageCommandCallback.doPolling(TransferImageCommandCallback.java:21)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethodsImpl(CommandCallbacksPoller.java:175)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethods(CommandCallbacksPoller.java:109)
 [bll.jar:]
at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) 
[rt.jar:1.8.0_232]
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) 
[rt.jar:1.8.0_232]
at 
org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.access$201(ManagedScheduledThreadPoolExecutor.java:383)
 [javax.enterprise.concurrent-1.0.jar:]
at 
org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.run(ManagedScheduledThreadPoolExecutor.java:534)
 [javax.enterprise.concurrent-1.0.jar:]
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) 
[rt.jar:1.8.0_232]
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) 
[rt.jar:1.8.0_232]
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_232]
at 
org.glassfish.enterprise.concurrent.ManagedThreadFactoryImpl$ManagedThread.run(ManagedThreadFactoryImpl.java:250)
 [javax.enterprise.concurrent-1.0.jar:]
Caused by: java.security.cert.CertificateException: No subject alternative DNS 
name matching delirium.home found.
at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:214) 
[rt.jar:1.8.0_232]
at sun.security.util.HostnameChecker.match(HostnameChecker.java:96) 
[rt.jar:1.8.0_232]
at 
sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:462)
 [jsse.jar:1.8.0_232]
at 
sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:442)
 [jsse.jar:1.8.0_232]
at 
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:209)
 [jsse.jar:1.8.0_232]
at 
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132)
 [jsse.jar:1.8.0_232]
at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1621) 
[jsse.jar:1.8.0_232]
... 29 more
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PKCL73M35YBEIJDXXK4B6PFGU7XMMAWO/

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[m . skrzetuski]

Also, nice read @ https://bugzilla.redhat.com/show_bug.cgi?id=1385617 but 
doesn't help. I can't solve the issue.
I use alternate FQDN and my own ssl certs but imageio proxy/image upload seems 
to be broken because of that.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6G6CIZTR2OXCRVVLDJVUE5EKZXKLDX4V/

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[m . skrzetuski]

/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf seems to have correctly 
configured ssl certs.

ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F7AGFWVS26FB6WK3LMBNATRVR533ESVS/

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[m . skrzetuski]

I found exceptions in /var/log/ovirt-engine/engine.log so it's about SSL again 
(really annoying). Might be the error from 
https://access.redhat.com/solutions/2592941.

2020-01-03 17:34:30,067+01 ERROR 
[org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-77) 
[712bf33b-5c37-489e-bb52-b34f743975af] Failed to add image ticket to 
ovirt-imageio-proxy: javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) 
[jsse.jar:1.8.0_232]
at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639) 
[jsse.jar:1.8.0_232]
at 
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) 
[jsse.jar:1.8.0_232]
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) 
[jsse.jar:1.8.0_232]
at 
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) 
[jsse.jar:1.8.0_232]
at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) 
[jsse.jar:1.8.0_232]
at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) 
[jsse.jar:1.8.0_232]
at 
sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) 
[rt.jar:1.8.0_232]
at 
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
 [rt.jar:1.8.0_232]
at 
sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1340)
 [rt.jar:1.8.0_232]
at 
sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1315)
 [rt.jar:1.8.0_232]
at 
sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:264)
 [rt.jar:1.8.0_232]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.addImageTicketToProxy(TransferDiskImageCommand.java:1059)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.startImageTransferSession(TransferDiskImageCommand.java:982)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleImageIsReadyForTransfer(TransferDiskImageCommand.java:581)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleInitializing(TransferDiskImageCommand.java:552)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.executeStateHandler(TransferDiskImageCommand.java:478)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.proceedCommandExecution(TransferDiskImageCommand.java:465)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.storage.disk.image.TransferImageCommandCallback.doPolling(TransferImageCommandCallback.java:21)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethodsImpl(CommandCallbacksPoller.java:175)
 [bll.jar:]
at 
org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethods(CommandCallbacksPoller.java:109)
 [bll.jar:]
at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) 
[rt.jar:1.8.0_232]
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) 
[rt.jar:1.8.0_232]
at 
org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.access$201(ManagedScheduledThreadPoolExecutor.java:383)
 [javax.enterprise.concurrent-1.0.jar:]
at 
org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.run(ManagedScheduledThreadPoolExecutor.java:534)
 [javax.enterprise.concurrent-1.0.jar:]
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) 
[rt.jar:1.8.0_232]
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) 
[rt.jar:1.8.0_232]
at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_232]
at 
org.glassfish.enterprise.concurrent.ManagedThreadFactoryImpl$ManagedThread.run(ManagedThreadFactoryImpl.java:250)
 [javax.enterprise.concurrent-1.0.jar:]
Caused by: sun.security.validator.ValidatorException: PKIX path building 
failed: 

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[m . skrzetuski]

This is what I see in /var/log/ovirt-imageio-daemon/daemon.log.

020-01-03 16:54:03,176 INFO(Thread-1) [http] OPEN client=local
2020-01-03 16:54:03,178 INFO(Thread-1) [tickets] [local] ADD 
ticket={u'uuid': u'f1baa082-393a-47af-8165-09b0cc9913eb', u'ops': [u'write'], 
u'url': 
u'file:///rhev/data-center/mnt/_vmisos/d9a3e101-7cfe-446f-8ae8-13fac321ae2c/images/0217c498-9aa9-45f4-9964-6edce9e2817f/d8e80353-f409-4cd1-80fc-9546b3fd09fe',
 u'sparse': True, u'timeout': 300, u'transfer_id': 
u'5984405b-da3b-4ae4-99e9-ccec1556f213', u'size': 942407680}
2020-01-03 16:54:03,179 INFO(Thread-1) [http] CLOSE client=local 
[connection=0.002770/1, dispatch=0.000466/1]
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CCNXTAGPSQOUBWE35T3QXBKW5NMIDQSN/

[ovirt-users] Can we please migrate to 2020 and get a user friendly issues/support tool?

[m . skrzetuski]

Hello everyone,

I can speak only for myself but I find mailing lists so 1990. Could we migrate 
this list to something (user friendly) Jira like?
I have to admit it's rather difficult to search an read the archive for old 
issues in the e-mail format.

Kind regards
Skrzetuski
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4WRVQKDASO7YORTR24UINCHVGAWWXU4T/

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[Maciej Skrzetuski]

Hello Jan,

1) When I upload something the UI shows "Paused by System" and nothing gets
uploaded.
[image: Screenshot 2020-01-03 at 16.54.37.png]
2) Yes, you are right. I can use qcow2 images. However I get same results
with them.

Kind regards
Skrzetuski

On Fri, 3 Jan 2020 at 10:32, Jan Zmeskal  wrote:

> Hello,
>
> I'll do my best to help you with that but first let's look closely into
> your situation. Specifically I have two questions:
>
> 1) What exactly was the issue when you tried to upload the ISO to data
> domain? I've just tried that on oVirt 4.3.7 and has no problem with it.
> 2) Can you double check that you've got the right cloud image? As far as I
> know cloud images are usually provided in QCOW2 format, like here:
> https://cloud.centos.org/centos/7/images/  Do you *need* to use ISO files
> at all?
>
> Best regards
> Jan
>
> On Thu, Jan 2, 2020 at 10:36 PM  wrote:
>
>> Hello there,
>>
>> I'm a bit confused about provisioning VMs (with Ansible).
>>
>> At first I wanted to setup a VM manually over the web UI, just to see how
>> it works.
>> I was not able to upload ISO files with cloud images to a data domain but
>> I was able to upload to ISO domain. However I read that ISO domains are
>> deprecated (see
>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/sect-the_iso_uploader_tool
>> ).
>>
>> So what is the workflow/process of provisioning VMs from cloud images
>> with cloud init? Where do I store my ISOs?
>>
>> Kind regards
>> skrzetuski
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIE75WTDKH52P5TNQGUW4I6TGH7UKCRN/
>>
>
>
> --
>
> Jan Zmeskal
>
> Quality Engineer, RHV Core System
>
> Red Hat 
> 
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7V3O64Z4UNBDKSRYOVBUAJ2QEINOAXJW/

[ovirt-users] Re: Power management and storage domains error when running Ansible tasks!

[m . skrzetuski]

OK, so for the storage part: It looks like I was taking storage for storage 
domain and those seem to be two different things. Seems I can't create a 
storage domain with "ovirt.infra".
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M5XA3V6CV7O63FQADUTXVUHIYU2UQWHV/

[ovirt-users] Power management and storage domains error when running Ansible tasks!

[m . skrzetuski]

Hello everyone,

when I create a host via Ansible role "ovirt.infra" I get an error that power 
management is not enabled (red exclamation sign in the UI). My vars in the 
playbook look as follows.

hosts:
- name: delirium
  address: delirium.home
  cluster: Matrix
  public_key: true
  power_management_enabled: true

Why is power management not enabled?
What is it used for and how do I enable it with Ansible?

I am trying to create a storage domain as follows.

storages:
vmdata:
  domain_function: data
  state: present
  data_center: Matrix
  localfs: 
path: /vmisos
  host: delirium.home
vmisos:
  domain_function: data
  state: present
  data_center: Matrix
  localfs: 
path: /vmdata
  host: delirium.home

However I get the following error.

msg: Fault reason is "Incomplete parameters". Fault detail is "StorageDomain 
[storage] required for add". HTTP response code is 400.
An exception occurred during task execution. To see the full traceback, use 
-vvv. The error was: Error: Fault reason is "Incomplete parameters". Fault 
detail is "StorageDomain [storage] required for add". HTTP response code is 400.
failed: [delirium.home] (item={'key': 'vmisos', 'value': {'name': 'isos', 
'domain_function': 'data', 'state': 'present', 'data_center': 'Matrix', 
'localfs': {'path': '/vmdata'}, 'host': 'delirium.home'}}) => changed=false

What is "storage" here? I don't see "storage" as parameter in 
https://docs.ansible.com/ansible/latest/modules/ovirt_storage_domain_module.html#ovirt-storage-domain-module.

Kind regards
skrzetuski
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/V43K5NVHZAU5HS5EUUBBAAZMVE6NVHRW/

[ovirt-users] Re: Can't add host with "Certificate enrollment failed". Any ideas?

[m . skrzetuski]

OK, reading logs helps. I accidently destroyed the CA file.

020-01-03 13:06:00,806+01 ERROR 
[org.ovirt.engine.core.utils.hostinstall.OpenSslCAWrapper] (VdsDeploy) 
[3ef678c] Sign Certificate request failed with exit code 1
2020-01-03 13:06:00,806+01 ERROR 
[org.ovirt.engine.core.utils.hostinstall.OpenSslCAWrapper] (VdsDeploy) 
[3ef678c] Sign Certificate request script errors:
Using configuration from openssl.conf
CA certificate and CA private key do not match
140008583800720:error:0B080074:x509 certificate 
routines:X509_check_private_key:key values mismatch:x509_cmp.c:341:
Cannot sign certificate
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PUOB5TW5EXGVSZ43LR5GIGS4HY5OUCGZ/

[ovirt-users] Can't add host with "Certificate enrollment failed". Any ideas?

[m . skrzetuski]

Hello everyone,

I am trying to add a new host with the "ovirt.infra" role and use the following 
Ansible snippet for it.

hosts:
- name: delirium
  address: delirium.home
  cluster: Matrix
  public_key: true
  power_management_enabled: true

I am getting the following error.

msg: 'Error message: [''Host delirium installation failed. Certificate 
enrollment failed.'', ''An error has occurred during installation of Host 
delirium: Certificate enrollment failed.'']'

Any ideas? The error does not say what exactly is wrong.

The following are my SSL certs.

[skrzetuski@delirium ~]$ sudo ls -lR /etc/pki/ovirt-engine/
/etc/pki/ovirt-engine/:
total 68
lrwxrwxrwx. 1 root  root28 Jan  2 23:51 apache-ca.pem -> 
/etc/pki/ovirt-engine/ca.pem
-rw-r--r--. 1 root  root   384 Jan  2 23:51 cacert.conf
-rw-r--r--. 1 root  root   384 Jan  2 23:51 cacert.template
-rw-r--r--. 1 root  root   384 Nov 12 14:16 cacert.template.in
-rw-r--r--. 1 root  root  1647 Jan  3 01:12 ca.pem
-rw-r--r--. 1 root  root  1444 Jan  2 23:51 cert.conf
drwxr-xr-x. 2 ovirt ovirt 4096 Jan  2 23:52 certs
-rw-r--r--. 1 root  root  1444 Jan  2 23:51 cert.template
-rw-r--r--. 1 root  root  1156 Nov 12 14:16 cert.template.in
-rw-r--r--. 1 ovirt ovirt  800 Jan  2 23:52 database.txt
-rw-r--r--. 1 ovirt ovirt   20 Jan  2 23:52 database.txt.attr
-rw-r--r--. 1 ovirt ovirt   20 Jan  2 23:52 database.txt.attr.old
-rw-r--r--. 1 ovirt ovirt  733 Jan  2 23:52 database.txt.old
drwxr-xr-x. 2 root  root  4096 Jan  2 23:52 keys
-rw-r--r--. 1 root  root   550 Nov 12 14:16 openssl.conf
drwxr-x---. 2 ovirt ovirt   20 Jan  2 23:51 private
drwxr-xr-x. 2 ovirt ovirt 4096 Jan  3 12:22 requests
-rw-r--r--. 1 ovirt ovirt5 Jan  2 23:52 serial.txt
-rw-r--r--. 1 ovirt ovirt5 Jan  2 23:52 serial.txt.old

/etc/pki/ovirt-engine/certs:
total 244
-rw-r--r--. 1 root root 1310 Jan  2 23:51 1000.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1001.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1002.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1003.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1004.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1005.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1006.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1007.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1008.pem
-rw-r--r--. 1 root root 5109 Jan  2 23:51 1009.pem
-rw-r--r--. 1 root root 4925 Jan  2 23:52 100A.pem
-rw-r--r--. 1 root root 5011 Jan  2 23:52 100B.pem
-rw-r--r--. 1 root root 5011 Jan  2 23:52 100C.pem
-rw-r--r--. 1 root root 1968 Jan  3 01:12 apache.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 apache.cer.20200102235148
-rw-r--r--. 1 root root 1310 Jan  2 23:51 ca.der
-rw-r--r--. 1 root root 5109 Jan  2 23:51 engine.cer
-rw-r--r--. 1 root root 1727 Jan  2 23:51 imageio-proxy.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 imageio-proxy.cer.20200102235148
-rw-r--r--. 1 root root 5109 Jan  2 23:51 jboss.cer
-rw-r--r--. 1 root root 1727 Jan  2 23:51 ovirt-provider-ovn.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 ovirt-provider-ovn.cer.20200102235149
-rw-r--r--. 1 root root 1727 Jan  2 23:51 ovn-ndb.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 ovn-ndb.cer.20200102235148
-rw-r--r--. 1 root root 1727 Jan  2 23:51 ovn-sdb.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 ovn-sdb.cer.20200102235149
-rw-r--r--. 1 root root 1727 Jan  2 23:51 reports.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 reports.cer.20200102235148
-rw-r--r--. 1 root root 4925 Jan  2 23:52 vmconsole-proxy-helper.cer
-rw-r--r--. 1 root root 5011 Jan  2 23:52 vmconsole-proxy-host.cer
-rw-r--r--. 1 root root 1391 Jan  2 23:52 vmconsole-proxy-host-cert.pub
-rw-r--r--. 1 root root  381 Jan  2 23:52 vmconsole-proxy-host.pub
-rw-r--r--. 1 root root 5011 Jan  2 23:52 vmconsole-proxy-user.cer
-rw-r--r--. 1 root root 1423 Jan  2 23:52 vmconsole-proxy-user-cert.pub
-rw-r--r--. 1 root root  381 Jan  2 23:52 vmconsole-proxy-user.pub
-rw-r--r--. 1 root root 1727 Jan  2 23:51 websocket-proxy.cer
-rw-r--r--. 1 root root 5109 Jan  2 23:51 websocket-proxy.cer.20200102235148

/etc/pki/ovirt-engine/keys:
total 84
-rw-r-. 1 rootovirt   1675 Jan  3 01:12 
apache.key.nopass
-rw---. 1 rootroot2709 Jan  2 23:51 apache.p12
-rw---. 1 ovirt   ovirt   1828 Jan  2 23:51 engine_id_rsa
-rw---. 1 ovirt   root2709 Jan  2 23:51 engine.p12
-rw---. 1 rootroot1828 Jan  2 23:51 
imageio-proxy.key.nopass
-rw---. 1 rootroot2709 Jan  2 23:51 
imageio-proxy.p12
-rw---. 1 ovirt   root2709 Jan  2 23:51 jboss.p12
-rw---. 1 rootroot1828 Jan  2 23:51 
ovirt-provider-ovn.key.nopass
-rw---. 1 rootroot2709 Jan  2 23:51 
ovirt-provider-ovn.p12
-rw---. 1 rootroot1828 Jan  2 23:51 
ovn-ndb.key.nopass
-rw---. 1 rootroot2709 Jan  2 23:51 ovn-ndb.p12

[ovirt-users] Re: Confusion about storage domain ISO. How do I provision VMs?

[Jan Zmeskal]

Hello,

I'll do my best to help you with that but first let's look closely into
your situation. Specifically I have two questions:

1) What exactly was the issue when you tried to upload the ISO to data
domain? I've just tried that on oVirt 4.3.7 and has no problem with it.
2) Can you double check that you've got the right cloud image? As far as I
know cloud images are usually provided in QCOW2 format, like here:
https://cloud.centos.org/centos/7/images/  Do you *need* to use ISO files
at all?

Best regards
Jan

On Thu, Jan 2, 2020 at 10:36 PM  wrote:

> Hello there,
>
> I'm a bit confused about provisioning VMs (with Ansible).
>
> At first I wanted to setup a VM manually over the web UI, just to see how
> it works.
> I was not able to upload ISO files with cloud images to a data domain but
> I was able to upload to ISO domain. However I read that ISO domains are
> deprecated (see
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/sect-the_iso_uploader_tool
> ).
>
> So what is the workflow/process of provisioning VMs from cloud images with
> cloud init? Where do I store my ISOs?
>
> Kind regards
> skrzetuski
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WIE75WTDKH52P5TNQGUW4I6TGH7UKCRN/
>


-- 

Jan Zmeskal

Quality Engineer, RHV Core System

Red Hat 

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LFV3PCN2JECKCT4BVASJGSBSNKQHI4UX/