[ovirt-users] Re: [External] : Import disk and ISO failed status "Paused by System"

2024-09-02 Thread Alex
Thank you Sungaila!

I installed ovirt-engine on another server in a virtual machine running on
KVM and it solved the problem.

Alex

Em seg., 2 de set. de 2024 às 16:54, Marcos Sungaila <
marcos.sunga...@oracle.com> escreveu:

> Hi,
>
> You said:
> > I'm running ovirt-engine and ovirt-host on the same server.
>
> A server cannot run the Engine Administration portal and the KVM
> hypervisor at same time.
> You can install the Engine as an embedded VM (self-hosted engine) and
> configure the host to act as an hypervisor, but cannot configure the server
> by running the engine-setup command and expecting to add it as a KVM host
> to the cluster.
>
> Marcos
>
> -Original Message-
> From: branco...@gmail.com 
> Sent: Friday, August 23, 2024 7:45 AM
> To: users@ovirt.org
> Subject: [External] : [ovirt-users] Import disk and ISO failed status
> "Paused by System"
>
> OLVM version 8.5
> OS Server OL8.10
>
> I'm running ovirt-engine and ovirt-host on the same server.
>
> I'm having problems trying to import a qcow2 disk or an ISO to the OVLM
> 4.5 storage. The disk is in the status "Paused by System" and the following
> error is displayed:
>
> Transfer was stopped by system. Reason: failed to add host image ticket.
> VDSM pegasus.atech.com.br command AddImageTicketVDS failed: Image daemon
> is unsupported: ()
>
> /var/log/vdsm/vdsm.log
>
> 2024-08-23 10:03:21,453+ ERROR (jsonrpc/2) [storage.taskmanager.task]
> (Task='483660c9-62ef-461e-903c-a62a6da2c0b3') Unexpected error (task:860)
> Traceback (most recent call last):
>   File "/usr/lib/python3.6/site-packages/vdsm/storage/task.py", line 867,
> in _run
> return fn(*args, **kargs)
>   File "", line 2, in add_image_ticket
>   File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 33, in
> method
> ret = func(*args, **kwargs)
>   File "/usr/lib/python3.6/site-packages/vdsm/storage/hsm.py", line 2716,
> in add_image_ticket
> imagetickets.add_ticket(ticket)
>   File "/usr/lib/python3.6/site-packages/vdsm/storage/imagetickets.py",
> line 48, in wrapper
> raise se.ImageDaemonUnsupported()
> vdsm.storage.exception.ImageDaemonUnsupported: Image daemon is
> unsupported: ()
> 2024-08-23 10:03:21,453+ INFO  (jsonrpc/2) [storage.taskmanager.task]
> (Task='483660c9-62ef-461e-903c-a62a6da2c0b3') aborting: Task is aborted:
> 'value=Image daemon is unsupported: () abortedcode=483' (task:1165)
> 2024-08-23 10:03:21,454+ ERROR (jsonrpc/2) [storage.dispatcher] FINISH
> add_image_ticket error=Image daemon is unsupported: () (dispatcher:66)
> 2024-08-23 10:03:21,454+ INFO  (jsonrpc/2) [jsonrpc.JsonRpcServer] RPC
> call Host.add_image_ticket failed (error 483) in 0.00 seconds (__init__:301)
> 2024-08-23 10:03:22,480+ INFO  (jsonrpc/4) [vdsm.api] START
> getVolumeInfo(sdUUID='285dbac7-110f-439b-8904-0e7338c1d03c',
> spUUID='a6b1076b-2d25-436b-b715-e5a050086221',
> imgUUID='7367ebc3-7086-474f-8f50-0c6903de46e4',
> volUUID='aea06a98-3471-4bdb-a034-95614e4c2522')
> from=:::192.168.1.2,42340,
> flow_id=f2eb55b2-1c95-42a1-a62e-cb827e1ed47e,
> task_id=6bf12ace-c722-4597-86ab-9401029e6d2f (api:31)
> 2024-08-23 10:03:22,485+ INFO  (jsonrpc/4) [storage.volumemanifest]
> Info request: sdUUID=285dbac7-110f-439b-8904-0e7338c1d03c
> imgUUID=7367ebc3-7086-474f-8f50-0c6903de46e4 volUUID =
> aea06a98-3471-4bdb-a034-95614e4c2522  (volume:229)
> 2024-08-23 10:03:22,501+ INFO  (jsonrpc/4) [storage.volumemanifest]
> 285dbac7-110f-439b-8904-0e7338c1d03c/7367ebc3-7086-474f-8f50-0c6903de46e4/aea06a98-3471-4bdb-a034-95614e4c2522
> info is {'uuid': 'aea06a98-3471-4bdb-a034-95614e4c2522', 'type': 'SPARSE',
> 'format': 'RAW', 'disktype': 'ISOF', 'voltype': 'LEAF', 'capacity':
> '376832', 'parent': '----', 'description':
> '{"DiskAlias":"test.iso","DiskDescription":"test.iso"}', 'pool': '',
> 'domain': '285dbac7-110f-439b-8904-0e7338c1d03c', 'image':
> '7367ebc3-7086-474f-8f50-0c6903de46e4', 'ctime': '1724407386', 'mtime':
> '0', 'legality': 'ILLEGAL', 'generation': 0, 'sequence': 1, 'apparentsize':
> '376832', 'truesize': '4096', 'status': 'ILLEGAL', 'lease': {'path':
> '/rhev/data

[ovirt-users] Re: Any plans on oVirt Major release with new feature?

2024-06-11 Thread Alex K
On Tue, Jun 11, 2024 at 5:23 PM Jean-Louis Dupond via Users 
wrote:

> I have some good news to share, and that is that we will continue
> working on oVirt!
> As we want to keep development active, we can share that we have an open
> position to work on oVirt now:
>
> https://careers.team.blue/jobs/4597190-java-python-developer-virtualization-stack
>
> If somebody would be interested, feel free to contact me directly.
> But you can expect more and more patches from our side hopefully :)
>
> And hopefully some other companies jump the ship and get oVIrt
> development up-to-speed again!
> As there is no (open source) alternative at this moment that comes even
> close to oVirt.
>
Great to hear this! oVirt is indeed a great project.

>
> On 27/05/2024 09:22, Sandro Bonazzola wrote:
> > Hi, let me try to answer your questions:
> >
> >> I would like to know if there is any plans for major release with new
> feature for consider alternative of other hypervisor?
> > As of today, there's no discussion about a new major release neither on
> devel mailing list nor on users mailing list. Nobody stepped in to  lead
> the next major release development. I think this is a good thread for those
> companies who are thinking about putting some effort on oVirt sharing their
> plans.
> >
> >> I've been using the oracle ovirt for couple of years pretty good one. I
> would like know the future of oVirt as well along with feature plans.
> > I wrote a blog post about the future of oVirt around 2 years ago here:
> https://blogs.ovirt.org/2022/02/future-of-ovirt-february-2022/ ; nothing
> really changed since then.
> >
> >> Since Red Hat Virtualizazion is going out of support, we need to know
> if Ovirt is still alive and development continues.
> > Despite no major release is currently being planned, yes, oVirt
> development is still continuing. As an example here are the commits since
> last release of oVirt Engine package:
> https://github.com/oVirt/ovirt-engine/compare/ovirt-engine-4.5.6...master
> >
> >>   do you know if there is a professional support offer for an Ovirt
> production infrastructure?
> > You can find something here:
> https://www.ovirt.org/community/user-stories/users-and-providers.html ; I
> guess there are others who probably will reply to you in private.
> >
> > Hope it helps,
> >
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GPD6DRW2WTD42T24Z3SYTCER4K7GOM5R/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZKLW3NBIBZVTSMU4S62BWTLBZKVDBIXD/


[ovirt-users] Re: Ovirt standalone engine ssl cert is about to expire

2024-05-27 Thread Alex K
On Mon, May 27, 2024 at 3:44 PM Jayme  wrote:

> I believe all you should need to do is run engine-setup --offline
>
Yes this is sufficient to renew the cert.

>
> On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users <
> users@ovirt.org> wrote:
>
>> Need some help with the renewal of the ssl certificate (I believe it is a
>> self-signed cert )that is about to expire in a month, this is a standalone
>> ovirt engine running  software Version:4.3.4.3-1.el7. The certificate was
>> good for 5 years and it is about to expire.
>>
>>
>>
>> As I understand correctly, this certificate is for the https access for
>> the management page.
>>
>>
>>
>> Can this be done on a running system without affecting any hosts or VMs?
>>
>>
>>
>> Any instructions for the standalone ovirt engine scenario that you guys
>> can share?
>>
>>
>>
>> Thanks a lot,
>>
>>
>>
>>
>>
>>
>>
>> *Software Version:*4.3.4.3-1.el7
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65M3PZN6XJ5TXR3J3OFB/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJGJIBMKLSVFGZXIFWYX/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FD5NOMLLXM47DTGNL76KDPTOE3IZQADE/


[ovirt-users] Re: Oracle Virtualization Manager 4.5 anyone?

2024-04-17 Thread Alex Crow via Users

Hi all,

The one big question I have, is: is Oracle contributing back to oVirt or 
do they plan to do so?


It seems there are still some talented people working on both, so why 
not pool that talent?


Best

Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VRNRPWOCGQFXPMXPGFLU4PO3U6SOWRTC/


[ovirt-users] Re: What is the status of the whole Ovirt Project?

2023-10-12 Thread Alex Crow via Users

Thanks Neal, your insight is very much appreciated.

A lot of people forget about SuSE, but it's got the same ethos that RH 
had a few years ago, and it's worth looking into.


I can imagine Fedora being a choice in CI/CD deployments but I'd be 
surprised is more old-fashioned companies would accept the risk. Going 
through a whole risk vs cost thing right now.


It does seem that OpenShift is a potent platform, and pulling out of OKD 
would be a horrible mess, so here's hoping that if oVirt dies that OKD 
is a viable platform for both containers and Virtualisation (ah, legacy 
workloads!). It's just a shame that oVirt no longer has the sponsorship, 
I've been relentlessly ragged on on Reddit for admitting to using it 
(mostly from Hyper-V fanbois), but it's far, far better than Hyper-V and 
much less restrictive than VMWare. Hyper-V had me pulling my remaining 
hair out almost every single day. Five clicks to get the MAC address of 
a VM? Dynamic MAC addresses not being cluster-wide and pinned to a VM, 
so they change after a migration? Yuck.


I will read that link now!

Best regards

Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KB7ABPHIO63TDWQLLPEEJD6YB7QBYQ35/


[ovirt-users] Re: What is the status of the whole Ovirt Project?

2023-09-07 Thread Alex Crow via Users

All,

I'd rather base against either Rocky or Alma in the shorter term, or 
Ubuntu/Debian for a longer view. oVirt IMHO is a superior product to 
anything else if you know your way around it. Fantastic and informative 
GUI, a great set of APIs, and pretty solid in terms of storage support. 
I'm running it hyperconverged over ZFS+DRBD with Corosync and Pacecmaker 
in a 2 node cluster.


I'm currently running a cluster on Rocky 8 and it's working perfectly at 
the moment. I'm not a fan of Gluster for its small I/O performance but 
I'm sure it's still a useful option for running VMs with heavy storage 
requirements with lesser small I/O performance requirements.


Fedora would get you fired from a lot of SME or enterprise environments. 
And with the mess around IBM/RH who knows if they'll drop OpenShift next 
and pull the devs out of OKD?


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FVSMQSPYXWJC3EO4IRM72HLPO3545V3O/


[ovirt-users] Re: What is the status of the whole Ovirt Project?

2023-07-20 Thread Alex McWhirter
Largely package / feature support. RHEL is clearly betting the farm on 
OpenShift / OKD. Which is fine, but the decision to depreciate / remove 
things in RHEL (spice qxl, gluster) are also reflected in CentOS Stream. 
Even if you want to backport things to Stream as rebuilds of old / 
existing packages to re-enable some of those features you are now 
fighting a moving target. Would be easier to target RHEL than Stream if 
that is the goal.


Fedora has no such depreciation of features, has a larger package 
library, and more room to grow oVirt into something more compelling. If 
the decision is made to base on CentOS Stream, might aa well base on 
Fedora instead as neither is going to have the full enterprise life 
cycle of RHEL and both will break things here and there. At least with 
Fedora you don't have to maintain an ever growing list of things to 
maintain to keep oVirt's feature set in tact.


In short, targeting RHEL over Fedora made sense when CentOS existed as a 
downstream rebuild, when RHV was a product still, and when the entire 
oVirt feature set was supported by RHEL. None of those things are true 
today, and instead of targeting a psuedo RHEL where you still have to 
maintain a bunch of extra depreciated packages without the lifecycle 
commitment, Fedora makes more sense to me.


My two cents anyways, for my use case not having Gluster or spice is a 
breaking change. While i wouldn't mind contributing to oVirt here and 
there as needed if someone picks up the pieces, i don't have the 
resources to also maintain the growing list of depreciated / cut 
features in the base OS.


On 2023-07-14 02:27, Sandro Bonazzola wrote:

Il giorno ven 14 lug 2023 alle ore 00:07 Alex McWhirter 
 ha scritto:



I would personally put CloudStack in the same category as OpenStack.
Really the only difference is monolithic vs micro services. Both scale
quite well regardless, just different designs. People can weigh the 
pros

and cons of either to figure out what suites them. CloudStack is
certainly an easier thing to wrap your head around initially.


[cut]

Otherwise closest FOSS thing i have found (spent over a year 
evaluating)
is CloudStack. I am still hopeful someone will step up to maintain 
oVirt
(Oracle?), but it's clear to me at this point it will need rebased 
onto

Fedora or something else to keep it's feature set fully alive.


I'm curious, why do you think Fedora rebase is necessary to keep oVirt 
alive?
We tried that for years and gave up as Fedora is moving way too fast to 
keep oVirt aligned with the changes.
CentOS Stream 9 has EOL is estimated to be 2027 according to 
https://centos.org/stream9/ and I expect CentOS Stream 10 to show up by 
the end of this summer according to 
https://www.phoronix.com/news/CentOS-Stream-10-Start (well, official GA 
will be in a year but I guess people can start playing with it much 
earlier).


--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle Operating System

Red Hat EMEA [1]

sbona...@redhat.com

[1]

Red Hat respects your work life balance. Therefore there is no need to 
answer this email out of your office hours.


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NTLNZVCFU525GKINY5U6VCHPVC5AFFCT/




Links:
--
[1] https://www.redhat.com/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7PVJ5DMBWB6QPXBWOKU7UOTP2C4KGE62/


[ovirt-users] Re: What is the status of the whole Ovirt Project?

2023-07-13 Thread Alex McWhirter
I would personally put CloudStack in the same category as OpenStack. 
Really the only difference is monolithic vs micro services. Both scale 
quite well regardless, just different designs. People can weigh the pros 
and cons of either to figure out what suites them. CloudStack is 
certainly an easier thing to wrap your head around initially.


There is also OpenNebula, similar to CloudStack in design. However their 
upgrade tool is closed source, so i can't recommend them as much as i 
would like to as i think they have a decent product otherwise.


ProxMox currently doesn't work as an oVirt replacement for us as it 
cannot scale beyond a single cluster and has limited multi tenancy 
support. I hear they have plans for multi cluster at some point, but 
currently i regard it as more akin to ESXi without vSphere. Where oVirt 
i would have compared closer to ESXi with vSphere.


I think XCP-ng has a bright future at the rate they are going, just 
doesn't currently supply all the features of oVirt.


OKD (OpenShift) virtualization is more or less just kubevirt. If all you 
need vm's for is a few server instances, works well enough. Feature wise 
it's not comparable to everything above, but if you can live with your 
vm's being treated more or less like containers workflow / life cycle 
wise and don't need much more then that, it probably gets the job done.


Harvester is another consideration if you think the OKD solution will 
work, but don't like the complexity. It's based on k3s, provides 
kubevirt, and is a much more simple install. I think they even provide 
an ISO installer.



Reality is, there is no great oVirt replacement so to speak. If you only 
needed oVirt to manage a single cluster, ProxMox probably fits the bill. 
XCP-ng as well if you are willing to do some leg work.


Otherwise closest FOSS thing i have found (spent over a year evaluating) 
is CloudStack. I am still hopeful someone will step up to maintain oVirt 
(Oracle?), but it's clear to me at this point it will need rebased onto 
Fedora or something else to keep it's feature set fully alive.



On 2023-07-13 11:10, Volenbovskyi, Konstantin via Users wrote:

Hi,
We switched from Gluster to NFS provided by SAN array: maybe it was
matter of combination of factors (configuration/version/whatever),
but it was unstable for us.
SPICE/QXL in RHEL 9: yeah, I understand that for some people it is
important (I saw that someone is doing some forks whatever)

I think that ovirt 4.5 (nightly build __) might be OK for some time,
but I think that alternatives are:
-OpenStack for larger setups (but be careful with distribution -as I
remember Red Hat abandons TripleO and introduces OpenShift stuff for
installation of OpenStack)
-ProxMox and CloudStack for all sizes.
-Maybe XCP-ng + (paid?) XenOrchestra, but I trust KVM/QEMU more than 
Xen __

OpenShift Virtualization/OKD Virtualization - I don't know...
Actually might be good if someone specifically comments on going from
ovirt to OpenShift Virtualization/OKD Virtualization.

Not sure if this statement below
https://news.ycombinator.com/item?id=32832999 is still correct and
what exactly are the consequences of 'OpenShift Virtualization is just
to give a path/time to migrate to containers'
"The whole purpose behind OpenShift Virtualization is to aid in
organization modernization as a way to consolidate workloads onto a
single platform while giving app dev time to migrate their work to
containers and microservice based deployments."



BR,
Konstantin

Am 13.07.23, 09:10 schrieb "Alex McWhirter" mailto:a...@triadic.us>>:


We still have a few oVirt and RHV installs kicking around, but between
this and some core features we use being removed from el8/9 (gluster,
spice / qxl, and probably others soon at this rate) we've heavily been
shifting gears away from both Red Hat and oVirt. Not to mention the
recent drama...


In the past we toyed around with the idea of helping maintain oVirt, 
but

with the list of things we'd need to support growing beyond oVirt and
into other bits as well, we aren't equipped to fight on multiple fronts
so to speak.


For the moment we've found a home with SUSE / Apache CloudStack, and
when el7 EOL's that's likely going to be our entire stack moving
forward.


On 2023-07-13 02:21, eshwa...@gmail.com <mailto:eshwa...@gmail.com> 
wrote:

I am beginning to have very similar thoughts. It's working fine for
me now, but at some point something big is going to break. I already
have VMWare running, and in fact, my two ESXi nodes have the exact
same hardware as my two KVM nodes. Would be simple to do, but I
really don't want to go just yet. At the same time, I don't want to
be the last person turning off the lights. Difficult times.
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.o

[ovirt-users] Re: What is the status of the whole Ovirt Project?

2023-07-13 Thread Alex McWhirter
We still have a few oVirt and RHV installs kicking around, but between 
this and some core features we use being removed from el8/9 (gluster, 
spice / qxl, and probably others soon at this rate) we've heavily been 
shifting gears away from both Red Hat and oVirt. Not to mention the 
recent drama...


In the past we toyed around with the idea of helping maintain oVirt, but 
with the list of things we'd need to support growing beyond oVirt and 
into other bits as well, we aren't equipped to fight on multiple fronts 
so to speak.


For the moment we've found a home with SUSE / Apache CloudStack, and 
when el7 EOL's that's likely going to be our entire stack moving 
forward.


On 2023-07-13 02:21, eshwa...@gmail.com wrote:

I am beginning to have very similar thoughts.  It's working fine for
me now, but at some point something big is going to break.  I already
have VMWare running, and in fact, my two ESXi nodes have the exact
same hardware as my two KVM nodes.  Would be simple to do, but I
really don't want to go just yet.  At the same time, I don't want to
be the last person turning off the lights.  Difficult times.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EJFIRAT6TNCS5TZUFPGBV5UZSCBW6LE4/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EFBHZ76GZ73HA52XJMGTRGTYCPIGNPHH/


[ovirt-users]Re: About oVirt’s future

2022-11-21 Thread Alex McWhirter
I have some manpower im willing to throw at oVirt, but i somewhat need 
to know if what the community wants and what we want are in line.


1. We'd bring back spice and maybe qxl. We are already maintaining forks 
of the ovirt and RH kernels for this. We use ovirt currently for a lot 
of VDI solutions paired with nvidia grid. Not usable over VNC.


2. Hyperconverged storage is important. I'd suggest integrations with 
linstor. Seems well aligned with ovirt. Bringing back gluster is likely 
the wrong move.


3. oVirt desperately needs vxlan support. Ideally integrating with FRR 
on the backend so an ovirt node can just plug into an exiting EVPN VXLAN 
setup.


4. some things need cut from ovirt, namely hosted engine and maybe the 
grafana stuff. Not that these aren't nice to have, but hosted engine 
rarely actually works reliable in it's current state (compare mailing 
list complaints of hosted engine vs other issues) and the grafana stuff 
can be pushed into a sub project.


5. It needs to do containers. Doesn't need to be the behemoth of OKD, 
but something more along the lines of what k3s does, for now.


These are the thing's i'd like to see done, and maybe also cut back some 
of the RHEL specific stuff to allow debian deployments (would massively 
help with userbase). Basically for the past year i've been tasked with 
figuring out if we are going to fork ovirt internally or move to 
OpenNebula. I prefer the ovirt option if the opportunity now exists to 
take things in another direction.


On 2022-11-15 03:31, Sandro Bonazzola wrote:

Il giorno lun 14 nov 2022 alle ore 23:40 Frank Wall  ha 
scritto:



Hi Didi,

thanks for keeping us updated. However, I'm concerned...

Ultimately, the future of oVirt lies in the hands of the community. 
If

you, as a community member, use and like oVirt, and want to see it
thrive, now is the best time to help with this!


I don't want to be rude, but this sounds to me like no developers
have shown interest in keeping oVirt alive. Is this true? Is no other
company actively developing oVirt anymore?


I've contacted directly all the companies with oVirt downstreams I was 
aware of.
I also contacted almost all the universities that asked for help in 
this mailing list.

I ended up contacting the major RHEL derivatives distributions.
So far nobody stepped in to take an active role on the oVirt project.
I saw some patches coming from individual contributors here and there 
but no company investment so far.



We worked hard over the last year or so on making sure the oVirt
project will be able to sustain development even without much
involvement from us - including moving most of the infrastructure 
from

private systems that were funded by/for oVirt/RHV, elsewhere - code
review from Gerrit to GitHub, and CI (Continuous Integration) from
jenkins to GitHub/Copr/CentOS CBS.


I appreciate the effort to make the source code accessible. However,
I'm also wondering: was any sort of governing organization 
established,

so that development could actually take place when RedHat pulls the
plug?


Yes, oVirt has an open governance: 
https://www.ovirt.org/community/about/governance.html
Right now in the oVirt board other than Red Hat there's a member of the 
Caltech university https://www.ovirt.org/community/about/board.html


The answer to this is probably related to my previous question, 
whether

or not there are any non-RedHat developers involved.

Ciao
- Frank
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5DQ3OLT3B5QALLFUK4OMKDYJEJXSYP7A/


--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING - Red Hat In-Vehicle OS

Red Hat EMEA [1]

sbona...@redhat.com

[1]

Red Hat respects your work life balance. Therefore there is no need to 
answer this email out of your office hours.


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IVCGZXVNOAFE44ASIH6UFZGURL3OUFRW/




Links:
--
[1] https://www.redhat.com/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NV2TD2L4ZCKSLTG46VFNWDNHPZBHGNOC/


[ovirt-users] Re: Gluster Performance issues

2022-02-23 Thread Alex Morrison
Hello All,

I believe the network is performing as expected, I did an iperf test:

[root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# iperf3 -c 10.10.1.2
Connecting to host 10.10.1.2, port 5201
[  5] local 10.10.1.1 port 38422 connected to 10.10.1.2 port 5201
[ ID] Interval   Transfer Bitrate Retr  Cwnd
[  5]   0.00-1.00   sec  1.08 GBytes  9.24 Gbits/sec0   2.96 MBytes
[  5]   1.00-2.00   sec  1.03 GBytes  8.81 Gbits/sec0   2.96 MBytes
[  5]   2.00-3.00   sec  1006 MBytes  8.44 Gbits/sec  101   1.45 MBytes
[  5]   3.00-4.00   sec  1.04 GBytes  8.92 Gbits/sec5901 KBytes
[  5]   4.00-5.00   sec  1.05 GBytes  9.01 Gbits/sec0957 KBytes
[  5]   5.00-6.00   sec  1.08 GBytes  9.23 Gbits/sec0990 KBytes
[  5]   6.00-7.00   sec  1008 MBytes  8.46 Gbits/sec  159655 KBytes
[  5]   7.00-8.00   sec  1.06 GBytes  9.11 Gbits/sec0970 KBytes
[  5]   8.00-9.00   sec  1.03 GBytes  8.85 Gbits/sec2829 KBytes
[  5]   9.00-10.00  sec  1.04 GBytes  8.96 Gbits/sec0947 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval   Transfer Bitrate Retr
[  5]   0.00-10.00  sec  10.4 GBytes  8.90 Gbits/sec  267 sender
[  5]   0.00-10.04  sec  10.4 GBytes  8.87 Gbits/sec
 receiver

iperf Done.

On Wed, Feb 23, 2022 at 11:45 AM Sunil Kumar Heggodu Gopala Acharya <
shegg...@redhat.com> wrote:

>
> Regards,
> Sunil
>
>
> On Wed, Feb 23, 2022 at 7:34 PM Derek Atkins  wrote:
>
>> Have you verified that you're actually getting 10Gbps between the hosts?
>>
>> -derek
>>
>> On Wed, February 23, 2022 9:02 am, Alex Morrison wrote:
>> > Hello Derek,
>> >
>> > We have a 10Gig connection dedicated to the storage network, nothing
>> else
>> > is on that switch.
>> >
>> > On Wed, Feb 23, 2022 at 9:49 AM Derek Atkins  wrote:
>> >
>> >> Hi,
>> >>
>> >> Another question which I don't see answered:   What is the underlying
>> >> connectivity between the Gluster hosts?
>> >>
>> >> -derek
>> >>
>> >> On Wed, February 23, 2022 8:39 am, Alex Morrison wrote:
>> >> > Hello Sunil,
>> >> >
>> >> > [root@ovirt1 ~]# gluster --version
>> >> > glusterfs 8.6
>> >> >
>> >> > same on all hosts
>>
> Latest Release-10.1(
> https://lists.gluster.org/pipermail/gluster-users/2022-February/039761.html)
> has some performance fixes which should help in this situation compared to
> the older gluster bits.
>
>> >> >
>> >> > On Wed, Feb 23, 2022 at 5:24 AM Sunil Kumar Heggodu Gopala Acharya <
>> >> > shegg...@redhat.com> wrote:
>> >> >
>> >> >> Hi,
>> >> >>
>> >> >> Which version of gluster is in use?
>> >> >>
>> >> >> Regards,
>> >> >>
>> >> >> Sunil kumar Acharya
>> >> >>
>> >> >> Red Hat
>> >> >>
>> >> >> <https://www.redhat.com>
>> >> >>
>> >> >> T: +91-8067935170
>> >> >> <http://redhatemailsignature-marketing.itos.redhat.com/>
>> >> >>
>> >> >> <https://red.ht/sig>
>> >> >> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
>> >> >>
>> >> >>
>> >> >>
>> >> >> On Wed, Feb 23, 2022 at 2:17 PM Alex Morrison
>> >> 
>> >> >> wrote:
>> >> >>
>> >> >>> Hello All,
>> >> >>>
>> >> >>> We have 3 servers with a raid 50 array each, we are having extreme
>> >> >>> performance issues with our gluster, writes on gluster seem to take
>> >> at
>> >> >>> least 3 times longer than on the raid directly. Can this be
>> >> improved?
>> >> >>> I've
>> >> >>> read through several other performance issues threads but have been
>> >> >>> unable
>> >> >>> to make any improvements
>> >> >>>
>> >> >>> "gluster volume info" and "gluster volume profile vmstore info" is
>> >> >>> below
>> >> >>>
>> >> >>>
>> >> >>>
>> >>
>> =
>> >&g

[ovirt-users] Re: Gluster Performance issues

2022-02-23 Thread Alex Morrison
Hello Derek,

We have a 10Gig connection dedicated to the storage network, nothing else
is on that switch.

On Wed, Feb 23, 2022 at 9:49 AM Derek Atkins  wrote:

> Hi,
>
> Another question which I don't see answered:   What is the underlying
> connectivity between the Gluster hosts?
>
> -derek
>
> On Wed, February 23, 2022 8:39 am, Alex Morrison wrote:
> > Hello Sunil,
> >
> > [root@ovirt1 ~]# gluster --version
> > glusterfs 8.6
> >
> > same on all hosts
> >
> > On Wed, Feb 23, 2022 at 5:24 AM Sunil Kumar Heggodu Gopala Acharya <
> > shegg...@redhat.com> wrote:
> >
> >> Hi,
> >>
> >> Which version of gluster is in use?
> >>
> >> Regards,
> >>
> >> Sunil kumar Acharya
> >>
> >> Red Hat
> >>
> >> <https://www.redhat.com>
> >>
> >> T: +91-8067935170
> >> <http://redhatemailsignature-marketing.itos.redhat.com/>
> >>
> >> <https://red.ht/sig>
> >> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
> >>
> >>
> >>
> >> On Wed, Feb 23, 2022 at 2:17 PM Alex Morrison 
> >> wrote:
> >>
> >>> Hello All,
> >>>
> >>> We have 3 servers with a raid 50 array each, we are having extreme
> >>> performance issues with our gluster, writes on gluster seem to take at
> >>> least 3 times longer than on the raid directly. Can this be improved?
> >>> I've
> >>> read through several other performance issues threads but have been
> >>> unable
> >>> to make any improvements
> >>>
> >>> "gluster volume info" and "gluster volume profile vmstore info" is
> >>> below
> >>>
> >>>
> >>>
> =
> >>>
> >>> -Inside Gluster - test took 35+ hours:
> >>> [root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s
> >>> 600G -n 0 -m TEST -f -b -u root
> >>> Using uid:0, gid:0.
> >>> Writing intelligently...done
> >>> Rewriting...done
> >>> Reading intelligently...done
> >>> start 'em...done...done...done...done...done...
> >>> Version  1.98   --Sequential Output-- --Sequential Input-
> >>> --Random-
> >>> -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
> >>> --Seeks--
> >>> Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
> >>>  /sec %CP
> >>> TEST   600G   35.7m  17 5824k   7112m  13
> >>> 182.7   6
> >>> Latency5466ms   12754ms  3499ms
> >>>  1589ms
> >>>
> >>>
> >>>
> 1.98,1.98,TEST,1,1644359706,600G,,8192,5,,,36598,17,5824,7,,,114950,13,182.7,6,,,5466ms,12754ms,,3499ms,1589ms,,
> >>>
> >>>
> >>>
> =
> >>>
> >>> -Outside Gluster - test took 18 minutes:
> >>> [root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s
> >>> 600G -n 0 -m TEST -f -b -u root
> >>> Using uid:0, gid:0.
> >>> Writing intelligently...done
> >>> Rewriting...done
> >>> Reading intelligently...done
> >>> start 'em...done...done...done...done...done...
> >>> Version  1.98   --Sequential Output-- --Sequential Input-
> >>> --Random-
> >>> -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
> >>> --Seeks--
> >>> Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
> >>>  /sec %CP
> >>> TEST   600G567m  78  149m  30307m  37
> >>>  83.0  57
> >>> Latency 205ms4630ms  1450ms
> >>> 679ms
> >>>
> >>>
> >>>
> 1.98,1.98,TEST,1,1648288012,600G,,8192,5,,,580384,78,152597,30,,,314533,37,83.0,57,,,205ms,4630ms,,1450ms,679ms,,
> >>>
> >>>
> >>>
> =
> >>>
> >>> [root@ovirt1 1801ed24-

[ovirt-users] Re: Gluster Performance issues

2022-02-23 Thread Alex Morrison
Hello Sunil,

[root@ovirt1 ~]# gluster --version
glusterfs 8.6

same on all hosts

On Wed, Feb 23, 2022 at 5:24 AM Sunil Kumar Heggodu Gopala Acharya <
shegg...@redhat.com> wrote:

> Hi,
>
> Which version of gluster is in use?
>
> Regards,
>
> Sunil kumar Acharya
>
> Red Hat
>
> <https://www.redhat.com>
>
> T: +91-8067935170 <http://redhatemailsignature-marketing.itos.redhat.com/>
>
> <https://red.ht/sig>
> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>
>
>
>
> On Wed, Feb 23, 2022 at 2:17 PM Alex Morrison 
> wrote:
>
>> Hello All,
>>
>> We have 3 servers with a raid 50 array each, we are having extreme
>> performance issues with our gluster, writes on gluster seem to take at
>> least 3 times longer than on the raid directly. Can this be improved? I've
>> read through several other performance issues threads but have been unable
>> to make any improvements
>>
>> "gluster volume info" and "gluster volume profile vmstore info" is below
>>
>>
>> =
>>
>> -Inside Gluster - test took 35+ hours:
>> [root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s
>> 600G -n 0 -m TEST -f -b -u root
>> Using uid:0, gid:0.
>> Writing intelligently...done
>> Rewriting...done
>> Reading intelligently...done
>> start 'em...done...done...done...done...done...
>> Version  1.98   --Sequential Output-- --Sequential Input-
>> --Random-
>> -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
>> --Seeks--
>> Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
>>  /sec %CP
>> TEST   600G   35.7m  17 5824k   7112m  13
>> 182.7   6
>> Latency5466ms   12754ms  3499ms
>>  1589ms
>>
>>
>> 1.98,1.98,TEST,1,1644359706,600G,,8192,5,,,36598,17,5824,7,,,114950,13,182.7,6,,,5466ms,12754ms,,3499ms,1589ms,,
>>
>>
>> =
>>
>> -Outside Gluster - test took 18 minutes:
>> [root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s
>> 600G -n 0 -m TEST -f -b -u root
>> Using uid:0, gid:0.
>> Writing intelligently...done
>> Rewriting...done
>> Reading intelligently...done
>> start 'em...done...done...done...done...done...
>> Version  1.98   --Sequential Output-- --Sequential Input-
>> --Random-
>> -Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
>> --Seeks--
>> Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP
>>  /sec %CP
>> TEST   600G567m  78  149m  30307m  37
>>  83.0  57
>> Latency 205ms4630ms  1450ms
>> 679ms
>>
>>
>> 1.98,1.98,TEST,1,1648288012,600G,,8192,5,,,580384,78,152597,30,,,314533,37,83.0,57,,,205ms,4630ms,,1450ms,679ms,,
>>
>>
>> =
>>
>> [root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# gluster volume info
>> Volume Name: engine
>> Type: Replicate
>> Volume ID: 7ed15c5a-f054-450c-bac9-3ad1b4e5931b
>> Status: Started
>> Snapshot Count: 0
>> Number of Bricks: 1 x 3 = 3
>> Transport-type: tcp
>> Bricks:
>> Brick1: ovirt1-storage.dgi:/gluster_bricks/engine/engine
>> Brick2: ovirt2-storage.dgi:/gluster_bricks/engine/engine
>> Brick3: ovirt3-storage.dgi:/gluster_bricks/engine/engine
>> Options Reconfigured:
>> cluster.granular-entry-heal: enable
>> performance.strict-o-direct: on
>> network.ping-timeout: 30
>> storage.owner-gid: 36
>> storage.owner-uid: 36
>> server.event-threads: 4
>> client.event-threads: 4
>> cluster.choose-local: off
>> user.cifs: off
>> features.shard: on
>> cluster.shd-wait-qlength: 1
>> cluster.shd-max-threads: 8
>> cluster.locking-scheme: granular
>> cluster.data-self-heal-algorithm: full
>> cluster.server-quorum-type: server
>> cluster.quorum-type: auto
>> cluster.eager-lock: enable
>> network.remote-dio: off
>> performance.low-prio-threads: 32
>> performance.io-cache: off
>> performance.read-ahead: off
>> performance.quick-read: off
>> transport

[ovirt-users] Gluster Performance issues

2022-02-23 Thread Alex Morrison
Hello All,

We have 3 servers with a raid 50 array each, we are having extreme
performance issues with our gluster, writes on gluster seem to take at
least 3 times longer than on the raid directly. Can this be improved? I've
read through several other performance issues threads but have been unable
to make any improvements

"gluster volume info" and "gluster volume profile vmstore info" is below

=

-Inside Gluster - test took 35+ hours:
[root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s 600G
-n 0 -m TEST -f -b -u root
Using uid:0, gid:0.
Writing intelligently...done
Rewriting...done
Reading intelligently...done
start 'em...done...done...done...done...done...
Version  1.98   --Sequential Output-- --Sequential Input-
--Random-
-Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
--Seeks--
Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec
%CP
TEST   600G   35.7m  17 5824k   7112m  13 182.7
  6
Latency5466ms   12754ms  3499ms
 1589ms

1.98,1.98,TEST,1,1644359706,600G,,8192,5,,,36598,17,5824,7,,,114950,13,182.7,6,,,5466ms,12754ms,,3499ms,1589ms,,

=

-Outside Gluster - test took 18 minutes:
[root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# bonnie++ -d . -s 600G
-n 0 -m TEST -f -b -u root
Using uid:0, gid:0.
Writing intelligently...done
Rewriting...done
Reading intelligently...done
start 'em...done...done...done...done...done...
Version  1.98   --Sequential Output-- --Sequential Input-
--Random-
-Per Chr- --Block-- -Rewrite- -Per Chr- --Block--
--Seeks--
Name:Size etc/sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec %CP  /sec
%CP
TEST   600G567m  78  149m  30307m  37  83.0
 57
Latency 205ms4630ms  1450ms
679ms

1.98,1.98,TEST,1,1648288012,600G,,8192,5,,,580384,78,152597,30,,,314533,37,83.0,57,,,205ms,4630ms,,1450ms,679ms,,

=

[root@ovirt1 1801ed24-5b55-4431-9813-496143367f66]# gluster volume info
Volume Name: engine
Type: Replicate
Volume ID: 7ed15c5a-f054-450c-bac9-3ad1b4e5931b
Status: Started
Snapshot Count: 0
Number of Bricks: 1 x 3 = 3
Transport-type: tcp
Bricks:
Brick1: ovirt1-storage.dgi:/gluster_bricks/engine/engine
Brick2: ovirt2-storage.dgi:/gluster_bricks/engine/engine
Brick3: ovirt3-storage.dgi:/gluster_bricks/engine/engine
Options Reconfigured:
cluster.granular-entry-heal: enable
performance.strict-o-direct: on
network.ping-timeout: 30
storage.owner-gid: 36
storage.owner-uid: 36
server.event-threads: 4
client.event-threads: 4
cluster.choose-local: off
user.cifs: off
features.shard: on
cluster.shd-wait-qlength: 1
cluster.shd-max-threads: 8
cluster.locking-scheme: granular
cluster.data-self-heal-algorithm: full
cluster.server-quorum-type: server
cluster.quorum-type: auto
cluster.eager-lock: enable
network.remote-dio: off
performance.low-prio-threads: 32
performance.io-cache: off
performance.read-ahead: off
performance.quick-read: off
transport.address-family: inet
storage.fips-mode-rchecksum: on
nfs.disable: on
performance.client-io-threads: on
diagnostics.latency-measurement: on
diagnostics.count-fop-hits: on

Volume Name: vmstore
Type: Replicate
Volume ID: 2670ff29-8d43-4610-a437-c6ec2c235753
Status: Started
Snapshot Count: 0
Number of Bricks: 1 x 3 = 3
Transport-type: tcp
Bricks:
Brick1: ovirt1-storage.dgi:/gluster_bricks/vmstore/vmstore
Brick2: ovirt2-storage.dgi:/gluster_bricks/vmstore/vmstore
Brick3: ovirt3-storage.dgi:/gluster_bricks/vmstore/vmstore
Options Reconfigured:
cluster.granular-entry-heal: enable
performance.strict-o-direct: on
network.ping-timeout: 20
storage.owner-gid: 36
storage.owner-uid: 36
server.event-threads: 4
client.event-threads: 4
cluster.choose-local: off
user.cifs: off
features.shard: on
cluster.shd-wait-qlength: 1
cluster.shd-max-threads: 8
cluster.locking-scheme: granular
cluster.data-self-heal-algorithm: full
cluster.server-quorum-type: server
cluster.quorum-type: auto
cluster.eager-lock: enable
network.remote-dio: off
performance.low-prio-threads: 32
performance.io-cache: off
performance.read-ahead: off
performance.quick-read: off
transport.address-family: inet
storage.fips-mode-rchecksum: on
nfs.disable: on
performance.client-io-threads: on
diagnostics.latency-measurement: on
diagnostics.count-fop-hits: on
server.tcp-user-timeout: 20
server.keepalive-time: 10
server.keepalive-interval: 2
server.keepalive-count: 5
cluster.lookup-optimize: off

==

[ovirt-users] Re: oVirt alternatives

2022-02-05 Thread Alex McWhirter

Oh i have spent years looking.

ProxMox is probably the closest option, but has no multi-clustering 
support. The clusters are more or less isolated from each other, and 
would need another layer if you needed the ability to migrate between 
them.


XCP-ng, cool. No spice support. No UI for managing clustered storage 
that is open source.


Harvester, probably the closest / newest contender. Needs a lot more 
attention / work.


OpenNebula, more like a DIY AWS than anything else, but was functional 
last i played with it.




Has anyone actually played with OpenShift virtualization (replaces RHV)? 
Wonder if OKD supports it with a similar model?


On 2022-02-05 07:40, Thomas Hoberg wrote:

There is unfortunately no formal announcement on the fate of oVirt,
but with RHGS and RHV having a known end-of-life, oVirt may well shut
down in Q2.

So it's time to hunt for an alternative for those of us to came to
oVirt because they had already rejected vSAN or Nutanix.

Let's post what we find here in this thread.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R4YFNNCTW5VVVRKSV2OORQ2UWZ2MTUDD/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EYPC6QXF55UCQPMQL5LDU6XMAF2CZOEG/


[ovirt-users] Re: no QXL ?

2021-12-07 Thread Alex McWhirter
It's being removed from RHEL 9, unsure of reasoning. 


So this mean that oVirt cannot offer SPICE/QXL on RHEL9, there is no
spice package, qemu is compiled without SPICE/QXL support, the kernel
does not support QXL video drivers. 


It's not that oVirt is killing off SPICE/QXL, but rather RHEL9 is and
oVirt cannot support a feature not available on the host OS unless 3rd
party packages or a SiG makes them available. 


On 2021-12-07 14:14, Patrick Hibbs wrote:

Hello, 

Can I ask why this is being removed? 

The linked bugzilla report doesn't give a reason, and at least two others have expressed concerns over SPICE's deprecation. 

Personally, I would like to know why it's being removed entirely with no recourse instead of becoming an option to enable in the VM config, or an optional RPM that can be installed by the sysadmin. 

Thanks. 

On Tue, 2021-12-07 at 09:41 +0200, Arik Hadas wrote: 

On Tue, Dec 7, 2021 at 8:33 AM Patrick Hibbs  wrote: 

Hello, 

Are we to assume that VNC mode is the only thing that will be supported for the VM consoles moving forward then?  
As the pure SPICE mode only works with QXL display as far as I can tell. 

I ask because the VNC or SPICE+VNC modes haven't worked in my environment for over a year now, and that change 
would effectively prevent the use of any VM console in my environment.  (Use of VNC with remote viewer always gives 
me an authentication error.) Not that it's a normal environment, but that kind of thing should be advertised more. Just in case 
simillar issues exist in other deployments. 

Yes, one would need to make sure vnc/vga works well before upgrading to the next cluster-level (in oVirt 4.5) 
In general it is recommended to test the configuration in the new cluster-level by setting some representative VMs in the environment with a custom compatibility level  and check that they work properly before upgrading to that cluster-level. 

Thanks. 

On Mon, 2021-12-06 at 22:03 +0200, Arik Hadas wrote: 

On Mon, Dec 6, 2021 at 8:45 PM lejeczek via Users  wrote: 


On 06/12/2021 17:42, lejeczek via Users wrote:

Hi.

I've Qemu/Libvirt from 
ovirt-release-master-4.5.0-0.0.master.20211206152702.gitebb0229.el9.noarch 
and it seems QXL is not there.

Is that a fluke or intention?
Do you have QXL working?

upss.. pardon me, these are from CentOS 9 Steam own repos 
actually. 

Right, and that's the reason for the ongoing work on removing qxl on cluster level 4.7: 
https://bugzilla.redhat.com/show_bug.cgi?id=1976607 


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/DZMAQQJMPHD2L4DPVHTET5N4KB4MZDUY/ 
___ 
Users mailing list -- users@ovirt.org 
To unsubscribe send an email to users-le...@ovirt.org 
Privacy Statement: https://www.ovirt.org/privacy-policy.html 
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ 
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/22NZAQL46WMEFFKQ66EKZBHGE5KCX3MY/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GT5YYVAFM4P7AMCFFCJNYZO75Y6M3H4R/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UVPLNOGVY6DD6S7HKC5JEZ43N4NLHMRY/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GA7YUKUDR466NGHP7TMP6TFQLWFMH4WU/


[ovirt-users] Re: no QXL ?

2021-12-07 Thread Alex McWhirter
Additionally, should this go forward. I would be interested in 
maintaining a 3rd party repo with patched packages to keep SPICE/QXL 
support if anyone else would like to join.


On 2021-12-07 10:08, Alex McWhirter wrote:

I've sent my concerns to redhat, this would force us to look at other
software and more than likely no longer be red hat customers.

On 2021-12-07 09:15, Neal Gompa wrote:
On Tue, Dec 7, 2021 at 8:49 AM Rik Theys  
wrote:


Hi,

Will SPICE be deprecated or fully removed in oVirt 4.5?

Since spice is still more performant than VNC and also has more 
features such as USB redirection, why is it being phased out?


Which connection method should we use to connect clients with a VM 
from a pool when USB redirection is also a requirement?




There will be no way to do it. Please file bugs and support cases to
Red Hat telling them these features are needed. Then maybe they'll
reconsider...

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E7RPORLDTLLLSTUQDQPONFJYKA64Z6BP/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WEYNY7DKWYOFNRBT7XBRAY5EVRPUCET7/


[ovirt-users] Re: no QXL ?

2021-12-07 Thread Alex McWhirter
I've sent my concerns to redhat, this would force us to look at other 
software and more than likely no longer be red hat customers.


On 2021-12-07 09:15, Neal Gompa wrote:
On Tue, Dec 7, 2021 at 8:49 AM Rik Theys  
wrote:


Hi,

Will SPICE be deprecated or fully removed in oVirt 4.5?

Since spice is still more performant than VNC and also has more 
features such as USB redirection, why is it being phased out?


Which connection method should we use to connect clients with a VM 
from a pool when USB redirection is also a requirement?




There will be no way to do it. Please file bugs and support cases to
Red Hat telling them these features are needed. Then maybe they'll
reconsider...

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E7RPORLDTLLLSTUQDQPONFJYKA64Z6BP/


[ovirt-users] Re: Creating VMs from templates with their own disks

2021-11-17 Thread Alex McWhirter

On 2021-11-17 13:50, Sina Owolabi wrote:

Ok thanks  
Sounds odd but no problem  

How do I make  the new VM use its own disk, named after itself? 

On Wed, 17 Nov 2021 at 19:45, Alex McWhirter  wrote: 


On 2021-11-17 12:02, notify.s...@gmail.com wrote:

Hi All

Im very stumped on how to create VMs from templates I've made, but
having them installed with their own disks.
Please can some one guide me on how to do this?
I have Ovirt running, with local storage hypervisors.

Anytime I try to use a template, the vm is created and booted with the
template's disk.
I would especially appreciate how to do this with ansible.
Im trying to automate CentOS and Ubuntu VMs.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OX5MWWMYAW4OTYE4NFETM4WFL2YEQFBZ/


When you make a VM from a template there are two possibilities.

If the VM type is set to desktop, a qcow overlay is created against the 
template's disk images. Any changes made in the VM are stored in the 
overlay..


If the VM type is set to server the template's disks are copied to a new 
disk, it will have the same name as the template disk, but it is in fact 
a new disk with the template data copied over.

--
Sent from MetroMail


You can create a template with no disk, then VM's created from that
template will also have no disk. Then add a new disk to the VM after you
create it. This is how the default blank template works. You can also
create a template with an empty disk, then every VM created will also
get an empty disk by default. You can always rename disks as well.___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TBIPIMGW7C4Q2IKQWZEKJJRCHMKK2FZC/


[ovirt-users] Re: Creating VMs from templates with their own disks

2021-11-17 Thread Alex McWhirter

On 2021-11-17 12:02, notify.s...@gmail.com wrote:

Hi All

Im very stumped on how to create VMs from templates I've made, but
having them installed with their own disks.
Please can some one guide me on how to do this?
I have Ovirt running, with local storage hypervisors.

Anytime I try to use a template, the vm is created and booted with the
template's disk.
I would especially appreciate how to do this with ansible.
Im trying to automate CentOS and Ubuntu VMs.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OX5MWWMYAW4OTYE4NFETM4WFL2YEQFBZ/


When you make a VM from a template there are two possibilities.

If the VM type is set to desktop, a qcow overlay is created against the 
template's disk images. Any changes made in the VM are stored in the 
overlay..


If the VM type is set to server the template's disks are copied to a new 
disk, it will have the same name as the template disk, but it is in fact 
a new disk with the template data copied over.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XKM4XJD7IU6CYDY2GTG3WOLXEZP2QVW4/


[ovirt-users] Re: Cannot to update hosts, nothing provides libvirt-daemon-kvm >= 7.6.0-2 needed by vdsm-4.40.90.4-1.el8.x86_64

2021-11-03 Thread Alex McWhirter

On 2021-11-03 16:52, Patrick Lomakin wrote:

I think it's a bug. I couldn't find any rpm "libvirt-daemon-kvm"
package in CentOS or Ovirt repo.(only libvirt-daemon-kvm 7.0.0). Try
to use --nobest flag to install updates.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JR4SOVSBBMM4TIJIQXV6JMXZNAXR3QXB/


7.6.0-4 is currently what is available on stream. I believe 8.4 is no 
longer supported as a host OS (CentOS or RHEL) as they list CentOS 
Stream, Node, and RHEL 8.5 Beta as supported OS's for host.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SP6ENO2V3HMPQ54KTTHHRKFQQ5ZVAJMV/


[ovirt-users] Re: The Engine VM (/32) and this host (/32) will not be in the same IP subnet.

2021-10-27 Thread Alex McWhirter

On 2021-10-27 16:09, Sina Owolabi wrote:

Its really weird.
Just tried again, with  the same failure, on a freshly reinstalled 
CentOS 8.

Server has a number of vlan interfaces, on a physical interface
enp2s0f1, all in the defined notation,
one vlan interface has an IP, 10.200.10.3/23,
Second physical interface enp2s0f0 is configured for 10.200.30.3/23,
is the interface with a gateway and DNS, and the router can provide
other IPs with DHCP here, and which I hope to have ovirtmgmt on.
I run hosted-engine --deploy, I select the gateway for the enp2s0f1
vlan (10.200.10.1).

Please indicate the gateway IP address [10.200.30.1]: 10.200.10.1
Please indicate a nic to set ovirtmgmt bridge on (enp2s0f1,
enp2s0f1.1014, enp2s0f1.1016, enp2s0f1.1015, enp2s0f1.1005, enp2s0f0)
[enp2s0f1.1014]: enp2s0f0
  Please specify which way the network connectivity should be
checked (ping, dns, tcp, none) [dns]:dns
  How should the engine VM network be configured? (DHCP,
Static)[DHCP]: Static
  Please enter the IP address to be used for the engine VM []:
10.200.30.10
[ ERROR ] The Engine VM (10.200.30.10/32) and this host
(10.200.30.3/32) will not be in the same IP subnet.
 Static routing configuration are not supported on automatic
VM configuration.

What can I try differently?



Try setting the subnet with the engine IP.

I.E. instead of 10.200.30.10 do 10.200.30.10/23
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JC6ORL2ALO4XNT2NJUISIDIEKSKYSRNO/


[ovirt-users] Re: NFS Synology NAS (DSM 7)

2021-08-27 Thread Alex K
On Fri, Aug 27, 2021, 19:48 Maton, Brett  wrote:

> Hi List,
>
>   I can't get oVirt 4.4.8.5-1.el8 (running on oVirt Node hosts) to connect
> to an NFS share on a Synology NAS.
>
>   I gave up trying to get the hosted engine deployed and put that on an
> iscsi volume instead...
>
>   The directory being exported from NAS is owned by vdsm / kvm (36:36)
> perms I've tried:
>   0750
>   0755
>   0777
>
> Tried auto / v3 / v4_0
>
>   As others have mentioned regarding NFS, if I connect manually from the
> host with
>
>   mount nas.mydomain.com:/volume1/ov_nas
>
>   It connects and works just fine.
>
>   If I try to add the share as a domain in oVirt I get
>
> Operation Cancelled
> Error while executing action Add Storage Connection: Permission settings
> on the specified path do not allow access to the storage.
> Verify permission settings on the specified storage path.
>
> When tailing /var/log/messages on
>
> When tailing /var/log/messages on the oVirt host, I see this message
> appear (I changed the domain name for this post so the dots might be
> transcoded in reality):
>
> Aug 27 17:36:07 ov001 systemd[1]: 
> rhev-data\x2dcenter-mnt-nas.mydomain.com:_volume1_ov__nas.mount:
> Succeeded.
>
>   The NAS is running the 'new' DSM 7, /etc/exports looks like this:
>
> /volume1/ov_nas  x.x.x.x(rw,async,no_root_squash,anonuid=36,anongid=36)
>
Did you try squashing to root?

>
>
> (reloaded with exportfs -ra)
>
>
> Any suggestions appreciated.
>
> Regards,
> Brett
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y74ILXTU6L2XEIIQDG5SE6WEQ6DSUOXA/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MM6CLUHHQFIWTXQSIQ7C7EPWFAW3NAOF/


[ovirt-users] Re: Fencing ilo4

2021-08-27 Thread Alex K
On Fri, Aug 27, 2021, 20:33  wrote:

> Hi
> This thread points to the same thing but there's no solution.
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CGHM7K2DJH76MQSDYNBNXI4LXUU7IHHS/
> I am seting up a new kvm environment. Oracle linux virtualization manager
> is up, kvm host prepared and I am trying to set up fencing with ilo4.
>
> When adding via gui I get
> ERROR [org.ovirt.engine.core.bll.pm.FenceProxyLocator] (default task-12)
> [62fc5810-5d9a-4baf-b1a7-983da8d039fc] Can not run fence action on host
> 'kvm1', no suitable proxy host was found.
>
I think you need at least two hosts to test power management from UI.

I left options blank but tried privlvl=operator,lanplus=on and nothing.


>
> Test via cli works fine.
> [root@kvm1 lib]# fence_ilo4 -a 192.168.9.98 -l Administrator -p ***-v -o
> status
> 2021-08-27 14:18:56,815 INFO: Executing: /usr/bin/ipmitool -I lanplus -H
> 192.168.9.98 -p 623 -U Administrator -P [set] -L ADMINISTRATOR chassis
> power status
> 2021-08-27 14:18:56,982 DEBUG: 0 Chassis Power is on
> Status: ON
>
> Error message because of that.
> Health check on Host kvm1 indicates that future attempts to Stop this host
> using Power-Management are expected to fail.
>
> Can anyone help?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VQVAT254OVIKCFAOC42BB4264FNNVZID/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U6I7IHGJLHSZKMPGVBMN5FDGMYOEET5U/


[ovirt-users] Re: Add nodes to single node gluster hyperconverged

2021-08-27 Thread Alex McWhirter

On 2021-08-27 13:24, Thomas Hoberg wrote:


I'd rather doubt the GUI would help you there and what's worse, the
GUI doesn't easily tell you what it tries to do. By the time you've
found and understood what it tries from the logfiles, you'd have it
done on your own.


It's an unfortunate thing that the GUI assumptions can be counter 
intuitive in many regards, but i can confirm you can do this in the GUI 
as long as the gluster volumes was created in the GUI in the first 
place. If not, it will not show up as a volume.



Now whether or not oVirt will then treat such a hand-made 1->3 node
cluster like a 3 node HCI built by itself is something I've never
tried.


It will as long as the above gluster volume requirement is met, although 
if using gluster for hosted engine you typically end up doing that by 
hand.



If I had successfully tested the 3 node to 6 and 9 node expansion, I'd
perhaps be more confident. But it could just turn out that without
fiddling with the postgres database in the management engine this
won't happen.


I do this quite often, add hosts to compute, add bricks to a gluster 
volume, done deal. However we do tend to use ZFS underneath which is 
outside the scope of oVirt. It allows us to re-use existing storage 
elements (providing there is enough space) to create temporary volumes 
to assist in the process.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M5VC5AP6V6BV2VNQT46DKNF253W3ECPL/


[ovirt-users] Re: oVirt and the future

2021-08-27 Thread Alex McWhirter

On 2021-08-27 13:09, Thomas Hoberg wrote:
Ubuntu support: I feel ready to bet a case of beer, that that won't 
happen.


I'd tend to agree with this. oVirt embeds itself so deep into the RHEL 
architecture that moving to anything else that doesn't provide
the same provisions will be a huge undertaking. You'd almost need to 
develop a new VDSM from scratch per distro. Supporting latest Fedora
however may be an option with a more realistic amount of required 
effort.



oVirt lives in a niche, which doesn't have a lot of growth left.


Is it though? I'd almost compare oVirt to VMware's suite of products 
which see a ton of use. The problem oVirt faces is the lack of a 
consistent and easy deployment model.



It's really designed to run VMs on premise, but once you're fully VM
and containers, cloud seems even more attractive and then why bother
with oVirt (which has a steep learning curve)?


Depends on market really, there are industries where cloud is just not 
an option for legal reasons. Cloud is also sometimes significantly more 
expensive than on-prem in many markets, even within the US.



I still see some potential where you need a fault tolerant redundant
physical HCI edge built from small devices like industrial NUCs or
Atoms (remote SMB, factories, ships, railroads, military/expedition,
space stations). But for that the quality of the software would have
to improve in spades.


We use it for this use case (as well as others) it works well. The 
quality issues with oVirt tend to revolve around deployment. Hosted 
engine is often a mess, and most don't want to deal with a dedicated 
machine or VM on non clustered machine to run the engine. We've gone as 
far as having dedicated head nodes that run critical service VM's with 
some pacemaker / corosync magic to move those VM's around if needed as a 
custom solution, simply because hosted engine only works some of the 
time.


oVirt has come quite a long way in this regard, but until you see 
consistent stable releases that deploy effortlessly on a single node for 
testing, people wont test it, and it wont be considered option. Even if 
the software is pretty fantastic beyond that point.



If oVirt in HCI was as reliable as CentOS7 on physical hardware, pure
software update support could perhaps be made to cost no more than the
hardware and you'd have something really interesting.


Kind of goes along with my previous statement, i haven't had a critical 
software bug effect my installs in years, but that takes quite a lot of 
knowledge of the inner working of oVirt to keep it that way. 
Unfortunately "stable if you know what you are doing" isn't a strong 
selling point.



But that would require large masses (millions) of deployment to make
worthwhile, which can't happen with somebody doing a huge amount of
initial subsidies. And who would be able (and motivated) to shoulder
that?


I would love RHEV to be that, but it consistently seems to be neglected 
in the Red Hat lineup of products. RHEV tends to be considerably less 
buggy and does lag behind significantly at times. A free entry level 
RHEV tier could change things quite a lot, but it doesn't seem likely in 
my opinion.


But that's really just my personal opinion, Didi is the much better 
authority.


Same, I'd love to see some of these issues resolved, but it's going to 
take a unique situation to make that happen I'm afraid.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NWN4DJ2NAQOK2RLDKE3JHNW2SOT2ATEJ/


[ovirt-users] Re: export VM from oVirt engine 3.5

2021-07-08 Thread Alex K
On Thu, Jul 8, 2021, 20:19  wrote:

> Hello,
> I am trying to export a bunch o VM from  oVirt version 3.5
> The problem is that there is no OVA support for exporting them. I also
> tryed to export VMs into OVA format using ovirtsdk4 which anyway won't work
> on oVirt 3.5.
> I can successfully export to a NFS partition but for each VM there are
> several qcow v2 files which I suppose to be the VM image and its snapshots.
> How to identify the correct file to represent the current VM status ?
>
When exporting you should get only one image file with the current status
of the vm.

If you want to hack with the vm images, you can commit all the chain of the
snapshot files to your own single qcow2 copy using qemu-img commands.

> You can easily get the disk ID of the current active snapshot (vm ->
snapshots) then you can view the full chain with:
qemu-img info --backing-chain $FILENAME
You need to know what you are doing though to avoid any data loss.

If I delete all the snapshots, will I end up with only one valid qcow v2
> image that I can use ?
>
Yes, you should. You can try if the snapshots are not needed.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FCCK7HSIVMXAH2D7F2DWLHR4J2XSSTPP/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4J3HIIWUCVHJBMCL5TP7VR46J42MO2ED/


[ovirt-users] Re: oVirt + Gluster issues

2021-06-08 Thread Alex McWhirter

I've run into a similar problem when using VDO + LVM + XFS stacks, also
with ZFS. 


If you're trying to use ZFS on 4.4, my recommendation is don't. You have
to run the testing branch at minimum, and quiet a few things just don't
work. 


As for VDO, i ran into this issue when using VDO and a NVME for LVM
caching of the thin pool, VDO would throw a fit and under high load
scenario, VM's would regularly pause.  


VDO with no cache was fine however, seems to be related to mixing device
types / block sizes (even if you override block sizes). 

Not sure if that helps. 


On 2021-06-08 12:26, Strahil Nikolov via Users wrote:

Maybe the shard xlator cannot cope with the speed of the shard creation speed. 

Are you using preallocated disks on the Zimbra VM ? 

Best Regards, 
Strahil Nikolov


On Tue, Jun 8, 2021 at 17:57, José Ferradeira via Users 
 wrote: 

Hello, 

running ovirt 4.4.4.7-1.el8 and gluster 8.3. 
When i performe a restore of Zimbra Collaboration Email with features.shard on, the VM pauses with an unknown storage error. 
When I performe a restore of Zimbra Collaboration Email with features.shard off, it fills all the gluster storage domain disks. 

With older versions of gluster and ovirt the same happens. If I use a NFS storage domain it runs OK. 


--

-

Jose Ferradeira
http://www.logicworks.pt ___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QGBFSIHHTDOTTOWFWQKZFQMD56YWHTPZ/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MOJJZJG7LCGHDIYULF5572L52JE53T6D/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JWUSPYSFOMFOHPDOPZBLYGRHYYFVCZ5H/


[ovirt-users] Re: Hosted-Engine vs Standalone Engine

2021-03-25 Thread Alex K
On Wed, Mar 24, 2021, 23:04 Ian Easter  wrote:

> Hello Folks,
>
> I have had to install a Hosted-Engine a few times in my environment.
> There have been some hardware issues and power issues that left the HE
> unrecoverable.
>
> In this situation, would the Standalone Engine install be more viable and
> less prone to become inoperable due to the previous issues?
>
Usually, having a daily engine backup you are covered even in the rare case
of full engine corruption. In the worst case one can wipe out the
unrecoverable engine, setup a new one and restore its status from the
backup. I had to do this once and it was fine.


> My assumption would be to have a head baremetal server run the Engine to
> control and maintain my blades.
>
> *Thank you,*
> *Ian*
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CFXFE7M7WMXEBQBU3CJE7JFNLADVXRLO/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VWBRKLPUWUWU2PDMDGL4SFYDIO6MSAVF/


[ovirt-users] Re: Hyperconverged engine high availability?

2021-03-20 Thread Alex K
On Sat, Mar 20, 2021, 22:15 David White via Users  wrote:

> I just finished deploying oVirt 4.4.5 onto a 3-node hyperconverged cluster
> running on Red Hat 8.3 OS.
>
> Over the course of the setup, I noticed that I had to setup the storage
> for the engine separately from the gluster bricks.
>
> It looks like the engine was installed onto /rhev/data-center/ on the
> first host, whereas the gluster bricks for all 3 hosts are on
> /gluster_bricks/.
>
/rhev/data-center is a mountpoint of the gluster volume which may have its
bricks in /gluster_bricks/. You can provide more info on the gluster setup
to clarify this. gluster volume info 


> I fear that I may already know the answer to this, but:
> Is it possible to make the engine highly available?
>
Yes, one uses 3 servers to achieve HA for the guest VMs and the engine, as
long as the hosts meet the requirements of storage, network and compute.

>
> Also, thinking hypothetically here, what would happen to my VMs that are
> physically on the first server, if the first server crashed? The engine is
> what handles the high availability, correct? So what if a VM was running on
> the first host? There would be nothing to automatically "move" it to one of
> the remaining healthy hosts.
>
> Or am I misunderstanding something here?
>
>
> Sent with ProtonMail  Secure Email.
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/L6MMZSMSGIK7BTUSUECU65VZRMS4N33L/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/76OWWM33ZAEUMVKNWPOYPIQETU3DBPFT/


[ovirt-users] Re: Public IP routing question

2021-03-08 Thread Alex McWhirter

You can route it to a private address on your router if you want...

We use EVPN/VXLAN (but regular old vlans work too) Just put the public 
space on a vlan, add public as a vlan tagged network in ovirt. Only your 
public facing VM's need addresses in the space.


On 2021-03-08 05:53, David White via Users wrote:

If I have a private network (10.1.0.0/24) that is being used by the
cluster for intra-host communication & replication, how do I get a
block of public IP addresses routed to the virtual cluster?

For example, let's say I have a public /28, and let's use 1.1.1.0/28
for example purposes.

I'll assign 1.1.1.1 to the router.

How can I then route 1.1.1.2 - 1.1.1.16 down to the virtualized oVirt
cluster?

Do I need to assign a public IP address to a 2nd physical NIC on each
host, and put that network onto a totally different physical switch?

Or should I instead setup default routes on the 10.1.0.0/24 network?

I also wanted to follow up on my question below to see if anyone had
any thoughts on how things would function when a portion of the
network is lost.

Sent with ProtonMail [1] Secure Email.

‐‐‐ Original Message ‐‐‐

 On Thursday, March 4, 2021 4:53 AM, David White
 wrote:


I tested oVirt (4.3? I can't remember) last fall on a single host
(hyperconverged).

Now, I'm getting ready to deploy to a 3 physical node (possibly 4)
hyperconverged cluster, and I guess I'll go ahead and go with 4.4.

Although Red Hat's recent shift of CentOS 8 to the Stream model, as
well as the announcement that RHV is going away makes me nervous. I
really don't see any other virtualization software doing quite the
same stuff as oVirt at the moment.

One of my questions is around the back end out-of-band network for
data replication.

What happens if all 3 servers are healthy and the normal network is
fine for serving traffic to the VM consumers, but the switching
network for data replication goes down? Is it possible to configure
oVirt to "fail over" to the front-end network?

I'm also wondering if its possible to do away with a switch all
together, and just link the physical hosts together directly (like a
cross-over cable) for the data replication.

I'm also wondering what would happen in the following scenario:

* All 3 servers are healthy

* The out-of-band data replication network is healthy

* 1 or 2 of the servers suddenly lost network connectivity on the
front-end network

What then? Would everything just keep working, and network traffic
be forced to go out the healthy interface(s) on the remaining hosts?

Sent with ProtonMail [1] Secure Email.




Links:
--
[1] https://protonmail.com
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GMQTNI6VWTWMG6IQMFGJGBTLCLOARZYK/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EP27ICYZ3FKORZ4UXYTL2GDKO47U6LWR/


[ovirt-users] Re: 4.4.4 Image Copying / Template Create Fails - No Such File

2021-03-07 Thread Alex McWhirter

I apologize for the spam, this seems to be a long standing gluster
issue. https://github.com/gluster/glusterfs/issues/597 


sharding does not support SEEK_DATA/SEEK_HOLE, with a preallocated image
you likely never see this issue as there are no holes. However with a
sparse image, that's very much not the case. I'm not sure when qemu-img
changed to use these syscalls, as this is not something i experience on
4.3 / CentOS 7. 


I'd be interested if anyone else can replicate this image copy behavior
using raw sparse (thin provision) disks as the source on a gluster
volume with sharding enabled, on oVirt 4.4.4+ (possibly earlier is also
affected) 


If this is something current qemu-img cannot handle, i don't think
supporting sparse disks on sharded gluster volumes is wise. 


On 2021-03-08 01:06, Alex McWhirter wrote:

This actually looks to be related to sharding. Doing a strace on the qemu-img process, i can see that it is using lseek, but after the first shard this turns to EOPNOTSUPP and qemu-img dies. 

If i temporarily disable sharding, touch a file (so it will not be sharded), then re-enable sharding and use qemu-img to overwrite that new unsharded file, there are no issues. 

On 2021-03-07 18:33, Nir Soffer wrote: 

On Sun, Mar 7, 2021 at 1:14 PM Alex McWhirter  wrote: 

I've been wrestling with this all night, digging through various bits of VDSM code trying to figure why and how this is happening. I need to make some templates, but i simply can't. 

VDSM  command HSMGetAllTasksStatusesVDS failed: value=low level Image copy failed: ("Command ['/usr/bin/qemu-img', 'convert', '-p', '-t', 'none', '-T', 'none', '-f', 'raw', '-O', 'raw', '/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/6f87b073-c4ec-42f2-87da-d1cb6a08a150/f2dfb779-b49c-4ec9-86cd-741f3fe5b781', '/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/84e56da6-8c26-4518-80a4-20bc395214db/039c5ada-ad6d-45c0-8393-bd4db0bbc366'] failed with rc=1 out=b'' err=bytearray(b'qemu-img: error while writing at byte 738197504: No such file or directory\\n')",) 
This is a gluster issue that was reported in the past. write() cannot return errno ENOENT 
and qemu-img cannot recover from this error. 

Can you reproduce this when running the same qemu-img command from the shell? 

Are you running the latest gluster version? 

Nir 


abortedcode=261

3/7/21 5:44:44 AM 

Following the VDSM logs, i can see the new image gets created, permissions set, etc... but as soon qemu-img starts, it fails like this. I updated all hosts and the engine, rebooted the entire stack, to no avail. So i detached the storage domain, and wiped every host and fresh installed both engine and all nodes, imported the storage domain, and still no dice. Storage domain is gluster volume, single node, created in ovirt. 

It happens when i make a template, copy an image, or make a new vm from a template. I can still create new vms from blank, and upload images via the web ui. Watching the gluster share, i can see the image being created, but its deleted at some point. I appears to not be being deleted by the template / copying process, as immediately after the above error, i get this one. 

VDSM command DeleteImageGroupVDS failed: Image does not exist in domain: 'image=4f359545-01a8-439b-832b-18c26194b066, domain=b4507449-ac40-4e35-be66-56441bb696ac' 

3/7/21 5:44:44 AM 

I thought maybe garbage collection, but don't see any indication of that in the logs. 


Any ideas? I redacted host names from the log output. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/75BZNMZUH23ZWCUHCDYCJSC6EZ45UW5O/ 
___

Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/33JF7NWW7XW4KKWM57H52TK5QDBDA4J5/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AW2L2D66HFFKF7XXWDYZRKW5R36P6HCC/_

[ovirt-users] Re: 4.4.4 Image Copying / Template Create Fails - No Such File

2021-03-07 Thread Alex McWhirter

This actually looks to be related to sharding. Doing a strace on the
qemu-img process, i can see that it is using lseek, but after the first
shard this turns to EOPNOTSUPP and qemu-img dies. 


If i temporarily disable sharding, touch a file (so it will not be
sharded), then re-enable sharding and use qemu-img to overwrite that new
unsharded file, there are no issues. 


On 2021-03-07 18:33, Nir Soffer wrote:

On Sun, Mar 7, 2021 at 1:14 PM Alex McWhirter  wrote: 

I've been wrestling with this all night, digging through various bits of VDSM code trying to figure why and how this is happening. I need to make some templates, but i simply can't. 


VDSM  command HSMGetAllTasksStatusesVDS failed: value=low level Image copy failed: 
("Command ['/usr/bin/qemu-img', 'convert', '-p', '-t', 'none', '-T', 'none', '-f', 'raw', '-O', 'raw', 
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/6f87b073-c4ec-42f2-87da-d1cb6a08a150/f2dfb779-b49c-4ec9-86cd-741f3fe5b781',
 
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/84e56da6-8c26-4518-80a4-20bc395214db/039c5ada-ad6d-45c0-8393-bd4db0bbc366']
 failed with rc=1 out=b'' err=bytearray(b'qemu-img: error while writing at byte 738197504: No such file or 
directory\\n')",)


This is a gluster issue that was reported in the past. write() cannot return errno ENOENT 
and qemu-img cannot recover from this error. 

Can you reproduce this when running the same qemu-img command from the shell? 

Are you running the latest gluster version? 

Nir 


abortedcode=261

3/7/21 5:44:44 AM 

Following the VDSM logs, i can see the new image gets created, permissions set, etc... but as soon qemu-img starts, it fails like this. I updated all hosts and the engine, rebooted the entire stack, to no avail. So i detached the storage domain, and wiped every host and fresh installed both engine and all nodes, imported the storage domain, and still no dice. Storage domain is gluster volume, single node, created in ovirt. 

It happens when i make a template, copy an image, or make a new vm from a template. I can still create new vms from blank, and upload images via the web ui. Watching the gluster share, i can see the image being created, but its deleted at some point. I appears to not be being deleted by the template / copying process, as immediately after the above error, i get this one. 

VDSM command DeleteImageGroupVDS failed: Image does not exist in domain: 'image=4f359545-01a8-439b-832b-18c26194b066, domain=b4507449-ac40-4e35-be66-56441bb696ac' 

3/7/21 5:44:44 AM 

I thought maybe garbage collection, but don't see any indication of that in the logs. 


Any ideas? I redacted host names from the log output. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/75BZNMZUH23ZWCUHCDYCJSC6EZ45UW5O/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/33JF7NWW7XW4KKWM57H52TK5QDBDA4J5/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AW2L2D66HFFKF7XXWDYZRKW5R36P6HCC/


[ovirt-users] Re: 4.4.4 Image Copying / Template Create Fails - No Such File

2021-03-07 Thread Alex McWhirter

I see, yes running the command by hand results in the same error.
Gluster version is 8.3 (I upgraded to see if 8.4.5 would result in a
different outcome) 

Previously it was gluster 7.9, same issue either way. 


On 2021-03-07 18:33, Nir Soffer wrote:

On Sun, Mar 7, 2021 at 1:14 PM Alex McWhirter  wrote: 

I've been wrestling with this all night, digging through various bits of VDSM code trying to figure why and how this is happening. I need to make some templates, but i simply can't. 


VDSM  command HSMGetAllTasksStatusesVDS failed: value=low level Image copy failed: 
("Command ['/usr/bin/qemu-img', 'convert', '-p', '-t', 'none', '-T', 'none', '-f', 'raw', '-O', 'raw', 
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/6f87b073-c4ec-42f2-87da-d1cb6a08a150/f2dfb779-b49c-4ec9-86cd-741f3fe5b781',
 
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/84e56da6-8c26-4518-80a4-20bc395214db/039c5ada-ad6d-45c0-8393-bd4db0bbc366']
 failed with rc=1 out=b'' err=bytearray(b'qemu-img: error while writing at byte 738197504: No such file or 
directory\\n')",)


This is a gluster issue that was reported in the past. write() cannot return errno ENOENT 
and qemu-img cannot recover from this error. 

Can you reproduce this when running the same qemu-img command from the shell? 

Are you running the latest gluster version? 

Nir 


abortedcode=261

3/7/21 5:44:44 AM 

Following the VDSM logs, i can see the new image gets created, permissions set, etc... but as soon qemu-img starts, it fails like this. I updated all hosts and the engine, rebooted the entire stack, to no avail. So i detached the storage domain, and wiped every host and fresh installed both engine and all nodes, imported the storage domain, and still no dice. Storage domain is gluster volume, single node, created in ovirt. 

It happens when i make a template, copy an image, or make a new vm from a template. I can still create new vms from blank, and upload images via the web ui. Watching the gluster share, i can see the image being created, but its deleted at some point. I appears to not be being deleted by the template / copying process, as immediately after the above error, i get this one. 

VDSM command DeleteImageGroupVDS failed: Image does not exist in domain: 'image=4f359545-01a8-439b-832b-18c26194b066, domain=b4507449-ac40-4e35-be66-56441bb696ac' 

3/7/21 5:44:44 AM 

I thought maybe garbage collection, but don't see any indication of that in the logs. 


Any ideas? I redacted host names from the log output. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/75BZNMZUH23ZWCUHCDYCJSC6EZ45UW5O/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/33JF7NWW7XW4KKWM57H52TK5QDBDA4J5/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QHOEFQ6BMRF43PI44ZFAFLTQC6XW3UG3/


[ovirt-users] 4.4.4 Image Copying / Template Create Fails - No Such File

2021-03-07 Thread Alex McWhirter

I've been wrestling with this all night, digging through various bits of
VDSM code trying to figure why and how this is happening. I need to make
some templates, but i simply can't. 


VDSM  command HSMGetAllTasksStatusesVDS failed: value=low level
Image copy failed: ("Command ['/usr/bin/qemu-img', 'convert', '-p',
'-t', 'none', '-T', 'none', '-f', 'raw', '-O', 'raw',
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/6f87b073-c4ec-42f2-87da-d1cb6a08a150/f2dfb779-b49c-4ec9-86cd-741f3fe5b781',
'/rhev/data-center/mnt/glusterSD/:_Temp/45740f16-b3c9-4bb5-ba5f-3e64657fb663/images/84e56da6-8c26-4518-80a4-20bc395214db/039c5ada-ad6d-45c0-8393-bd4db0bbc366']
failed with rc=1 out=b'' err=bytearray(b'qemu-img: error while writing
at byte 738197504: No such file or directory\\n')",) abortedcode=261

3/7/21 5:44:44 AM 


Following the VDSM logs, i can see the new image gets created,
permissions set, etc... but as soon qemu-img starts, it fails like this.
I updated all hosts and the engine, rebooted the entire stack, to no
avail. So i detached the storage domain, and wiped every host and fresh
installed both engine and all nodes, imported the storage domain, and
still no dice. Storage domain is gluster volume, single node, created in
ovirt. 


It happens when i make a template, copy an image, or make a new vm from
a template. I can still create new vms from blank, and upload images via
the web ui. Watching the gluster share, i can see the image being
created, but its deleted at some point. I appears to not be being
deleted by the template / copying process, as immediately after the
above error, i get this one. 


VDSM command DeleteImageGroupVDS failed: Image does not exist in domain:
'image=4f359545-01a8-439b-832b-18c26194b066,
domain=b4507449-ac40-4e35-be66-56441bb696ac' 

3/7/21 5:44:44 AM 


I thought maybe garbage collection, but don't see any indication of that
in the logs. 


Any ideas? I redacted host names from the log output.___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/75BZNMZUH23ZWCUHCDYCJSC6EZ45UW5O/


[ovirt-users] Re: snapshot solution: Existing snapshots that were taken after this one will be erased.

2021-03-06 Thread Alex K
On Sat, Mar 6, 2021, 09:13 Strahil Nikolov via Users 
wrote:

> Commiting a snapshot means that you want to revert to that state, which
> means that all data afterwards is lost.
> Even if you keep the latest snapshot, it won't be usefull.
> For example you got the following:
>
> Install -> snap1 -> some data -> snap2 -> some data -> snap3 -> some data
> -> Current State
>
> If you revert to snap2 you will have the following:
> Install -> snap1 -> some data -> snap2 -> some data -> Current State
>
> (you always have some extra data generated - for example system logs)
>
> As you can see, you can't use snap3 as you got some data after powering up
> the VM after the restore to snap2 and you will loose that.
>
User usually does not care of loosing such data if intentionally switches
from snapshot to snapshot. I was expecting also the same behavior,  to be
able to switch between intermediate snapshots without loosing the latest
ones. I can do this with internal snapshots in plain KVM and this is very
useful when testing different versions/snapshots of an application.

>
> Best Regards,
> Strahil Nikolov
>
> On Fri, Mar 5, 2021 at 8:32, dhanaraj.ramesh--- via Users
>  wrote:
> Hi Team,
>
> when I want to commit the older snapshots I'm getting warning stating "
> Existing snapshots that were taken after this one will be erased.". is
> there any way we can retain the latest snapshots as is in the chain?
>
> I knew cloning and template export options are there to secure that latest
> snapshot data but these are will consume additional space in storage and
> take time.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y5PQGBQXWTJ6O3NI6ZIV2QVEHWML7RVA/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/I47GULR3I5FPMD2NXJ44EI5IRCUXEDPV/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CZR5U7BE7MMEFEPTBBRWIUUN25SRPWXC/


[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

2021-03-05 Thread Alex K
On Thu, Mar 4, 2021 at 8:59 PM  wrote:

> Hello again,
> I've tried to heal the brick with latest-mtime, but I get the following:
>
> gluster volume heal engine split-brain latest-mtime
> /80f6e393-9718-4738-a14a-64cf43c3d8c2/images/d5de54b6-9f8e-4fba-819b-ebf6780757d2/a48555f4-be23-4467-8a54-400ae7baf9d7
> Healing
> /80f6e393-9718-4738-a14a-64cf43c3d8c2/images/d5de54b6-9f8e-4fba-819b-ebf6780757d2/a48555f4-be23-4467-8a54-400ae7baf9d7
> failed: File not in split-brain.
> Volume heal failed.
>
you can try to run ls at the directory where the file which healing is
pending resides.  This might trigger the healing process of that file.


> Should I try the solution described in this question, where we manually
> remove the conflicting entry, triggering the heal operations?
>
> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/RPYIMSQCBYVQ654HYGBN5NCPRVCGRRYB/#H6EBSPL5XRLBUVZBE7DGSY25YFPIR2KY
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CCRNM7N3FSUYXDHFP2XDMGAMKSHBMJQQ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJO7EVEW2C3P7EYTAIXZVIC7JBSEXM3C/


[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

2021-03-03 Thread Alex K
On Wed, Mar 3, 2021, 19:13  wrote:

> Hello,
>
> Thank you very much for your reply.
>
> I get the following from the below gluster commands:
>
> [root@ov-no1 ~]# gluster volume heal engine info split-brain
> Brick ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
> Brick ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
> Brick ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
>
> [root@ov-no1 ~]# gluster volume heal engine info summary
> Brick ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
> Brick ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
> Brick ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
>
> [root@ov-no1 ~]# gluster volume info
> Volume Name: data
> Type: Replicate
> Volume ID: 6c7bb2e4-ed35-4826-81f6-34fcd2d0a984
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x (2 + 1) = 3
> Transport-type: tcp
> Bricks:
> Brick1:
> ov-no1.ariadne-t.local:/gluster_bricks/data/data
> Brick2:
> ov-no2.ariadne-t.local:/gluster_bricks/data/data
> Brick3:
> ov-no3.ariadne-t.local:/gluster_bricks/data/data (arbiter)
> Options Reconfigured:
> performance.client-io-threads: on
> nfs.disable: on
> transport.address-family: inet
> performance.strict-o-direct: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.low-prio-threads: 32
> network.remote-dio: off
> cluster.eager-lock: enable
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> cluster.data-self-heal-algorithm: full
> cluster.locking-scheme: granular
> cluster.shd-max-threads: 8
> cluster.shd-wait-qlength: 1
> features.shard: on
> user.cifs: off
> cluster.choose-local: off
> client.event-threads: 4
> server.event-threads: 4
> network.ping-timeout: 30
> storage.owner-uid: 36
> storage.owner-gid: 36
> cluster.granular-entry-heal: enable
>
> Volume Name: engine
> Type: Replicate
> Volume ID: 7173c827-309f-4e84-a0da-6b2b8eb50264
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x 3 = 3
> Transport-type: tcp
> Bricks:
> Brick1:
> ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Brick2:
> ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Brick3:
> ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Options Reconfigured:
> performance.client-io-threads: on
> nfs.disable: on
> transport.address-family: inet
> performance.strict-o-direct: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.low-prio-threads: 32
> networ

[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

2021-03-02 Thread Alex K
On Mon, Mar 1, 2021, 15:20  wrote:

> Hello again,
>
> I am back with a brief description of the situation I am in, and questions
> about the recovery.
>
> oVirt environment: 4.3.5.2 Hyperconverged
> GlusterFS: Replica 2 + Arbiter 1
> GlusterFS volumes: data, engine, vmstore
>
> The current situation is the following:
>
> - The Cluster is in Global Maintenance.
>
> - The volume engine is up with comment (in the Web GUI) : Up, unsynched
> entries, needs healing.
>
> - The VM HostedEngine is paused due to a storage I/O error (Web GUI) while
> the output of virsh list --all command shows that the HostedEngine is
> running.
>
> I tried to issue the gluster heal command (gluster volume heal engine) but
> nothing changed.
>
> I have the following questions:
>
> 1. Should I restart the glusterd service? Where from? Is it enough if the
> glusterd is restarted on one host or should it be restarted on the other
> two as well?
>
It sounds as a gluster split brain. I would start from there. Can you check
status by listing split brain entries?

>
> 2. Should the node that was NonResponsive and came back, be rebooted or
> not? It seems alright now and in good health.
>
> 3. Should the HostedEngine be restored with engine-backup or is it not
> necessary?
>
> 4. Could the loss of the DNS server for the oVirt hosts lead to an
> unresponsive host?
> The nsswitch file on the ovirt hosts and engine, has the DNS defined as:
> hosts:  files dns myhostname
>
If you have opted for dns liveliness checks it could be.

>
> 5. How can we recover/rectify the situation above?
>
I would start checking for gluster split brains and ensure that all hosts
have connectivity in the storage domain net (ping, jumbo frames if
enabled). 99% of my similar issues have been caused from gluster split.

The fact that the engine is shown as paused and that you can still access
web ui makes me think you have a split brain issue

>
> Thanks for your help,
> Maria Souvalioti
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GO6S6GXRJWYZN5NZ5IFTNQ6SGNEB75WQ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZNIFUDLRYHU3YTYC35OLXVVHYKAPNJZI/


[ovirt-users] Re: VDI and ovirt

2021-02-23 Thread Alex McWhirter

On 2021-02-23 07:39, cpo cpo wrote:

Is anyone using Ovirt for a Windows 10 VDI deployment?  If so are you
using a connection broker?  If you are what are you using?

Thanks for your time


We use ovirt quite a lot for windows 10 vdi, 4.4 / EL8 is quite a bit 
nicer spice version wise.


No broker needed, ovirt does that pretty well on it's own. We do use 
squid as a spice http proxy however. We just have pools of vms based on 
sysprep'd images. We also repurposed some HP thin clients, installed 
centos minimal + openbox, wrote a small application that accepts user 
credentials and gets a spice connection via the ovirt API.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/COB73ASC5UIJIC5SZHG43BIULPUD7W4L/


[ovirt-users] Re: recovering gluster volumes when moving hosts to a new datacenter

2021-01-30 Thread Alex K
On Fri, Jan 29, 2021, 12:15 Nathanaël Blanchet  wrote:

> Hi,
>
> I moved 3 hosts (for replica 3 volume) from a previous datacenter to a
> new datacenter.
>
> Those hosts had initially been configured in a gluster cluster and
> managed multiple gluster volume created with ovirt UI.
>
> These hosts are now apart of a new gluster cluster and they see each
> others with cli "gluster peer status" as well as the associated volumes
> "gluter volumes list".
>
> But I can't make gluster volumes visible in the usually "volume" tab, so
> ovirt doesn't seem to see them.
>
> Is there a way to import pre existing gluster volume so as to ovirt be
> able to manage them ?
>
Have you enabled gluster under cluster options?

>
> Thanks.
>
> --
> Nathanaël Blanchet
>
> Supervision réseau
> SIRE
> 227 avenue Professeur-Jean-Louis-Viala
> 34193 MONTPELLIER CEDEX 5
> Tél. 33 (0)4 67 54 84 55
> Fax  33 (0)4 67 54 84 14
> blanc...@abes.fr
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OW27PE5P7GXXBWJWAYQGZCFUCERYVVLY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/N45YODHDC7JDZGCIQKMELCI62VFNWGRG/


[ovirt-users] Re: vGPU on ovirt 4.3

2021-01-25 Thread Alex McWhirter
IIRC oVirt 4.3 should have the basic hooks in place for mdev 
passthrough. For nvidia this mean you need the vgpu drivers and a 
license server. These licenses have a recurring cost.


AMD's solution uses SR-IOV, and requires a custom kernel module that is 
not well tested YMMV.


You can also passthrough entire cards in ovirt without any drivers, 
granted since the amount of GPU's you can stuff into a server is limited 
this is probably not ideal. Nvidia blocks this on consumer level cards.


Intel also has a mdev solution that is built into mesa / the kernel 
already, we have used it with VCA cards in the past, but perhaps the new 
Intel GPU's support it as well? Intel is the only option that will allow 
you to feed the framebuffer data back into spice so you can use the 
ovirt console. All other options require you to create a remote session 
to the guest directly.


On 2021-01-25 07:49, kim.karga...@noroff.no wrote:

Hi,

We are looking at getting some GPU's for our servers and to use vGPU
passthrough so that our students can do some video renders on the
VM's. Does anyone have good experience with the Nvidia Quadro RTX6000
or RTX8000 and ovirt 4.3?

Thanks.

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XF4LZOEAC2YTRH5LTL55YKA4BPRZLVZH/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PY4ITOIWACUWHYLAVGOMMWIXUZYNDH5L/


[ovirt-users] Re: oVirt Engine no longer Starting

2021-01-16 Thread Alex K
On Sat, Jan 16, 2021, 16:08 penguin pages  wrote:

>
> Thanks for help following below.
>
> 1) Auth to Libvirtd and show VM "hosted engine"  but also now that I
> manually registered "ns01" per above
> [root@medusa ~]# vdsm-client Host getVMList
> [
> {
> "status": "Down",
> "statusTime": "2218288798",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# virsh -c
> qemu:///system?authfile=/etc/ovirt-hosted-engine/virsh_auth.conf
> Welcome to virsh, the virtualization interactive terminal.
>
> Type:  'help' for help with commands
>'quit' to quit
>
> virsh # list --all
>  Id   NameState
> 
>  -HostedEngineshut off
>  -HostedEngineLocal   shut off
>  -ns01shut off
>
> 2) Start VM  but seems network is needed first
> virsh # start HostedEngine
> error: Failed to start domain HostedEngine
> error: Network not found: no network with matching name 'vdsm-ovirtmgmt'
>
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Requested operation is not valid: network 'default' is not active
>
> 3) Start Networks:  This is "next next" HCI+Gluster build so it called it
> "ovirtmgmt"
> virsh # net-list
>  Name  StateAutostart   Persistent
> 
>  ;vdsmdummy;   active   no  no
> virsh # net-autostart --network default
> Network default marked as autostarted
> virsh # net-start default
> Network default started
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Cannot access storage file '/var/tmp/localvmn4khg_ak/seed.iso': No
> such file or directory
>
> <<<>>
>
> virsh # dumpxml HostedEngineLocal
> 
>   HostedEngineLocal
>   bb2006ce-838b-47a3-a049-7e3e5c7bb049
>   
> http://libosinfo.org/xmlns/libvirt/domain/1.0";>
>   http://redhat.com/rhel/8.0"/>
> 
>   
>   16777216
>   16777216
>   4
>   
> hvm
> 
> 
>   
>   
> 
> 
>   
>   
>   
> 
>   
>   destroy
>   restart
>   destroy
>   
> 
> 
>   
>   
> /usr/libexec/qemu-kvm
> 
>   
>file='/var/tmp/localvmn4khg_ak/images/e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645'/>
>   
>function='0x0'/>
> 
> 
>   
>   
>   
>   
>   
> 
> 
> 
>function='0x2'/>
> 
> 
> 
>   
>   
>function='0x0' multifunction='on'/>
> 
> 
>   
>   
>function='0x1'/>
> 
> 
>   
>   
>function='0x2'/>
> 
> 
>   
>   
>function='0x3'/>
> 
> 
>   
>   
>function='0x4'/>
> 
> 
>function='0x0'/>
> 
> 
>   
>   
>   
>function='0x0'/>
> 
> 
>   
> 
>   
> 
> 
>   
> 
> 
>   
>   
> 
> 
> 
> 
>   
> 
> 
>   
>function='0x0'/>
> 
> 
> 
>   /dev/random
>function='0x0'/>
> 
>   
> 
>
> virsh #
>
> ##So not sure what hosted engine needs an ISO image.  Can I remove this?
> virsh # change-media HostedEngineLocal /var/tmp/localvmn4khg_ak/seed.iso
> --eject
> Successfully ejected media.
>
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Cannot access storage file
> '/var/tmp/localvmn4khg_ak/images/e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645'
> (as uid:107, gid:107): No such file or directory
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# tree |grep
> e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# pwd
> /gluster_bricks/engine/engine/3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# tree
> .
> ├── dom_md
> │   ├── ids
> │   ├── inbox
> │   ├── leases
> │   ├── metadata
> │   ├── outbox
> │   └── xleases
> ├── ha_agent
> │   ├── hosted-engine.lockspace ->
> /run/vdsm/storage/3afc47ba-afb9-413f-8de5-8d9a2f45ecde/6023f2b1-ea6e-485b-9ac2-8decd5f7820d/b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   └── hosted-engine.metadata ->
> /run/vdsm/storage/3afc47ba-afb9-413f-8de5-8d9a2f45ecde/77082dd8-7cb5-41cc-a69f-0f4c0380db23/38d552c5-689d-47b7-9eea-adb308da8027
> ├── images
> │   ├── 1dc69552-dcc6-484d-8149-86c93ff4b8cc
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480.lease
> │   │   └── e4e26573-09a5-43fa-91ec-37d12de46480.meta
> │   ├── 375d2483-ee83-4cad-b421-a5a70ec06ba6
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a.lease
> │   │   └── f936d4be-15e3-4983-8bf0-9ba5b97e638a.meta
> │   ├── 6023f2b1-ea6e-485b-9ac2-8decd5f7820d
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   │   ├── b38a5e37

[ovirt-users] Re: oVirt Engine no longer Starting

2021-01-15 Thread Alex K
On Fri, Jan 15, 2021, 22:04 penguin pages  wrote:

>
> Thanks for replies.
>
> Here is where it is at:
>
> # Two nodes think no VMs exist
> [root@odin ~]# vdsm-client Host getVMList
> []
>
> #One showing one VM but down
> [root@medusa ~]# vdsm-client Host getVMList
> [
> {
> "status": "Down",
> "statusTime": "2153886148",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# vdsm-client Host getAllVmStats
> [
> {
> "exitCode": 1,
> "exitMessage": "VM terminated with error",
> "exitReason": 1,
> "status": "Down",
> "statusTime": "2153916276",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# vdsm-client VM cont
> vmID="69ab4f82-1a53-42c8-afca-210a3a2715f1"
> vdsm-client: Command VM.cont with args {'vmID':
> '69ab4f82-1a53-42c8-afca-210a3a2715f1'} failed:
> (code=16, message=Unexpected exception)
>
>
> # Assuming that ID represents the hosted-engine I tried to start it
> [root@medusa ~]# hosted-engine --vm-start
> The hosted engine configuration has not been retrieved from shared
> storage. Please ensure that ovirt-ha-agent is running and the storage
> server is reachable.
>
> # Back to ovirt-ha-agent being fubar and stoping things.
>
> I have about 8 or so VMs on the cluster. Two are my IDM nodes which has
> DNS and other core services.. which is what I am really trying to get up ..
> even if manual until I figure out oVirt issue.  I think you are correct.
> "engine" volume is for just the engine.  Data is where the other VMs are
>
> [root@medusa images]# tree
> .
> ├── 335c6b1a-d8a5-4664-9a9c-39744d511af8
> │   ├── 579323ad-bf7b-479b-b682-6e1e234a7908
> │   ├── 579323ad-bf7b-479b-b682-6e1e234a7908.lease
> │   └── 579323ad-bf7b-479b-b682-6e1e234a7908.meta
> ├── d318cb8f-743a-461b-b246-75ffcde6bc5a
> │   ├── c16877d0-eb23-42ef-a06e-a3221ea915fc
> │   ├── c16877d0-eb23-42ef-a06e-a3221ea915fc.lease
> │   └── c16877d0-eb23-42ef-a06e-a3221ea915fc.meta
> └── junk
> ├── 296163f2-846d-4a2c-9a4e-83a58640b907
> │   ├── 376b895f-e0f2-4387-b038-fbef4705fbcc
> │   ├── 376b895f-e0f2-4387-b038-fbef4705fbcc.lease
> │   └── 376b895f-e0f2-4387-b038-fbef4705fbcc.meta
> ├── 45a478d7-4c1b-43e8-b106-7acc75f066fa
> │   ├── b5249e6c-0ba6-4302-8e53-b74d2b919d20
> │   ├── b5249e6c-0ba6-4302-8e53-b74d2b919d20.lease
> │   └── b5249e6c-0ba6-4302-8e53-b74d2b919d20.meta
> ├── d8b708c1-5762-4215-ae1f-0e57444c99ad
> │   ├── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9
> │   ├── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9.lease
> │   └── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9.meta
> └── eaf12f3c-301f-4b61-b5a1-0c6d0b0a7f7b
> ├── fbf3bf59-a23a-4c6f-b66e-71369053b406
> ├── fbf3bf59-a23a-4c6f-b66e-71369053b406.lease
> └── fbf3bf59-a23a-4c6f-b66e-71369053b406.meta
>
> 7 directories, 18 files
> [root@medusa images]# cd /media/engine/
> [root@medusa engine]# ls
> 3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> [root@medusa engine]# tree
> .
> └── 3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> ├── dom_md
> │   ├── ids
> │   ├── inbox
> │   ├── leases
> │   ├── metadata
> │   ├── outbox
> │   └── xleases
> ├── ha_agent
> ├── images
> │   ├── 1dc69552-dcc6-484d-8149-86c93ff4b8cc
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480.lease
> │   │   └── e4e26573-09a5-43fa-91ec-37d12de46480.meta
> │   ├── 375d2483-ee83-4cad-b421-a5a70ec06ba6
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a.lease
> │   │   └── f936d4be-15e3-4983-8bf0-9ba5b97e638a.meta
> │   ├── 6023f2b1-ea6e-485b-9ac2-8decd5f7820d
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c.lease
> │   │   └── b38a5e37-fac4-4c23-a0c4-7359adff619c.meta
> │   ├── 685309b1-1ae9-45f3-90c3-d719a594482d
> │   │   ├── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0
> │   │   ├── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0.lease
> │   │   └── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0.meta
> │   ├── 74f1b2e7-2483-4e4d-8301-819bcd99129e
> │   │   ├── c1888b6a-c48e-46ce-9677-02e172ef07af
> │   │   ├── c1888b6a-c48e-46ce-9677-02e172ef07af.lease
> │   │   └── c1888b6a-c48e-46ce-9677-02e172ef07af.meta
> │   └── 77082dd8-7cb5-41cc-a69f-0f4c0380db23
> │   ├── 38d552c5-689d-47b7-9eea-adb308da8027
> │   ├── 38d552c5-689d-47b7-9eea-adb308da8027.lease
> │   └── 38d552c5-689d-47b7-9eea-adb308da8027.meta
> └── master
> ├── tasks
> │   ├── 150927c5-bae6-45e4-842c-a7ba229fc3ba
> │   │   └── 150927c5-bae6-45e4-842c-a7ba229fc3ba.job.0
> │   ├── 21bba697-26e6-4fd8-ac7c-76f86b458368.temp
> │   ├── 26c580b8-cdb2-4d21-9bea-96e0788025e6.temp
> │   ├── 2e0e347c-fd01-404f-9459-ef175c82c354.backup
> │   │   └── 2e0e347c-fd01-404

[ovirt-users] Re: oVirt Engine no longer Starting

2021-01-15 Thread Alex K
On Fri, Jan 15, 2021, 20:20 Strahil Nikolov via Users 
wrote:

>
> >
> > Questions:
> > 1) I have two important VMs that have snapshots that I need to boot
> > up.  Is their a means with an HCI configuration to manually start the
> > VMs without oVirt engine being up?
> What it worked for me was:
> 1) Start a VM via "virsh"
> define a virsh alias:
> alias virsh='virsh -c qemu:///system?authfile=/etc/ovirt-hosted-
> engine/virsh_auth.conf'
> Check the host's vdsm.log ,where the VM was last started - you will
> find the VM's xml inside .
> Copy the whole xml and use virsh to define the VM "virsh define
> myVM.xml && virsh start myVM"
>
If you cannot find the xml file of the vm then you van use virt install as
if you were running in plain KVM.


> 2) vdsm-client most probably can start VMs even when the engine is down
> > 2) Is their a means to debug what is going on with the engine failing
> > to start to repair (I hate reloading as the only fix for systems)
> You can use "hosted-engine" to start the HostedEngine VM in paused mode
> . Then you can connect over spice/vnc and then unpause the VM. Booting
> the HostedEngine VM from DVD is a little bit harder. You will need to
> get the HE's xml and edit it to point to the DVD. Once you got the
> altered HE config , you can define and start.
> > 3) Is their a means to re-deploy HCI setup wizard, but use the
> > "engine" volume and so retain the VMs and templates?
> You are not expected to mix HostedEngine and other VMs on the same
> storage domain (gluster volume).
>
> Best Regards,
> Strahil Nikolov
> >
> >
> >
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KPURBXOULJ7NPFS7LTTXQI3O5QRVHHY3/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/U5ZKGRY63OZSEIQVSZAKTFX4EX4EJOI3/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5DYQCR2SRXIRQELJ6VFMUGG7IRKZ2GE5/


[ovirt-users] Re: potential split-brain after upgrading Gluster version and rebooting one of three storage nodes

2021-01-11 Thread Alex K
On Mon, Jan 11, 2021, 20:51 Jayme  wrote:

> Correct me if I'm wrong but according to the docs, there might be a more
> elegant way of doing something similar with gluster cli ex: gluster volume
> heal  split-brain latest-mtime  -- although I have never
> tried it myself.
>
This is the usual way I resolve split brains.


> On Mon, Jan 11, 2021 at 1:50 PM Strahil Nikolov via Users 
> wrote:
>
>>
>> > Is this a split brain situation and how can I solve this? I would be
>> > very grateful for any help.
>> I've seen it before. Just check on the nodes which brick contains the
>> newest file (there is a timestamp inside it) and then rsync that file
>> from the node with newest version to the rest.
>> If gluster keeps showing that the file is still needing heal - just
>> "cat" it from the FUSE client (the mountpoint in /rhev/).
>>
>> Best Regards,
>> Strahil Nikolov
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2GLJIZQLFUZFSIVAVFFNG4CJZHNY7HFP/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DRZ76K554HN24ZVSVR7D2LGCUAICQCLR/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/46S3DOQHR6HEZYHXNKCQDZCFZY3BA6QN/


[ovirt-users] Re: 2021 first ovirt network question

2021-01-07 Thread Alex K
On Thu, Jan 7, 2021, 16:14  wrote:

> Thanks for advice.
> Here is the iperf3 test results
>
> Connecting to host xyz.example.com, port 6000
> [  4] local XXX.XXX.XXX.XXX port 36140 connected to XYZ.XYZ.XYZ.XYZ port
> 6000
> [ ID] Interval   Transfer Bandwidth   Retr  Cwnd
> [  4]   0.00-1.00   sec  81.9 MBytes   687 Mbits/sec0352 KBytes
>
> [  4]   1.00-2.00   sec  80.5 MBytes   676 Mbits/sec0352 KBytes
>
> [  4]   2.00-3.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   3.00-4.00   sec  79.8 MBytes   669 Mbits/sec0362 KBytes
>
> [  4]   4.00-5.00   sec  80.6 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   5.00-6.00   sec  82.0 MBytes   688 Mbits/sec0362 KBytes
>
> [  4]   6.00-7.00   sec  81.3 MBytes   682 Mbits/sec0362 KBytes
>
> [  4]   7.00-8.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   8.00-9.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   9.00-10.00  sec  79.8 MBytes   669 Mbits/sec0362 KBytes
>
Assuming xyz.example.com is in the display network you need to find out
what is throttling you at these values.

>
> Actually, what i was trying to ask is is there any reletion between
> "default route" and "display" network on oVirt network.
>
No, they should not be related

Because, if there is, it might be the source of the problem.
> As i wrote above, my "ovirtmanagement" and "default route"  network on the
> 1Gb port
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TPQXDGMQOVCO2FFBOW2S5G4AVPSIZ2ZB/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F77JSYHOKXTZCZFFMNN2IZTHLCNHC4HP/


[ovirt-users] Re: CentOS Stream support

2021-01-05 Thread Alex K
On Fri, Jun 5, 2020, 11:36 Michal Skrivanek 
wrote:

> Hi all,
> we would like to ask about interest in community about oVirt moving to
> CentOS Stream.
> There were some requests before but it’s hard to see how many people would
> really like to see that.
>
> With CentOS releases lagging behind RHEL for months it’s interesting to
> consider moving to CentOS Stream as it is much more up to date and allows
> us to fix bugs faster, with less workarounds and overhead for maintaining
> old code. E.g. our current integration tests do not really pass on CentOS
> 8.1 and we can’t really do much about that other than wait for more up to
> date packages. It would also bring us closer to make oVirt run smoothly on
> RHEL as that is also much closer to Stream than it is to outdated CentOS.
>
> So..would you like us to support CentOS Stream?
>
The answer is yes, though I do not see any other option, if I'm not
mistaken.

We don’t really have capacity to run 3 different platforms, would you still
> want oVirt to support CentOS Stream if it means “less support” for regular
> CentOS?
> There are some concerns about Stream being a bit less stable, do you share
> those concerns?
>
> Thank you for your comments,
> michal
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3B5MJKO7BS2DMQL3XOXPNO4BU3YDL52T/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XRDC2S6RKJ2BW7MJCTMLPD6Z5RSPODPX/


[ovirt-users] Re: fence_xvm for testing

2020-12-17 Thread Alex K
On Thu, Dec 17, 2020, 14:43 Strahil Nikolov  wrote:

> Sadly no. I have used it on test Clusters with KVM VMs.
>
You mean clusters managed with pacemaker?

>
> If you manage to use oVirt as a nested setup, fencing works quite well
> with ovirt.
>
I have setup nested ovirt 4.3 on top a KVM host running centos 8 stream.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В четвъртък, 17 декември 2020 г., 11:16:47 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi Strahil,
>
> Do you have a working setup with fence_xvm for ovirt 4.3?
>
> On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
> wrote:
> > Fence_xvm requires a key is deployed on both the Host and the VMs in
> order to succeed. What is happening when you use the cli on any of the VMs ?
> > Also, the VMs require an open tcp port to receive the necessary output
> of each request.
> >
> > Best Regards,
> > Strahil Nikolov
> >
> >
> >
> >
> >
> >
> > В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
> >
> >
> >
> >
> >
> > Hi friends,
> >
> > I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
> >
> > I have followed the following steps:
> > https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
> >
> > I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> > From command line all seems fine and I can get the status of the host
> VMs, but I was not able to find what is needed to set this up at engine UI:
> >
> >
> > At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> > I always get an error at GUI while engine logs give:
> >
> >
> > 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> > 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> > 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> > 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> > 2020-12-14 08:53:48,485Z ERROR 
> > [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> > 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> > 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> > 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> > 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> >
> >

[ovirt-users] Re: fence_xvm for testing

2020-12-17 Thread Alex K
Hi Strahil,

Do you have a working setup with fence_xvm for ovirt 4.3?

On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
wrote:

> Fence_xvm requires a key is deployed on both the Host and the VMs in order
> to succeed. What is happening when you use the cli on any of the VMs ?
> Also, the VMs require an open tcp port to receive the necessary output of
> each request.
>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi friends,
>
> I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
>
> I have followed the following steps:
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>
> I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> From command line all seems fine and I can get the status of the host VMs,
> but I was not able to find what is needed to set this up at engine UI:
>
>
> At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> I always get an error at GUI while engine logs give:
>
>
> 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> 2020-12-14 08:53:48,485Z ERROR 
> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
>
>
> Any idea?
>
> Thanx,
> Alex
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/B7IHC4MYY5LJFJMEJMLRRFSTMD7IK23I/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DRBMQPDNN3KJL2CPODXVAJBA5X5OJ4J/


[ovirt-users] Re: fence_xvm for testing

2020-12-15 Thread Alex K
On Tue, Dec 15, 2020 at 1:43 PM emesika  wrote:

> The problem is that the custom fencing configuration is not defined well
>
> Please follow [1] and retry
>
> [1]
> https://www.ovirt.org/develop/developer-guide/engine/custom-fencing.html
>
Yes, I followed that.
I cannot see what I am missing:

[root@manager ~]# engine-config -g CustomVdsFenceType
CustomVdsFenceType: fence_xvm version: general
[root@manager ~]# engine-config -g CustomFenceAgentMapping
CustomFenceAgentMapping: fence_xvm=xvm version: general
[root@manager ~]# engine-config -g CustomVdsFenceOptionMapping
CustomVdsFenceOptionMapping: fence_xvm: version: general


>
> On Tue, Dec 15, 2020 at 12:56 PM Alex K  wrote:
>
>>
>>
>> On Tue, Dec 15, 2020 at 12:34 PM Martin Perina 
>> wrote:
>>
>>>
>>>
>>> On Tue, Dec 15, 2020 at 11:18 AM Alex K  wrote:
>>>
>>>>
>>>>
>>>> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina 
>>>> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> could you please provide engine.log? And also vdsm.log from a host
>>>>> which was acting as a fence proxy?
>>>>>
>>>>
>>>> At proxy host (kvm1) I see the following vdsm.log:
>>>>
>>>> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer]
>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>>
>>>
>>> Isn't there stdout and stderr content of fence_xvm execution a few lines
>>> above, which should reveal the exact error? If not, then could you please
>>> turn on debug logging using below command:
>>>
>>> vdsm-client Host setLogLevel level=DEBUG
>>>
>>> This should be executed on the host which acts as a fence proxy (if you 
>>> have multiple hosts, then you would need to turn on debug on all, because 
>>> the fence proxy is selected randomly).
>>>
>>> Once we will have vdsm.log with fence_xvm execution details, then you can 
>>> change log level to INFO again by running:
>>>
>>> I had to set engine-config -s CustomFenceAgentMapping="fence_xvm=xvm"
>> at engine, as it seems the host prepends fence_.
>> After that I got the following at the proxy host with DEBUG enabled:
>>
>> 2020-12-15 10:51:57,891+ DEBUG (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>> 2020-12-15 10:51:57,892+ DEBUG (jsonrpc/7) [root] /usr/bin/taskset
>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>> 2020-12-15 10:51:57,911+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.02 seconds (__init__:312)
>> 2020-12-15 10:51:58,339+ DEBUG (jsonrpc/5) [jsonrpc.JsonRpcServer]
>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>> 2020-12-15 10:51:58,340+ DEBUG (jsonrpc/5) [root] /usr/bin/taskset
>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>> 2020-12-15 10:51:58,356+ INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312
>>
>> while at engine at got:
>> 2020-12-15 10:51:57,873Z INFO
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
>> FENCE_OPERATION_USING_AGENT_AND_PROXY_STARTED(9,020), Executing power
>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>> and Fence Agent xvm:225.0.0.12.
>> 2020-12-15 10:51:57,888Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] START,
>> FenceVdsVDSCommand(HostName = kvm1.lab.local,
>> FenceVdsVDSCommandParameters:{hostId=&#x

[ovirt-users] Re: fence_xvm for testing

2020-12-15 Thread Alex K
On Tue, Dec 15, 2020 at 12:34 PM Martin Perina  wrote:

>
>
> On Tue, Dec 15, 2020 at 11:18 AM Alex K  wrote:
>
>>
>>
>> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina 
>> wrote:
>>
>>> Hi,
>>>
>>> could you please provide engine.log? And also vdsm.log from a host which
>>> was acting as a fence proxy?
>>>
>>
>> At proxy host (kvm1) I see the following vdsm.log:
>>
>> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>
>
> Isn't there stdout and stderr content of fence_xvm execution a few lines
> above, which should reveal the exact error? If not, then could you please
> turn on debug logging using below command:
>
> vdsm-client Host setLogLevel level=DEBUG
>
> This should be executed on the host which acts as a fence proxy (if you have 
> multiple hosts, then you would need to turn on debug on all, because the 
> fence proxy is selected randomly).
>
> Once we will have vdsm.log with fence_xvm execution details, then you can 
> change log level to INFO again by running:
>
> I had to set engine-config -s CustomFenceAgentMapping="fence_xvm=xvm" at
engine, as it seems the host prepends fence_.
After that I got the following at the proxy host with DEBUG enabled:

2020-12-15 10:51:57,891+ DEBUG (jsonrpc/7) [jsonrpc.JsonRpcServer]
Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
2020-12-15 10:51:57,892+ DEBUG (jsonrpc/7) [root] /usr/bin/taskset
--cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
2020-12-15 10:51:57,911+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
call Host.fenceNode failed (error 1) in 0.02 seconds (__init__:312)
2020-12-15 10:51:58,339+ DEBUG (jsonrpc/5) [jsonrpc.JsonRpcServer]
Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
2020-12-15 10:51:58,340+ DEBUG (jsonrpc/5) [root] /usr/bin/taskset
--cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
2020-12-15 10:51:58,356+ INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer] RPC
call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312

while at engine at got:
2020-12-15 10:51:57,873Z INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_STARTED(9,020), Executing power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent xvm:225.0.0.12.
2020-12-15 10:51:57,888Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] START,
FenceVdsVDSCommand(HostName = kvm1.lab.local,
FenceVdsVDSCommandParameters:{hostId='91c81bbe-5933-4ed0-b9c5-2c8c277e44c7',
targetVdsId='b5e8fe3d-cbea-44cb-835a-f88d6d70c163', action='STATUS',
agent='FenceAgent:{id='null', hostId='null', order='1', type='xvm',
ip='225.0.0.12', port='0', user='root', password='***',
encryptOptions='false', options='port=ovirt-node0'}', policy='null'}), log
id: e6d3e8c
2020-12-15 10:51:58,008Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-15 10:51:58,008Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: e6d3e8c
2020-12-15 10:51:58,133Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0

[ovirt-users] Re: fence_xvm for testing

2020-12-15 Thread Alex K
7;: '0', 'name': 'lo', 'tx': '1085195824', 'txDropped': '0',
'duplex': 'unknown', 'sampleTime': 1608027187.616894, 'rx': '1085195824',
'state': 'up'}, 'ovs-system': {'rxErrors': '0', 'txErrors': '0', 'speed':
'1000', 'rxDropped': '0', 'name': 'ovs-system', 'tx': '0', 'txDropped':
'0', 'duplex': 'unknown', 'sampleTime': 1608027187.616894, 'rx': '0',
'state': 'down'}, ';vdsmdummy;': {'rxErrors': '0', 'txErrors': '0',
'speed': '1000', 'rxDropped': '0', 'name': ';vdsmdummy;', 'tx': '0',
'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027187.616894,
'rx': '0', 'state': 'down'}, 'br-int': {'rxErrors': '0', 'txErrors': '0',
'speed': '1000', 'rxDropped': '0', 'name': 'br-int', 'tx': '0',
'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027187.616894,
'rx': '0', 'state': 'down'}, 'eth1': {'rxErrors': '0', 'txErrors': '0',
'speed': '1000', 'rxDropped': '0', 'name': 'eth1', 'tx': '83689498',
'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027187.616894,
'rx': '300653876', 'state': 'up'}, 'eth0': {'rxErrors': '0', 'txErrors':
'0', 'speed': '1000', 'rxDropped': '0', 'name': 'eth0', 'tx': '2985215',
'txDropped': '0', 'duplex': 'unknown', 'sampleTime': 1608027187.616894,
'rx': '28272664', 'state': 'up'}}, 'txDropped': '149', 'anonHugePages':
'182', 'ksmPages': 100, 'elapsedTime': '5718.91', 'cpuLoad': '0.42',
'cpuSys': '0.63', 'diskStats': {'/var/log': {'free': '16444'},
'/var/run/vdsm/': {'free': '4909'}, '/tmp': {'free': '16444'}},
'cpuUserVdsmd': '1.33', 'netConfigDirty': 'False', 'memCommitted': 0,
'ksmState': False, 'vmMigrating': 0, 'ksmCpu': 0, 'memAvailable': 9402,
'bootTime': '1608021428', 'haStats': {'active': True, 'configured': True,
'score': 3400, 'localMaintenance': False, 'globalMaintenance': True},
'momStatus': 'active', 'multipathHealth': {}, 'rxDropped': '0',
'outgoingVmMigrations': 0, 'swapTotal': 6015, 'swapFree': 6015,
'hugepages': defaultdict(, {1048576: {'resv_hugepages': 0,
'free_hugepages': 0, 'nr_overcommit_hugepages': 0, 'surplus_hugepages': 0,
'vm.free_hugepages': 0, 'nr_hugepages': 0, 'nr_hugepages_mempolicy': 0},
2048: {'resv_hugepages': 0, 'free_hugepages': 0, 'nr_overcommit_hugepages':
0, 'surplus_hugepages': 0, 'vm.free_hugepages': 0, 'nr_hugepages': 0,
'nr_hugepages_mempolicy': 0}}), 'dateTime': '2020-12-15T10:13:07 GMT',
'cpuUser': '1.50', 'memFree': 9146, 'cpuIdle': '97.87', 'vmActive': 0,
'v2vJobs': {}, 'cpuSysVdsmd': '0.60'}} from=::1,55238 (api:54)

While at engine I have:
2020-12-15 10:09:57,393Z ERROR
[org.ovirt.engine.core.utils.pm.VdsFenceOptions] (default task-13)
[fa61ae72-bc0c-4487-aeec-2b847877b6b5] Cannot find fence agent named
'fence_xvm' in fence option mapping
2020-12-15 10:09:57,519Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-13) [fa61ae72-bc0c-4487-aeec-2b847877b6b5] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-15 10:09:57,519Z INFO
 [org.ovirt

[ovirt-users] Re: fence_xvm for testing

2020-12-15 Thread Alex K
On Tue, Dec 15, 2020 at 11:07 AM Alex K  wrote:

>
>
> On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
> wrote:
>
>> Fence_xvm requires a key is deployed on both the Host and the VMs in
>> order to succeed. What is happening when you use the cli on any of the VMs ?
>> Also, the VMs require an open tcp port to receive the necessary output of
>> each request.I
>
> I deployed keys at the physical host and virtual hosts, as per
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
> I can get the VM status from the virtual hosts:
>
> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
> /etc/cluster/fence_xvm.key -H ovirt-node0 -o status
> Status: ON
> You have new mail in /var/spool/mail/root
> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
> /etc/cluster/fence_xvm.key -H ovirt-node1 -o status
> Status: ON
>
> kvm0 and kvm1 are the hostnames of each virtual host, while ovirt-node0
> and ovirt-node1 are the domain names of the same virtual hosts as defined
> at virsh.
>

I am passing also the port/domain option at GUI, but from logs it seems it
is being ignored as it is not being logged from engine.

[image: image.png]
tried also domain=ovirt-node0 with same results.



>> Best Regards,
>> Strahil Nikolov
>>
>>
>>
>>
>>
>>
>> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
>> rightkickt...@gmail.com> написа:
>>
>>
>>
>>
>>
>> Hi friends,
>>
>> I was wondering what is needed to setup fence_xvm in order to use for
>> power management in virtual nested environments for testing purposes.
>>
>> I have followed the following steps:
>> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>>
>> I tried also engine-config -s
>> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
>> From command line all seems fine and I can get the status of the host
>> VMs, but I was not able to find what is needed to set this up at engine UI:
>>
>>
>> At username and pass I just filled dummy values as they should not be
>> needed for fence_xvm.
>> I always get an error at GUI while engine logs give:
>>
>>
>> 2020-12-14 08:53:48,343Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
>> kvm0.lab.local.Internal JSON-RPC error
>> 2020-12-14 08:53:48,343Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
>> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
>> message='Internal JSON-RPC error'}, log id: 2437b13c
>> 2020-12-14 08:53:48,400Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>> and Fence Agent fence_xvm:225.0.0.12 failed.
>> 2020-12-14 08:53:48,400Z WARN
>>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
>> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
>> 'kvm1.lab.local', trying another proxy
>> 2020-12-14 08:53:48,485Z ERROR 
>> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
>> action on host 'kvm0.lab.local', no suitable proxy host was found.
>> 2020-12-14 08:53:48,486Z WARN
>>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
>> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
>> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
>> 2020-12-14 08:53:48,582Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
>> kvm0.lab.local.Internal JSON-RPC error
>> 2020-12-14 08:53:48,582Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
>> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
>> message='Internal JSON-RPC error'}, log id: 8607bc9
>&g

[ovirt-users] Re: fence_xvm for testing

2020-12-15 Thread Alex K
On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
wrote:

> Fence_xvm requires a key is deployed on both the Host and the VMs in order
> to succeed. What is happening when you use the cli on any of the VMs ?
> Also, the VMs require an open tcp port to receive the necessary output of
> each request.I

I deployed keys at the physical host and virtual hosts, as per
https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
I can get the VM status from the virtual hosts:

[root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k /etc/cluster/fence_xvm.key
-H ovirt-node0 -o status
Status: ON
You have new mail in /var/spool/mail/root
[root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k /etc/cluster/fence_xvm.key
-H ovirt-node1 -o status
Status: ON

kvm0 and kvm1 are the hostnames of each virtual host, while ovirt-node0 and
ovirt-node1 are the domain names of the same virtual hosts as defined at
virsh.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi friends,
>
> I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
>
> I have followed the following steps:
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>
> I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> From command line all seems fine and I can get the status of the host VMs,
> but I was not able to find what is needed to set this up at engine UI:
>
>
> At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> I always get an error at GUI while engine logs give:
>
>
> 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> 2020-12-14 08:53:48,485Z ERROR 
> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
>
>
> Any idea?
>
> Thanx,
> Alex
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-polic

[ovirt-users] fence_xvm for testing

2020-12-14 Thread Alex K
Hi friends,

I was wondering what is needed to setup fence_xvm in order to use for power
management in virtual nested environments for testing purposes.

I have followed the following steps:
https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md

I tried also

engine-config -s CustomFenceAgentMapping="fence_xvm=_fence_xvm"

>From command line all seems fine and I can get the status of the host VMs,
but I was not able to find what is needed to set this up at engine UI:

[image: image.png]
At username and pass I just filled dummy values as they should not be
needed for fence_xvm.
I always get an error at GUI while engine logs give:


2020-12-14 08:53:48,343Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-14 08:53:48,343Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: 2437b13c
2020-12-14 08:53:48,400Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent fence_xvm:225.0.0.12 failed.
2020-12-14 08:53:48,400Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
'kvm1.lab.local', trying another proxy
2020-12-14 08:53:48,485Z ERROR
[org.ovirt.engine.core.bll.pm.FenceProxyLocator] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Can not run fence action on host
'kvm0.lab.local', no suitable proxy host was found.
2020-12-14 08:53:48,486Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
2020-12-14 08:53:48,582Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-14 08:53:48,582Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: 8607bc9
2020-12-14 08:53:48,637Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent fence_xvm:225.0.0.12 failed.


Any idea?

Thanx,
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/B7IHC4MYY5LJFJMEJMLRRFSTMD7IK23I/


[ovirt-users] Re: OPNsense / FreeBSD 12.1

2020-12-12 Thread Alex K
On Sat, Dec 12, 2020, 03:37 Jorge Visentini 
wrote:

> Hi Alex, thank you for your reply.
>
> So ... I didn't see any error messages.
> I attached the log output and some prints to get an idea of what I'm
> talking about.
>
I see you have defined the guest to be of OS type RHEL. can you try to set
it general Linux? I don't remember now if there is a bsd/freebsd type that
you can set at os type for guest.

>
> Thank you again.
>
> Em sex., 11 de dez. de 2020 às 17:19, Alex K 
> escreveu:
>
>>
>>
>> On Fri, Dec 11, 2020, 20:39 Jorge Visentini 
>> wrote:
>>
>>> Hi all.
>>>
>>> I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it was not
>>> possible to detect the NICs.
>>>
>>> I tried both the virtio driver and the e1000. Virtio does not detect and
>>> e1000 crashes at startup.
>>> In pure KVM, it works, so I believe there is some incompatibility with
>>> oVirt 4.4.4.
>>>
>>> Any tips?
>>>
>> Please check/share the error message you observe at vdsm logs when
>> starting the VM.
>>
>>>
>>> --
>>> Att,
>>> Jorge Visentini
>>> +55 55 98432-9868
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/
>>>
>>
>
> --
> Att,
> Jorge Visentini
> +55 55 98432-9868
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BHZA6VJPA3VUUPX732HRPTDSC24WWHVS/


[ovirt-users] Re: OPNsense / FreeBSD 12.1

2020-12-11 Thread Alex K
On Fri, Dec 11, 2020, 20:39 Jorge Visentini 
wrote:

> Hi all.
>
> I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it was not possible
> to detect the NICs.
>
> I tried both the virtio driver and the e1000. Virtio does not detect and
> e1000 crashes at startup.
> In pure KVM, it works, so I believe there is some incompatibility with
> oVirt 4.4.4.
>
> Any tips?
>
Please check/share the error message you observe at vdsm logs when starting
the VM.

>
> --
> Att,
> Jorge Visentini
> +55 55 98432-9868
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J5FX4SOV5I5CDYWTR4VOGUK5HT4KIZFB/


[ovirt-users] Re: CentOS 8 is dead

2020-12-10 Thread Alex McWhirter

On 2020-12-10 15:02, tho...@hoberg.net wrote:

I came to oVirt thinking that it was like CentOS: There might be bugs,
but given the mainline usage in home and coporate labs with light
workloads and nothing special, chances to hit one should be pretty
minor: I like looking for new fronteers atop of my OS, not inside.

I have been runing CentOS/OpenVZ for years in a previous job, mission
critical 24x7 stuff where minutes of outage meant being grilled for
hours in meetings afterwards. And with PCI-DSS compliance certified.
Never had an issue with OpenVZ/CentOS, all those minute goofs where
human error or Oracle inventing execution plans.

Boy was I wrong about oVirt! Just setting it up took weeks. Ansible
loves eating Gigahertz and I was running on Atoms. I had to learn how
to switch from an i7 in mid-installation to have it finish at all. I
the end I had learned tons of new things, but all I wanted was a
cluster that would work as much out of the box as CentOS or OpenVZ.

Something as fundamental as exporting and importing a VM might simply
not work and not even get fixed.

Migrating HCI from CentOS7/oVirt 4.3 to CentOS8/oVirt 4.4 is anything
but smooth, a complete rebuild seems the lesser evil: Now if only
exports and imports worked reliably!

Rebooting a HCI nodes seems to involve an "I am dying!" aria on the
network, where the whole switch becomes unresponsive for 10 minutes
and the fault tolerant cluster on it being 100% unresponsive
(including all other machines on that switch). I has so much fun
resynching gluster file systems and searching through all those log
files for signs as to what was going on!
And the instructions on how to fix gluster issues seems so wonderfully
detailed and vague, it seems one could spend days trying to fix things
or rebuild and restore. It doesn't help that the fate of Gluster very
much seems to hang in the air, when the scalable HCI aspect was the
only reason I ever wanted oVirt.

Could just be an issue with RealTek adapters, because I never oberved
something like that with Intel NICs or on (recycled old) enterprise
hardware

I guess official support for a 3 node HCI cluster on passive Atoms
isn't going to happen, unless I make happen 100% myself: It's open
source after all!

Just think what 3/6/9 node HCI based on Raspberry PI would do for the
project! The 9 node HCI should deliver better 10Gbit GlusterFS
performance than most QNAP units at the same cost with a single 10Gbit
interface even with 7:2 erasure coding!

I really think the future of oVirt may be at the edge, not in the
datacenter core.

In short: oVirt is very much beta software and quite simply a
full-time job if you depend on it working over time.

I can't see that getting any better when one beta gets to run on top
of another beta. At the moment my oVirt experience has me doubt RHV on
RHEL would work any better, even if it's cheaper than VMware.

OpenVZ was simply the far better alternative than KVM for most of the
things I needed from virtualization and it was mainly the hastle of
trying to make that work with RHEL which had me switching to CentOS.
CentOS with OpenVZ was the bedrock of that business for 15 years and
proved to me that Redhat was hell-bent on making bad decisions on
technological direction.

I would have actually liked to pay a license for each of the physical
hosts we used, but it turned out much less of a bother to forget about
negotiating licensing conditions for OpenVZ containers and use CentOS
instead.

BTW: I am going into a meeting tomorrow, where after two years of
pilot usage, we might just decide to kill our current oVirt farms,
because they didn't deliver on "a free open-source virtualization
solution for your entire enterprise".

I'll keep my Atoms running a little longer, mostly because I have
nothing else to use them for. For a first time in months, they show
zero gluster replication errors, perhaps because for lack of updates
there have been no node reboots. CentOS 7 is stable, but oVirt 4.3 out
of support.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GBZ46VXFZZXOMBNLNQTB34ZFYFVGDPB2/


oVirt has more or less always been RHEV upstream, while not necessarily 
beta, people using oVirt over RHEV have been subject to the occasional 
broken feature or two, at least at early release. If you need the 
stability and support, RHEV is the answer. However, we use oVirt and 
CentOS 8 in production on a fairly large scale and it's not an 
unreasonable amount of work to keep running. It's certainly not a set it 
and forget it scenario, but it works very well for us.


There are also a ton of moving parts to running oVirt at scale. 
hardware, firmware, network configuration, softwa

[ovirt-users] Re: Recent news & oVirt future

2020-12-10 Thread Alex McWhirter

On 2020-12-10 15:47, Charles Kozler wrote:

I guess this is probably a question for all current open source projects that red hat runs but -  

Does this mean oVirt will effectively become a rolling release type situation as well? 

How exactly is oVirt going to stay open source and stay in cadence with all the other updates happening around it on packages/etc that it depends on if the streams are rolling release? Do they now need to fork every piece of dependency? 


What exactly does this mean for oVirt going forward and its overall stability?

Notice to Recipient: https://www.fixflyer.com/disclaimer [1] 
___

Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7IUWGES2IG4BELLUPMYGEKN3GC6XVCHA/


Time will tell, but i suspect if anything this will make ovirt
development easier in some regards. ovirt already enables multiple SIG
streams, unofficial updates, etc... A lot of that would be streamlined.
Ovirt would be able to target future RHEL much easier by targeting
CentOS stream. 


Links:
--
[1] https://www.fixflyer.com/disclaimer___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7XEIEAWBERXD7PYQP572JDFJ56QBNP2E/


[ovirt-users] Re: Nodes in CentOS 8.3 and oVirt 4.4.3.12-1.el8 but not able to update cluster version

2020-12-10 Thread Alex McWhirter

You have to put all hosts in the cluster to maintenance mode first, then
you can change the compat version. 


On 2020-12-10 11:09, Gianluca Cecchi wrote:

Hello, 
my engine is 4.4.3.12-1.el8 and my 3 oVirt nodes (based on plain CentOS due to megaraid_sas kernel module needed) have been updated, bringing them to CentOS 8.3. 
But if I try to put cluster into 4.5 I get the error: 
" 
Error while executing action: Cannot change Cluster Compatibility Version to higher version when there are active Hosts with lower version. 
-Please move Host ov300, ov301, ov200 with lower version to maintenance first. 
" 
Do I have to wait until final 4.4.4 or what is the problem? 
Does 4.5 gives anything more apart the second number... (joking..)? 

On nodes: 


Software

OS Version: RHEL - 8.3 - 1.2011.el8
OS Description: CentOS Linux 8
Kernel Version: 4.18.0 - 240.1.1.el8_3.x86_64
KVM Version: 4.2.0 - 34.module_el8.3.0+555+a55c8938
LIBVIRT Version: libvirt-6.0.0-28.module_el8.3.0+555+a55c8938
VDSM Version: vdsm-4.40.35.1-1.el8
SPICE Version: 0.14.3 - 3.el8
GlusterFS Version: [N/A]
CEPH Version: librbd1-12.2.7-9.el8
Open vSwitch Version: [N/A]
Nmstate Version: nmstate-0.3.6-2.el8
Kernel Features: MDS: (Vulnerable: Clear CPU buffers attempted, no microcode; 
SMT vulnerable), L1TF: (Mitigation: PTE Inversion; VMX: conditional cache 
flushes, SMT vulnerable), SRBDS: (Not affected), MELTDOWN: (Mitigation: PTI), 
SPECTRE_V1: (Mitigation: usercopy/swapgs barriers and __user pointer 
sanitization), SPECTRE_V2: (Mitigation: Full generic retpoline, IBPB: 
conditional, IBRS_FW, STIBP: conditional, RSB filling), ITLB_MULTIHIT: (KVM: 
Mitigation: Split huge pages), TSX_ASYNC_ABORT: (Not affected), 
SPEC_STORE_BYPASS: (Mitigation: Speculative Store Bypass disabled via prctl and 
seccomp)
VNC Encryption: Disabled
FIPS mode enabled: Disabled 

Gianluca 
___

Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W7UEBHJA2ACLTMVX2QTMWZVWU4QK2Y6L/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z7JT2ZUIG76FQKZRZWVHYPTJ537UVY7F/


[ovirt-users] Re: CentOS 8 is dead

2020-12-08 Thread Alex McWhirter

On 2020-12-08 14:37, Strahil Nikolov via Users wrote:

Hello All,

I'm really worried about the following news:
https://blog.centos.org/2020/12/future-is-centos-stream/

Did anyone tried to port oVirt to SLES/openSUSE or any Debian-based
distro ?

Best Regards,
Strahil Nikolov
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HZC4D4OSYL64DX5VYXDJCHDNRZDRGIT6/


I fail to see a major issue honestly. If current RHEL is 8.3, CentOS 
Stream is essentially the RC for 8.4... oVirt in and of itself is also 
an upstream project, targeting upstream in advance is likely beneficial 
for all parties involved.


CentOS has been lagging behind RHEL quite a lot, creating it's own set 
of issues. Being ahead of the curve is more beneficial than detrimental 
IMO. The RHEL sources are still being published to the CentOS git, oVirt 
node could be built against that, time will tell.


Supported or not, i bet someone forks it anyways.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SM3JM6DHDCRJGH4LMGIKYOLCJKGWJKS4/


[ovirt-users] Re: new hyperconverged setup

2020-12-02 Thread Alex McWhirter

On 2020-12-02 09:56, cpo cpo wrote:

Thanks.  Trying to figure out if I should use dedup/comp now.  If I
don't is the total usable space if I follow your setup guide for my
storage domain going to be 21tb once I am done with everything (3 vm
storage volumes, one per disk)?

Thanks,
Donnie
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5F3VBLSQPRPJPMGHRZSU5KXXNRENM7JA/


the comp/dedupe features use VDO, which IMO is a fairly large 
performance hit, at least in my testing on 9x900GB 24 drive raid 10 
arrays.


My personal recommendation is to just use hardware / mdadm raid and lvm 
on top (oVirt can do this for you in the UI)


If you really need comp/dedupe, we use ZFS in production for that 
purpose. Granted this is not supported by oVirt, so YMMV.

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3HUNIDA3JRCX67DXW5RZ2YZCAKAW3T5Q/


[ovirt-users] Re: Can not connect to gluster storage

2020-11-27 Thread Alex K
On Fri, Nov 27, 2020, 15:02 Stefan Wolf  wrote:

> Hello,
> I ve a host that can not connet to gluster storage.
> It has worked since I ve set up the environment, and today it stoped
> working
>
> this are the error messages in the webui
> The error message for connection kvm380.durchhalten.intern:/data returned
> by VDSM was: Failed to fetch Gluster Volume List
> Failed to connect Host kvm380.durchhalten.intern to the Storage Domains
> data.
> Failed to connect Host kvm380.durchhalten.intern to the Storage Domains
> hosted_storage.
>
>
> and here the vdsm.log
>
> StorageDomainDoesNotExist: Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',)
> 2020-11-27 12:59:07,665+ INFO  (jsonrpc/2) [storage.TaskManager.Task]
> (Task='8bed48b8-0696-4d3f-966a-119219f3b013') aborting: Task is aborted:
> "Storage domain does not exist: (u'36663740-576a-4498-b28e-0a402628c6a7',)"
> - code 358 (task:1181)
> 2020-11-27 12:59:07,665+ ERROR (jsonrpc/2) [storage.Dispatcher] FINISH
> getStorageDomainInfo error=Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',) (dispatcher:83)
> 2020-11-27 12:59:07,666+ INFO  (jsonrpc/2) [jsonrpc.JsonRpcServer] RPC
> call StorageDomain.getInfo failed (error 358) in 0.38 seconds (__init__:312)
> 2020-11-27 12:59:07,698+ INFO  (jsonrpc/7) [vdsm.api] START
> connectStorageServer(domType=7,
> spUUID=u'----', conList=[{u'id':
> u'e29cf818-5ee5-46e1-85c1-8aeefa33e95d', u'vfs_type': u'glusterfs',
> u'connection': u'kvm380.durchhalten.intern:/engine', u'user': u'kvm'}],
> options=None) from=::1,40964, task_id=3a3eeb80-50ef-4710-a4f4-9d35da2ff281
> (api:48)
> 2020-11-27 12:59:07,871+ ERROR (jsonrpc/7) [storage.HSM] Could not
> connect to storageServer (hsm:2420)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2417,
> in connectStorageServer
> conObj.connect()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 167, in connect
> self.validate()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 297, in validate
> if not self.volinfo:
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 284, in volinfo
> self._volinfo = self._get_gluster_volinfo()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 329, in _get_gluster_volinfo
> self._volfileserver)
>   File "/usr/lib/python2.7/site-packages/vdsm/common/supervdsm.py", line
> 56, in __call__
> return callMethod()
>   File "/usr/lib/python2.7/site-packages/vdsm/common/supervdsm.py", line
> 54, in 
> **kwargs)
>   File "", line 2, in glusterVolumeInfo
>   File "/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in
> _callmethod
> raise convert_to_error(kind, result)
> GlusterVolumesListFailedException: Volume list failed: rc=30806 out=()
> err=['Volume does not exist']
> 2020-11-27 12:59:07,871+ INFO  (jsonrpc/7) [vdsm.api] FINISH
> connectStorageServer return={'statuslist': [{'status': 4149, 'id':
> u'e29cf818-5ee5-46e1-85c1-8aeefa33e95d'}]} from=::1,40964,
> task_id=3a3eeb80-50ef-4710-a4f4-9d35da2ff281 (api:54)
> 2020-11-27 12:59:07,871+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
> call StoragePool.connectStorageServer succeeded in 0.18 seconds
> (__init__:312)
> 2020-11-27 12:59:08,474+ INFO  (Reactor thread)
> [ProtocolDetector.AcceptorImpl] Accepted connection from ::1:40966
> (protocoldetector:61)
> 2020-11-27 12:59:08,484+ INFO  (Reactor thread)
> [ProtocolDetector.Detector] Detected protocol stomp from ::1:40966
> (protocoldetector:125)
> 2020-11-27 12:59:08,484+ INFO  (Reactor thread) [Broker.StompAdapter]
> Processing CONNECT request (stompserver:95)
> 2020-11-27 12:59:08,485+ INFO  (JsonRpc (StompReactor))
> [Broker.StompAdapter] Subscribe command received (stompserver:124)
> 2020-11-27 12:59:08,525+ INFO  (jsonrpc/1) [jsonrpc.JsonRpcServer] RPC
> call Host.ping2 succeeded in 0.00 seconds (__init__:312)
> 2020-11-27 12:59:08,529+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer] RPC
> call Host.ping2 succeeded in 0.00 seconds (__init__:312)
> 2020-11-27 12:59:08,533+ INFO  (jsonrpc/6) [vdsm.api] START
> getStorageDomainInfo(sdUUID=u'36663740-576a-4498-b28e-0a402628c6a7',
> options=None) from=::1,40966, task_id=ee3ac98e-6a93-4cb2-a626-5533c8fb78ad
> (api:48)
> 2020-11-27 12:59:08,909+ INFO  (jsonrpc/6) [vdsm.api] FINISH
> getStorageDomainInfo error=Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',) from=::1,40966,
> task_id=ee3ac98e-6a93-4cb2-a626-5533c8fb78ad (api:52)
> 2020-11-27 12:59:08,910+ ERROR (jsonrpc/6) [storage.TaskManager.Task]
> (Task='ee3ac98e-6a93-4cb2-a626-5533c8fb78ad') Unexpected error (task:875)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882,
> in _run
> return fn(*args, **kargs)
>   Fi

[ovirt-users] Re: Connecting OVN network to physical network

2020-11-25 Thread Alex K
Seems that this is not supported when the switch type of cluster is "Linux
bridge".
I will need to use a new cluster with OVS type of switch.

Below the paragraph from [1]:
1.2. Physical Networks

It is possible to connect the OVN logical networks to a physical network,
akin to OpenStack’s physnet
<https://ovirt.org/develop/release-management/features/network/provider-physical-network.html>.
The traffic on the physical external network can optionally be VLAN tagged.
Connecting to external networks is *limited* to oVirt clusters configured
to use *Open vSwitch* switch type, which is currently in tech-preview.


[1]:
https://github.com/oVirt/ovirt-provider-ovn/blob/master/docs/provider_api_description.adoc#security

On Wed, Nov 25, 2020 at 9:47 PM Alex K  wrote:

> Hi all,
>
> I have created some logical switches at the OVN network provider (the
> default provider that is configured during engine-setup). This is working
> fine.
>
> I would like though to be able to connect a logical OVN switch to a
> physical network at which the hosts have access, so as to give access to
> guest VMs to this network. When connecting such switch to a physical
> network the guest VMs do not have access to the physical network:
>
> [image: image.png]
> It seems that this should be supported from ovirt. Am I missing something?
>
> P.S. I know I can provide such connectivity through standard networking,
> though was wondering if this can be done with OVN.
>
> Many thanx,
> Alex
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MYM3HZLNJV7O5QU2SPH5IJTBLGWG2MCW/


[ovirt-users] Connecting OVN network to physical network

2020-11-25 Thread Alex K
Hi all,

I have created some logical switches at the OVN network provider (the
default provider that is configured during engine-setup). This is working
fine.

I would like though to be able to connect a logical OVN switch to a
physical network at which the hosts have access, so as to give access to
guest VMs to this network. When connecting such switch to a physical
network the guest VMs do not have access to the physical network:

[image: image.png]
It seems that this should be supported from ovirt. Am I missing something?

P.S. I know I can provide such connectivity through standard networking,
though was wondering if this can be done with OVN.

Many thanx,
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WGSXE6ALQE3XHLIIVQCYKZFDV4L4DPGL/


[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

2020-11-25 Thread Alex K
On Wed, Nov 25, 2020 at 8:05 PM <3c.moni...@gruppofilippetti.it> wrote:

> Hi,
> it seems not work...
>
> bash-4.2$ psql
> psql (10.6)
> Type "help" for help.
>
> postgres=# SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM
> vm_images_view where imagestatus = 2);
> ERROR:  relation "vms" does not exist
> LINE 1: SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM...
>
seems you did not connect at engine DB.

At ovirt 4.3, do the following:

1. ssh at engine
2. su - postgres -c 'scl enable rh-postgresql10 -- psql'
3. \c engine
4. SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM
vm_images_view where imagestatus = 2);
5. SELECT image_guid from vm_images_view where imagestatus=2;
6. update images SET imagestatus=1 where image_guid = {The guid which
returned in the last query}



^
> postgres=#
>
> Thanks a lot anyway.
> M.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KWGD5PB7ACRAJ7VQRFSYFZE2SQDZTIPY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GT4NWMLI4M6OYTCQFGDFXGNTLENEMWSR/


[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

2020-11-25 Thread Alex K
On Tue, Nov 17, 2020, 18:42 <3c.moni...@gruppofilippetti.it> wrote:

> Hi.
> taskcleaner and unlock_entity are just 2 items of reported rhel solution
> I've used , but didn't worked.
> Locked Image still there!
>
I would try also to unlock it at db. Some steps from version 3.x. should be
same for 4.x:


log into the DB and perform the following


SELECT vm_name frim vms where vm_guid = (SELECT vm_guid FROM
vm_images_view where imagestatus = 2);

See if you get the VM which the disk is locked on it.

If so do:
SELECT image_guid from vm_images_view where imagestatus=2;
# Get the guid returned and then
Update images SET imagestatus=1 where image_guid = {The guid which
returned in the last query}


Thanks.
> M.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/74QMVFTM356GHFIHWPUKMIZLIRDOPYHT/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HV2ZJ34JWFGGSGFBH6ULJ46R4FCQICAJ/


[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

2020-11-24 Thread Alex K
On Tue, Nov 24, 2020 at 12:44 PM Facundo Badaracco 
wrote:

> hi alex!
>
> imageio-proxy isnt installed. Only ovirt-imageio service is running.
> (ovirt 4.4 now, i made the update)
>
If I run the following I get:
[root@engine ~]# systemctl | grep image
  ovirt-imageio-proxy.service
Then checking the status of the service I confirm it is up:
  systemctl status ovirt-imageio-proxy.service
If the service is up and ok then you need to check the certificate issue. I
had noticed some times that importing the cert form GUI had not resolved
the issue. You may try to manually get the CA cert from engine
(/etc/pki/ovirt-engine/ca.pem) and import it at your browser. Clean cache
at browser and try again. The browser should indicate the connection is
trusted and secure. Also, you might need to remove the already imported
cert from your browser.


> when i connecto to the web UI, it say the certificate is not valid. with a
> red warning. but, i have already added the certificate to chrome
>
> El mar, 24 de nov. de 2020 a la(s) 07:22, Alex K (rightkickt...@gmail.com)
> escribió:
>
>>
>>
>> On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
>> wrote:
>>
>>> Hi everyone.
>>>
>>> Im trying to upload a ISO to my data domain, the GUI gives me this error
>>> "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine
>>> certificate
>>> <https://192.168.2.27/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA>
>>>  is
>>> registered as a valid CA in the browser.".
>>>
>> is the imageio service running ok?  At engine: systemctl status
>> ovirt-imageio-proxy
>> Also, when connecting at the engine web UI, is the browser happy with the
>> certificate of the UI?
>>
>>>
>>> the image fails whne trying to upload.
>>>
>>> i have added the certificate in chrome, but inst working.
>>>
>>> Some help? any other way to upload?
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KOO32KJSJCCQEQKA2TLFZ5G26C3TO6WC/


[ovirt-users] Re: Fix corrupt self-hosted engine

2020-11-24 Thread Alex K
On Mon, Nov 23, 2020 at 10:09 AM Yedidyah Bar David  wrote:

> On Mon, Nov 23, 2020 at 9:54 AM Alex K  wrote:
> >
> >
> >
> > On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David 
> wrote:
> >>
> >> On Thu, Nov 19, 2020 at 9:43 PM Alex K  wrote:
> >>>
> >>>
> >>>
> >>> On Thu, Nov 19, 2020 at 5:31 PM Alex K 
> wrote:
> >>>>
> >>>> Hi Didi,
> >>>>
> >>>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
> wrote:
> >>>>>
> >>>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K 
> wrote:
> >>>>>>
> >>>>>> Hi all,
> >>>>>>
> >>>>>> I have a corrupt self-hosted engine (with several file system
> errors, postgres not able to start) and thus it does not give access to the
> web UI. This happened following an unlucky split brain resolution (I am
> running 2 nodes). The two hosts are running VMs also which I would like to
> keep running as they are needed.
> >>>>>>
> >>>>>> When trying to boot into rescue mode (using
> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
> else.
> >>>>>
> >>>>>
> >>>>> This means that more than just the DB is corrupt...
> >>>>>
> >>>>>>
> >>>>>>
> >>>>>> I have backups of engine files with scope all (using the
> engine-backup tool).
> >>>>>> What is the best approach to try and fix the engine or redeploy.
> >>>>>
> >>>>>
> >>>>> If you are careful, and know what you are doing, you can try
> something like the following. I am not giving many details, hopefully you
> can find on the net tutorials about how to use the things I suggest:
> >>>>>
> >>>>> 1. Move to global maintenance
> >>>>>
> >>>>> 2. Stop the current dead vm (if needed)
> >>>>>
> >>>>> 3. Find current vm conf, edit it to boot from a rescue iso image of
> your preference or from net/PXE etc., and start the vm with '--vm-conf'
> pointing to your edited file.
> >>>>>
> >>>>> 4. Connect a console (hosted-engine --console, or 'virsh console',
> or use '--add-console-password' and remote viewer, if needed)
> >>>>>
> >>>>> 5. Clean the disk and install the OS, oVirt, etc.
> >>>>>
> >>>>> 6. Copy your backup into the vm and restore with engine-backup
> >>>>>
> >>>>> 7. Then cleanly stop the machine, exit global maint, and let HA
> start it (or start it yourself with --vm-start).
> >>>>>
> >>>>> At the time, we had a bug [1] to document this. The result is [2].
> It does not detail how to boot/reinstall os/etc., only restore (if e.g. db
> is dead but fs is ok).
> >>>>> For something somewhat similar to what you want, see also [3], which
> uses guestfish. Might be useful, depending on how badly your disk is
> corrupted.
> >>>>
> >>>> I went with the guestfish approach. It has fixed some fs issues and
> now the yum etc seem fine apart from postgres.
> >>>> I had tried previously to uninstall/install packages so I ended
> installing them again with yum install ovirt\*setup\*.
> >>>> Now I think I have to run engine-setup but I get the error:
> >>>>
> >>>>  Failed to execute stage 'Environment setup': Cannot connect to
> Engine database using existing credentials: engine@localhost:5432
> >>>
> >>> Seems that I need to have psql running to be able to run engine-backup
> --mode=restore. Are there any steps how one could manually prepare pgsql
> for ovirt so as to attempt restoration?
> >>
> >>
> >> Replying again, also to conclude this part of your episode: Generally
> speaking, that's not needed. restore --provision-all-databases should do
> that for you.
> >
> > Seems that when pgsql is down nothing can be done. You need at least
> pgsql up and running (e clean state will do) so as to be able to proceed
> with restoration.
>
> Do you still have logs from this? Both engine-backup's (default to
> /var/log/ovirt-engine-backup/something if you do not pass --log) and
> ovirt-engine-provisiondb which it runs (at
> /var/log/ovirt-engine/setup).
>
I was using --provision-all-databases flag when trying to re

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

2020-11-24 Thread Alex K
On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
wrote:

> Hi everyone.
>
> Im trying to upload a ISO to my data domain, the GUI gives me this error 
> "Connection
> to ovirt-imageio service has failed. Ensure that ovirt-engine certificate
> 
>  is
> registered as a valid CA in the browser.".
>
is the imageio service running ok?  At engine: systemctl status
ovirt-imageio-proxy
Also, when connecting at the engine web UI, is the browser happy with the
certificate of the UI?

>
> the image fails whne trying to upload.
>
> i have added the certificate in chrome, but inst working.
>
> Some help? any other way to upload?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YZGGJMCM76MLESWAQRD6BZDTTQV6BLGZ/


[ovirt-users] Re: bond or different networks for frontend and backend

2020-11-24 Thread Alex K
On Tue, Nov 24, 2020 at 10:40 AM jb  wrote:

> Hello,
>
> here in the description
> (
> https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
>
> it says that we should have at least 2 interfaces to separate frontend
> and backend traffic.
>
> How is this when I have 4 nics and I make with all one bond interface,
> is this not better in terms of performance? What is your recommendation
> with 4 x 1Gbit nics?
>
In terms of performance and stability, it is better to assign one NIC for
ovirtmgmt (frontend web, management net) + 3 nics in bond for the gluster
storage network. You could also assign the migration network at same bond.
Though I personally prefer to not mix gluster net with migration.

>
> Best regards
>
> Jonathan
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5RHYMKE4JSMZF4U4GK2JWUAIBYYCLM2C/


[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-23 Thread Alex K
On Mon, Nov 23, 2020 at 4:54 PM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 9:42 AM Alex K  wrote:
>
>>
>>
>> On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler 
>> wrote:
>>
>>>
>>>
>>> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>>>
>>>> Following the above, I was seeing that OVN provider connectivity test
>>>> was failing due to some certificate issue and had to do the following to
>>>> fix it:
>>>>
>>>> names="ovirt-provider-ovn"
>>>>
>>>> subject="$(\
>>>> openssl x509 \
>>>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>>>> -noout \
>>>> -subject | \
>>>> sed \
>>>> 's;subject= \(.*\);\1;'
>>>>   )"
>>>>
>>>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>>>
>>>> for name in $names; do
>>>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>>>> --name="${name}" \
>>>> --password=mypass \
>>>> --subject="${subject}" \
>>>> --keep-key \
>>>> --san=DNS:"${ENGINE_FQDN}"
>>>> done
>>>>
>>>> Having fixed the above, when trying to connect two VMs on some OVN
>>>> logical switches it seems they are not able to reach each other.
>>>> I had previously added such logical switched at engine by running:
>>>>
>>>> ovn-nbctl ls-add ovn-net0
>>>> ovn-nbctl ls-add ovn-net1
>>>> etc
>>>>
>>>>
>>> Not related: Please use ovirt-provider-ovn to create and manage ovn
>>> entities.
>>>
>>>
>>>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>>>> see:
>>>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>>>
>>>>
>>> /var/log/openvswitch/ovn-controller.log might contain the reason.
>>>
>>>
>>>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>>>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>>>> SubjectAltNameWarning:...
>>>>
>>>>
>>> Looks not good, do tou know which connection this warning referes to?
>>>
>>>
>>>> I have restarted at engine both engine and ovn services:
>>>> systemctl restart ovirt-engine
>>>> systemctl status ovirt-provider-ovn.service
>>>>
>>>> I have also restarted the relevant service at each host:
>>>> systemctl restart ovn-controller.service
>>>>
>>>> When running at host the following it stucks and does not give any
>>>> output:
>>>> ovn-sbctl show
>>>>
>>>>
>>> This is expected, the ovn southbound and northbound db exists only on
>>> the ovn-central, which is places on the same machine as oVirt Engine.
>>> Only the ovn-controller, which controls openvswitch, and openvswitch,
>>> which is implementing the data plane, is placed on the ovn-chassis / oVirt
>>> host.
>>>
>>>
>>>> I see that the certificate is imported at key-store as it has the same
>>>> fingerprint with the previous root CA:
>>>>
>>>> keytool -list -alias ovirt-provider-ovn -keystore
>>>> /var/lib/ovirt-engine/external_truststore
>>>>
>>>>
>>> This is only relevant for the connection from oVirt Engine to
>>> ovirt-provider-ovn.
>>>
>>>
>>>> At this same cluster, I had previously changed the domain name of each
>>>> host and engine using the rename tool.
>>>> And now replaced the certificates as per previous described so as to
>>>> fix the imageio cert issue and ovn issue.
>>>>
>>>> It seems that OVN is not happy with the status of certificates.
>>>> When testing connection at engine GUI i get a prompt to trust the cert,
>>>> and when pressing ok i get a green confirmation of successful connection.
>>>>
>>>>
>>> This is only relevant for the connection from oVirt Engine to
>>> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
>>> If you get the green confirmation, oVirt Engine is happy and the
>>> certificate of the REST API of ovirt-provider-ovn is fine.
>>>
>>>
>>>> Is there anyth

[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-23 Thread Alex K
On Mon, Nov 23, 2020 at 9:42 AM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler  wrote:
>
>>
>>
>> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>>
>>> Following the above, I was seeing that OVN provider connectivity test
>>> was failing due to some certificate issue and had to do the following to
>>> fix it:
>>>
>>> names="ovirt-provider-ovn"
>>>
>>> subject="$(\
>>> openssl x509 \
>>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>>> -noout \
>>> -subject | \
>>> sed \
>>> 's;subject= \(.*\);\1;'
>>>   )"
>>>
>>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>>
>>> for name in $names; do
>>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>>> --name="${name}" \
>>> --password=mypass \
>>> --subject="${subject}" \
>>> --keep-key \
>>> --san=DNS:"${ENGINE_FQDN}"
>>> done
>>>
>>> Having fixed the above, when trying to connect two VMs on some OVN
>>> logical switches it seems they are not able to reach each other.
>>> I had previously added such logical switched at engine by running:
>>>
>>> ovn-nbctl ls-add ovn-net0
>>> ovn-nbctl ls-add ovn-net1
>>> etc
>>>
>>>
>> Not related: Please use ovirt-provider-ovn to create and manage ovn
>> entities.
>>
>>
>>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>>> see:
>>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>>
>>>
>> /var/log/openvswitch/ovn-controller.log might contain the reason.
>>
>>
>>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>>> SubjectAltNameWarning:...
>>>
>>>
>> Looks not good, do tou know which connection this warning referes to?
>>
>>
>>> I have restarted at engine both engine and ovn services:
>>> systemctl restart ovirt-engine
>>> systemctl status ovirt-provider-ovn.service
>>>
>>> I have also restarted the relevant service at each host:
>>> systemctl restart ovn-controller.service
>>>
>>> When running at host the following it stucks and does not give any
>>> output:
>>> ovn-sbctl show
>>>
>>>
>> This is expected, the ovn southbound and northbound db exists only on the
>> ovn-central, which is places on the same machine as oVirt Engine.
>> Only the ovn-controller, which controls openvswitch, and openvswitch,
>> which is implementing the data plane, is placed on the ovn-chassis / oVirt
>> host.
>>
>>
>>> I see that the certificate is imported at key-store as it has the same
>>> fingerprint with the previous root CA:
>>>
>>> keytool -list -alias ovirt-provider-ovn -keystore
>>> /var/lib/ovirt-engine/external_truststore
>>>
>>>
>> This is only relevant for the connection from oVirt Engine to
>> ovirt-provider-ovn.
>>
>>
>>> At this same cluster, I had previously changed the domain name of each
>>> host and engine using the rename tool.
>>> And now replaced the certificates as per previous described so as to fix
>>> the imageio cert issue and ovn issue.
>>>
>>> It seems that OVN is not happy with the status of certificates.
>>> When testing connection at engine GUI i get a prompt to trust the cert,
>>> and when pressing ok i get a green confirmation of successful connection.
>>>
>>>
>> This is only relevant for the connection from oVirt Engine to
>> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
>> If you get the green confirmation, oVirt Engine is happy and the
>> certificate of the REST API of ovirt-provider-ovn is fine.
>>
>>
>>> Is there anything else that can be done to fix OVN functionality?
>>>
>>
>> Please try to understand what is wrong in the connection between
>> ovn-controller and ovn south bound db.
>> /var/log/openvswitch/ovn-controller.log should be helpful and might
>> contain the reason.
>>
> Will run the steps again to see. Do you think I need to take additional
> steps when fixing the OVN certs issue due to domain change that this
> cluster has undergone?
>
This time was not able to make O

[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-23 Thread Alex K
On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler  wrote:

>
>
> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>
>> Following the above, I was seeing that OVN provider connectivity test was
>> failing due to some certificate issue and had to do the following to fix
>> it:
>>
>> names="ovirt-provider-ovn"
>>
>> subject="$(\
>> openssl x509 \
>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>> -noout \
>> -subject | \
>> sed \
>> 's;subject= \(.*\);\1;'
>>   )"
>>
>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>
>> for name in $names; do
>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>> --name="${name}" \
>> --password=mypass \
>> --subject="${subject}" \
>> --keep-key \
>> --san=DNS:"${ENGINE_FQDN}"
>> done
>>
>> Having fixed the above, when trying to connect two VMs on some OVN
>> logical switches it seems they are not able to reach each other.
>> I had previously added such logical switched at engine by running:
>>
>> ovn-nbctl ls-add ovn-net0
>> ovn-nbctl ls-add ovn-net1
>> etc
>>
>>
> Not related: Please use ovirt-provider-ovn to create and manage ovn
> entities.
>
>
>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>> see:
>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>
>>
> /var/log/openvswitch/ovn-controller.log might contain the reason.
>
>
>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>> SubjectAltNameWarning:...
>>
>>
> Looks not good, do tou know which connection this warning referes to?
>
>
>> I have restarted at engine both engine and ovn services:
>> systemctl restart ovirt-engine
>> systemctl status ovirt-provider-ovn.service
>>
>> I have also restarted the relevant service at each host:
>> systemctl restart ovn-controller.service
>>
>> When running at host the following it stucks and does not give any output:
>> ovn-sbctl show
>>
>>
> This is expected, the ovn southbound and northbound db exists only on the
> ovn-central, which is places on the same machine as oVirt Engine.
> Only the ovn-controller, which controls openvswitch, and openvswitch,
> which is implementing the data plane, is placed on the ovn-chassis / oVirt
> host.
>
>
>> I see that the certificate is imported at key-store as it has the same
>> fingerprint with the previous root CA:
>>
>> keytool -list -alias ovirt-provider-ovn -keystore
>> /var/lib/ovirt-engine/external_truststore
>>
>>
> This is only relevant for the connection from oVirt Engine to
> ovirt-provider-ovn.
>
>
>> At this same cluster, I had previously changed the domain name of each
>> host and engine using the rename tool.
>> And now replaced the certificates as per previous described so as to fix
>> the imageio cert issue and ovn issue.
>>
>> It seems that OVN is not happy with the status of certificates.
>> When testing connection at engine GUI i get a prompt to trust the cert,
>> and when pressing ok i get a green confirmation of successful connection.
>>
>>
> This is only relevant for the connection from oVirt Engine to
> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
> If you get the green confirmation, oVirt Engine is happy and the
> certificate of the REST API of ovirt-provider-ovn is fine.
>
>
>> Is there anything else that can be done to fix OVN functionality?
>>
>
> Please try to understand what is wrong in the connection between
> ovn-controller and ovn south bound db.
> /var/log/openvswitch/ovn-controller.log should be helpful and might
> contain the reason.
>
Will run the steps again to see. Do you think I need to take additional
steps when fixing the OVN certs issue due to domain change that this
cluster has undergone?

>
>
>
>> Thanx
>> Alex
>>
>>
>>
>>
>>
>> On Thu, Nov 19, 2020 at 9:00 AM Alex K  wrote:
>>
>>> Seems that all services (imageio, ovn, web socket) are fine after
>>> following the above and importing the new self signed CA certificate.
>>> DId run also engine-setup as I was trying to fix the imageio cert issue,
>>> though seems that that was only fixed after importing the CA cert at
>>> browser and engine-setup might not be needed.
>>>
>>> On 

[ovirt-users] Re: Fix corrupt self-hosted engine

2020-11-22 Thread Alex K
On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David  wrote:

> On Thu, Nov 19, 2020 at 9:43 PM Alex K  wrote:
>
>>
>>
>> On Thu, Nov 19, 2020 at 5:31 PM Alex K  wrote:
>>
>>> Hi Didi,
>>>
>>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
>>> wrote:
>>>
>>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K  wrote:
>>>>
>>>>> Hi all,
>>>>>
>>>>> I have a corrupt self-hosted engine (with several file system errors,
>>>>> postgres not able to start) and thus it does not give access to the web 
>>>>> UI.
>>>>> This happened following an unlucky split brain resolution (I am running 2
>>>>> nodes). The two hosts are running VMs also which I would like to keep
>>>>> running as they are needed.
>>>>>
>>>>> When trying to boot into rescue mode (using
>>>>> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
>>>>> else.
>>>>>
>>>>
>>>> This means that more than just the DB is corrupt...
>>>>
>>>>
>>>>>
>>>>> I have backups of engine files with scope all (using the engine-backup
>>>>> tool).
>>>>> What is the best approach to try and fix the engine or redeploy.
>>>>>
>>>>
>>>> If you are careful, and know what you are doing, you can try something
>>>> like the following. I am not giving many details, hopefully you can find on
>>>> the net tutorials about how to use the things I suggest:
>>>>
>>>> 1. Move to global maintenance
>>>>
>>>> 2. Stop the current dead vm (if needed)
>>>>
>>>> 3. Find current vm conf, edit it to boot from a rescue iso image of
>>>> your preference or from net/PXE etc., and start the vm with '--vm-conf'
>>>> pointing to your edited file.
>>>>
>>>> 4. Connect a console (hosted-engine --console, or 'virsh console', or
>>>> use '--add-console-password' and remote viewer, if needed)
>>>>
>>>> 5. Clean the disk and install the OS, oVirt, etc.
>>>>
>>>> 6. Copy your backup into the vm and restore with engine-backup
>>>>
>>>> 7. Then cleanly stop the machine, exit global maint, and let HA start
>>>> it (or start it yourself with --vm-start).
>>>>
>>>> At the time, we had a bug [1] to document this. The result is [2]. It
>>>> does not detail how to boot/reinstall os/etc., only restore (if e.g. db is
>>>> dead but fs is ok).
>>>> For something somewhat similar to what you want, see also [3], which
>>>> uses guestfish. Might be useful, depending on how badly your disk is
>>>> corrupted.
>>>>
>>> I went with the guestfish approach. It has fixed some fs issues and now
>>> the yum etc seem fine apart from postgres.
>>> I had tried previously to uninstall/install packages so I ended
>>> installing them again with yum install ovirt\*setup\*.
>>> Now I think I have to run engine-setup but I get the error:
>>>
>>>  Failed to execute stage 'Environment setup': Cannot connect to Engine
>>> database using existing credentials: engine@localhost:5432
>>>
>> Seems that I need to have psql running to be able to run engine-backup
>> --mode=restore. Are there any steps how one could manually prepare pgsql
>> for ovirt so as to attempt restoration?
>>
>
> Replying again, also to conclude this part of your episode: Generally
> speaking, that's not needed. restore --provision-all-databases should do
> that for you.
>
Seems that when pgsql is down nothing can be done. You need at least pgsql
up and running (e clean state will do) so as to be able to proceed with
restoration.

>
> I replied to all your interim emails in private, since you replied in
> private.
>
Did not notice I was replying in private :)

>
> Thanks for the final message to the list.
>
> It would be nice if you send another summary of the main obstacles you ran
> into, what worked and didn't work, and especially what ideas you can think
> of to improve the code/doc for the next time something similar happens
> (also to you :-) ).
>
> If you feel like that, and have time, it sounds like a nice opportunity
> for a blog post :-) (I know I (almost?) never wrote any myself, sorry, but
> I like reading them - and they are much more approachable and useful, over
> t

[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-22 Thread Alex K
On Sun, Nov 22, 2020 at 9:11 AM Yedidyah Bar David  wrote:

> On Fri, Nov 20, 2020 at 1:37 PM Alex K  wrote:
>
>> Following the above, I was seeing that OVN provider connectivity test was
>> failing due to some certificate issue and had to do the following to fix
>> it:
>>
>
> Is this on the same systems of "[ovirt-users] Fix corrupt self-hosted
> engine", or unrelated?
>
Yes, it is the same one.

>
>
>>
>> names="ovirt-provider-ovn"
>>
>> subject="$(\
>> openssl x509 \
>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>> -noout \
>> -subject | \
>> sed \
>> 's;subject= \(.*\);\1;'
>>   )"
>>
>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>
>> for name in $names; do
>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>> --name="${name}" \
>> --password=mypass \
>> --subject="${subject}" \
>> --keep-key \
>> --san=DNS:"${ENGINE_FQDN}"
>> done
>>
>> Having fixed the above, when trying to connect two VMs on some OVN
>> logical switches it seems they are not able to reach each other.
>> I had previously added such logical switched at engine by running:
>>
>> ovn-nbctl ls-add ovn-net0
>> ovn-nbctl ls-add ovn-net1
>> etc
>>
>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>> see:
>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>
>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>> SubjectAltNameWarning:...
>>
>> I have restarted at engine both engine and ovn services:
>> systemctl restart ovirt-engine
>> systemctl status ovirt-provider-ovn.service
>>
>> I have also restarted the relevant service at each host:
>> systemctl restart ovn-controller.service
>>
>> When running at host the following it stucks and does not give any output:
>> ovn-sbctl show
>>
>> I see that the certificate is imported at key-store as it has the same
>> fingerprint with the previous root CA:
>>
>> keytool -list -alias ovirt-provider-ovn -keystore
>> /var/lib/ovirt-engine/external_truststore
>>
>> At this same cluster, I had previously changed the domain name of each
>> host and engine using the rename tool.
>>
>
> After that, did ovn still work well?
>
No. When clicking at the "test" button, I am prompted to accept self signed
cert and then I receive a green check confirmation that all is good but
when attaching two guest net ports on same OVN logicat switch the VMs are
not able to communicate and was observing some SSL issues at  OVN logs
referring to subjAltName issues.

>
>
>> And now replaced the certificates as per previous described so as to fix
>> the imageio cert issue and ovn issue.
>>
>> It seems that OVN is not happy with the status of certificates.
>> When testing connection at engine GUI i get a prompt to trust the cert,
>> and when pressing ok i get a green confirmation of successful connection.
>>
>> Is there anything else that can be done to fix OVN functionality?
>>
>
> No idea, adding Dominik.
>
The cluster I am trying to fix was renamed at a previous point. I had to
change the domain where the hosts and the engine belonged. Did that, with
few hurdles (using the rename tool available at 4.3). That procedure left
out the omageio and OVN certs which I want to resolve now as I need OVN to
be able to setup test environment.

I checked also https://bugzilla.redhat.com/show_bug.cgi?id=1501798, and
proceeded to generate new certs for ovn-ndb and ovn-sdb. Following this,
and after running engine-setup I observed that the host had to be
re-installed as per web UI prompt. I tried to, but host installation was
not being completed due to "General SSLEngine problem". Tried also to renew
the vdsm certs at the host, using same vdsm key and the new CA cert, but
without luck. At that point I was receiving "Get Host Capabilities failed:
Received fatal alert: unknown_ca" and the other host also became
no-responsive. Generally I tried several things (even renewing at engine
the engine.cer cert using the engine_id_rsa key at engine) but the host was
refusing to install. So it seems that when a domain change is involved in
the scenario, I have to include some additional steps to make the setup
happy.

I had to roll-back the pki at its previous state so as to recover one host
and re-install the other, as the site is production.

I have read that this the engine renam

[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-20 Thread Alex K
Following the above, I was seeing that OVN provider connectivity test was
failing due to some certificate issue and had to do the following to fix
it:

names="ovirt-provider-ovn"

subject="$(\
openssl x509 \
-in /etc/pki/ovirt-engine/certs/apache.cer \
-noout \
-subject | \
sed \
's;subject= \(.*\);\1;'
  )"

. /usr/share/ovirt-engine/bin/engine-prolog.sh

for name in $names; do
/usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
--name="${name}" \
--password=mypass \
--subject="${subject}" \
--keep-key \
--san=DNS:"${ENGINE_FQDN}"
done

Having fixed the above, when trying to connect two VMs on some OVN logical
switches it seems they are not able to reach each other.
I had previously added such logical switched at engine by running:

ovn-nbctl ls-add ovn-net0
ovn-nbctl ls-add ovn-net1
etc

Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I see:
reconnect|WARN|unix#45: connection dropped (Connection reset by peer)

Also systemctl status ovirt-provider-ovn.service at engine shows:
/usr/lib/python2.7/site-packages/urllib3/connection.py:344:
SubjectAltNameWarning:...

I have restarted at engine both engine and ovn services:
systemctl restart ovirt-engine
systemctl status ovirt-provider-ovn.service

I have also restarted the relevant service at each host:
systemctl restart ovn-controller.service

When running at host the following it stucks and does not give any output:
ovn-sbctl show

I see that the certificate is imported at key-store as it has the same
fingerprint with the previous root CA:

keytool -list -alias ovirt-provider-ovn -keystore
/var/lib/ovirt-engine/external_truststore

At this same cluster, I had previously changed the domain name of each host
and engine using the rename tool.
And now replaced the certificates as per previous described so as to fix
the imageio cert issue and ovn issue.

It seems that OVN is not happy with the status of certificates.
When testing connection at engine GUI i get a prompt to trust the cert, and
when pressing ok i get a green confirmation of successful connection.

Is there anything else that can be done to fix OVN functionality?
Thanx
Alex





On Thu, Nov 19, 2020 at 9:00 AM Alex K  wrote:

> Seems that all services (imageio, ovn, web socket) are fine after
> following the above and importing the new self signed CA certificate.
> DId run also engine-setup as I was trying to fix the imageio cert issue,
> though seems that that was only fixed after importing the CA cert at
> browser and engine-setup might not be needed.
>
> On Wed, Nov 18, 2020 at 3:07 PM Alex K  wrote:
>
>> Seems I had a typo at
>> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
>> I will repeat the test to verify that all services are functional
>> following this process.
>>
>> On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:
>>
>>> Hi all,
>>>
>>> I am trying to replace the ovirt certificate at ovirt 4.3 following
>>> this:
>>>
>>>
>>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>>>
>>> I am doing the following:
>>> I have engine FQDN: manager.lab.local
>>>
>>> 1. Create root CA private key:
>>> openssl genrsa -des3 -out root.key 2048
>>>
>>> 2. Generate root certificate: (enter passphrase of root key)
>>> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
>>> root.pem
>>> cp root.pem /tmp
>>>
>>> 3. Create key and CSR for engine:
>>> openssl genrsa -out manager.lab.local.key 2048
>>> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>>>
>>> 4. Generate a certificate for engine and sign with the root CA key:
>>>
>>> openssl x509 -req -in manager.lab.local.csr \
>>> -CA root.pem \
>>> -CAkey root.key \
>>> -CAcreateserial \
>>> -out manager.lab.local.crt \
>>> -days 3650 \
>>> -sha256 \
>>> -extensions v3_req
>>>
>>> 5. Verify the trust chain and check the certificate details:
>>> openssl verify -CAfile root.pem manager.lab.local.crt
>>> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>>>
>>> 6. Generate a P12 container: (with empty password)
>>> openssl pkcs12 -export -out /tmp/apache.p12 \
>>> -inkey manager.lab.local.key \
>>> -in manager.lab.local.crt
>>>
>>> 8. Export key and cert:
>>> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
>>> openssl pkcs12 -in apache.p12 -nokeys > 

[ovirt-users] Re: Fix corrupt self-hosted engine

2020-11-19 Thread Alex K
For the records,

After having fixed the major fs issues with guestfish and since the DB was
not starting up, I removed everything from DB data dir and recreated it as
below:

rm -rf /var/opt/rh/rh-postgresql10/lib/pgsql/data/*
/opt/rh/rh-postgresql10/root/usr/bin/postgresql-setup --initdb
systemctl restart rh-postgresql10-postgresql.service

Then proceeded with the restoration, where I requested to provision all
missing databases:
engine-backup --mode=restore --file=engine-backup.gz
--provision-all-databases \
--log=restore.log --restore-permissions

Following this, ran engine-setup, as instructed from the restore operation.
Gained engine web access and saw the same running VMs were shown as up
without issues.
I only observed one VM not able to start due to illegal volume, but that's
another story.


On Thu, Nov 19, 2020 at 9:42 PM Alex K  wrote:

>
>
> On Thu, Nov 19, 2020 at 5:31 PM Alex K  wrote:
>
>> Hi Didi,
>>
>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
>> wrote:
>>
>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K  wrote:
>>>
>>>> Hi all,
>>>>
>>>> I have a corrupt self-hosted engine (with several file system errors,
>>>> postgres not able to start) and thus it does not give access to the web UI.
>>>> This happened following an unlucky split brain resolution (I am running 2
>>>> nodes). The two hosts are running VMs also which I would like to keep
>>>> running as they are needed.
>>>>
>>>> When trying to boot into rescue mode (using
>>>> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
>>>> else.
>>>>
>>>
>>> This means that more than just the DB is corrupt...
>>>
>>>
>>>>
>>>> I have backups of engine files with scope all (using the engine-backup
>>>> tool).
>>>> What is the best approach to try and fix the engine or redeploy.
>>>>
>>>
>>> If you are careful, and know what you are doing, you can try something
>>> like the following. I am not giving many details, hopefully you can find on
>>> the net tutorials about how to use the things I suggest:
>>>
>>> 1. Move to global maintenance
>>>
>>> 2. Stop the current dead vm (if needed)
>>>
>>> 3. Find current vm conf, edit it to boot from a rescue iso image of your
>>> preference or from net/PXE etc., and start the vm with '--vm-conf' pointing
>>> to your edited file.
>>>
>>> 4. Connect a console (hosted-engine --console, or 'virsh console', or
>>> use '--add-console-password' and remote viewer, if needed)
>>>
>>> 5. Clean the disk and install the OS, oVirt, etc.
>>>
>>> 6. Copy your backup into the vm and restore with engine-backup
>>>
>>> 7. Then cleanly stop the machine, exit global maint, and let HA start it
>>> (or start it yourself with --vm-start).
>>>
>>> At the time, we had a bug [1] to document this. The result is [2]. It
>>> does not detail how to boot/reinstall os/etc., only restore (if e.g. db is
>>> dead but fs is ok).
>>> For something somewhat similar to what you want, see also [3], which
>>> uses guestfish. Might be useful, depending on how badly your disk is
>>> corrupted.
>>>
>> I went with the guestfish approach. It has fixed some fs issues and now
>> the yum etc seem fine apart from postgres.
>> I had tried previously to uninstall/install packages so I ended
>> installing them again with yum install ovirt\*setup\*.
>> Now I think I have to run engine-setup but I get the error:
>>
>>  Failed to execute stage 'Environment setup': Cannot connect to Engine
>> database using existing credentials: engine@localhost:5432
>>
> Seems that I need to have psql running to be able to run engine-backup
> --mode=restore. Are there any steps how one could manually prepare pgsql
> for ovirt so as to attempt restoration?
>
>>
>> So I guess I need to follow [2]. What do you think?
>>
>>
>>> How did you run into a split brain? There is a lock on the shared
>>> storage that should prevent this.
>>>
>>> Good luck and best regards,
>>>
>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1482710
>>> [2]
>>> https://www.ovirt.org/documentation/administration_guide/#Overwriting_a_Self-Hosted_Engine
>>> [3] https://bugzilla.redhat.com/show_bug.cgi?id=1569827#c4
>>> --
>>> Didi
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SU6V565Y5GAZ67FF5MUDGFLEJ2L2LZV7/


[ovirt-users] How do you manage OVN?

2020-11-19 Thread Alex McWhirter

I'm not sure if I' missing something, but it seems there is no way built
in to oVirt to manage OVN outside of network / subnet creation. In
particular routing both between networks and to external networks. 


Of course you have the OVN utilities, but it seems that the provider API
is the preffered method of interaction? 


As far as i can tell, the only utility that can use this API as intended
is ManageIQ, which is a bit a behemoth if you only need the OVN portion
of things. 


So is that it then? Interface with the API directly or use ManageIQ?
Just curious what others are doing in regards to OVN.___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Q2VW36DS4QVSPCGUVBAUPJQOZZ5GO73Q/


[ovirt-users] Fix corrupt self-hosted engine

2020-11-19 Thread Alex K
Hi all,

I have a corrupt self-hosted engine (with several file system errors,
postgres not able to start) and thus it does not give access to the web UI.
This happened following an unlucky split brain resolution (I am running 2
nodes). The two hosts are running VMs also which I would like to keep
running as they are needed.

When trying to boot into rescue mode (using systemd.unit=emergency.target
boot parameter) I get a cursor and nothing else.

I have backups of engine files with scope all (using the engine-backup
tool).
What is the best approach to try and fix the engine or redeploy.

Thanks for any help.
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/76ZY4BMBKGA5HFLLNDKACFD2EIBI3WVZ/


[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-18 Thread Alex K
Seems that all services (imageio, ovn, web socket) are fine after following
the above and importing the new self signed CA certificate.
DId run also engine-setup as I was trying to fix the imageio cert issue,
though seems that that was only fixed after importing the CA cert at
browser and engine-setup might not be needed.

On Wed, Nov 18, 2020 at 3:07 PM Alex K  wrote:

> Seems I had a typo at
> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
> I will repeat the test to verify that all services are functional
> following this process.
>
> On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:
>
>> Hi all,
>>
>> I am trying to replace the ovirt certificate at ovirt 4.3 following this:
>>
>>
>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>>
>> I am doing the following:
>> I have engine FQDN: manager.lab.local
>>
>> 1. Create root CA private key:
>> openssl genrsa -des3 -out root.key 2048
>>
>> 2. Generate root certificate: (enter passphrase of root key)
>> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
>> root.pem
>> cp root.pem /tmp
>>
>> 3. Create key and CSR for engine:
>> openssl genrsa -out manager.lab.local.key 2048
>> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>>
>> 4. Generate a certificate for engine and sign with the root CA key:
>>
>> openssl x509 -req -in manager.lab.local.csr \
>> -CA root.pem \
>> -CAkey root.key \
>> -CAcreateserial \
>> -out manager.lab.local.crt \
>> -days 3650 \
>> -sha256 \
>> -extensions v3_req
>>
>> 5. Verify the trust chain and check the certificate details:
>> openssl verify -CAfile root.pem manager.lab.local.crt
>> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>>
>> 6. Generate a P12 container: (with empty password)
>> openssl pkcs12 -export -out /tmp/apache.p12 \
>> -inkey manager.lab.local.key \
>> -in manager.lab.local.crt
>>
>> 8. Export key and cert:
>> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
>> openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer
>>
>> From the above steps we should have the following:
>>
>> /tmp/root.pem
>> /tmp/apache.p12
>> /tmp/apache.key
>> /tmp/apache.cer
>>
>> 9. Place the certificates:
>> hosted-engine --set-maintenance --mode=global
>> cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
>> cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
>> cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
>> update-ca-trust
>> rm /etc/pki/ovirt-engine/apache-ca.pem
>> cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem
>>
>> Backup existing key and cert:
>> cp /etc/pki/ovirt-engine/keys/apache.key.nopass
>> /etc/pki/ovirt-engine/keys/apache.key.nopass.bck
>> cp /etc/pki/ovirt-engine/certs/apache.cer
>> /etc/pki/ovirt-engine/certs/apache.cer.bck
>> cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
>> cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
>> chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
>> chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
>> systemctl restart httpd.service
>>
>> 10. Create a new trust store configuration file:
>> vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
>>
>> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
>> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
>>
>> 11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
>> vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
>>
>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
>>
>> 12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
>> vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf
>>
>> # Key file for SSL connections
>> ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
>> # Certificate file for SSL connections
>> ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer
>>
>> 13. Import the certificate at system-wide  java trust store
>>
>> update-ca-trust extract
>> keytool -list -alias ovirt -keystore /etc/pki/java/cacerts
>>
>> 14. Restart services:
>> systemctl restart httpd.service
>> systemctl restart ovirt-provider-ovn.service
>> systemctl restart ovirt-imageio-proxy
>> systemctl restart ovirt-webs

[ovirt-users] Re: How to create a backup in event of hardware failure of a single hosted engine?

2020-11-18 Thread Alex K
On Wed, Nov 18, 2020 at 1:40 PM  wrote:

> Hello Alex,
> How do i prepare the gluster volume as the gluster volume is also hosted
> on the 1st baremetal, can you elaborate this setup?
> just reading the docs of gluster must consists of 3 node either 3 gluster
> nodes or 2 gluster nodes + 1 arbiter on a replica set
>
Indeed, for production use, you need replica 3 gluster setup (either
replica 3 or 2 + 1 arbiter). In your case, you may go temporarily with a
replica 2 (two hosts) setup. In this case, it is best practise to dedicate
a separate network for the gluster traffic. Lets assume gluster0 and
gluster1 are the hostnames of each host at the gluster storage network and
the bricks are at /gluster/engine/brick. Then you need to run from gluster0
host:

gluster peer probe gluster1

gluster volume add-brick engine replica 2 gluster1:/gluster/engine/brick

In that case though you need to adjust quorum:

gluster volume set engine cluster.server-quorum-type none
gluster volume set engine cluster.quorum-type fixed
gluster volume set engine cluster.quorum-count 1

Repeat for each volume and wait for heal (sync to complete).
Check heal status of each volume:

gluster volume heal  info

I do not include all details here. I assume the existing gluster volumes
are already configured with the appropriate settings. As soon as you have
the replica 2 setup in place, you then can proceed with a replica 3 setup
with the same approach. Remember to enable quorum at each volume.
Hope that helps.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MV2H6DNLD5JAKIEBFRQ4VROUYRHI2DMZ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OK7GRCKTT6T7XKJ5YGEIVBERYR5KZAAW/


[ovirt-users] Re: Replacing ovirt certificates issue

2020-11-18 Thread Alex K
Seems I had a typo at
/etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
I will repeat the test to verify that all services are functional following
this process.

On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:

> Hi all,
>
> I am trying to replace the ovirt certificate at ovirt 4.3 following this:
>
>
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>
> I am doing the following:
> I have engine FQDN: manager.lab.local
>
> 1. Create root CA private key:
> openssl genrsa -des3 -out root.key 2048
>
> 2. Generate root certificate: (enter passphrase of root key)
> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
> root.pem
> cp root.pem /tmp
>
> 3. Create key and CSR for engine:
> openssl genrsa -out manager.lab.local.key 2048
> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>
> 4. Generate a certificate for engine and sign with the root CA key:
>
> openssl x509 -req -in manager.lab.local.csr \
> -CA root.pem \
> -CAkey root.key \
> -CAcreateserial \
> -out manager.lab.local.crt \
> -days 3650 \
> -sha256 \
> -extensions v3_req
>
> 5. Verify the trust chain and check the certificate details:
> openssl verify -CAfile root.pem manager.lab.local.crt
> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>
> 6. Generate a P12 container: (with empty password)
> openssl pkcs12 -export -out /tmp/apache.p12 \
> -inkey manager.lab.local.key \
> -in manager.lab.local.crt
>
> 8. Export key and cert:
> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
> openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer
>
> From the above steps we should have the following:
>
> /tmp/root.pem
> /tmp/apache.p12
> /tmp/apache.key
> /tmp/apache.cer
>
> 9. Place the certificates:
> hosted-engine --set-maintenance --mode=global
> cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
> cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
> cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
> update-ca-trust
> rm /etc/pki/ovirt-engine/apache-ca.pem
> cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem
>
> Backup existing key and cert:
> cp /etc/pki/ovirt-engine/keys/apache.key.nopass
> /etc/pki/ovirt-engine/keys/apache.key.nopass.bck
> cp /etc/pki/ovirt-engine/certs/apache.cer
> /etc/pki/ovirt-engine/certs/apache.cer.bck
> cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
> cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
> chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
> chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
> systemctl restart httpd.service
>
> 10. Create a new trust store configuration file:
> vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
>
> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
>
> 11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
> vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
>
> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
>
> 12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
> vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf
>
> # Key file for SSL connections
> ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
> # Certificate file for SSL connections
> ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer
>
> 13. Import the certificate at system-wide  java trust store
>
> update-ca-trust extract
> keytool -list -alias ovirt -keystore /etc/pki/java/cacerts
>
> 14. Restart services:
> systemctl restart httpd.service
> systemctl restart ovirt-provider-ovn.service
> systemctl restart ovirt-imageio-proxy
> systemctl restart ovirt-websocket-proxy
> systemctl restart ovirt-engine.service
>
> Following the above I get at engine GUI:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
>
> I have tried also to run engine-setup in case it could fix anything (it
> renewed the cert due to missing subjectAltName), and the above error still
> persists.
> I have tried several other suggestions from similar issues reported at
> this list without any luck.
> I have run out of ideas. Am I missing anything?
> Thanx for any suggestions.
> Alex
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NADGNIZR53ETECWMNTYN33DQJMOENHS7/


[ovirt-users] Replacing ovirt certificates issue

2020-11-18 Thread Alex K
Hi all,

I am trying to replace the ovirt certificate at ovirt 4.3 following this:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl

I am doing the following:
I have engine FQDN: manager.lab.local

1. Create root CA private key:
openssl genrsa -des3 -out root.key 2048

2. Generate root certificate: (enter passphrase of root key)
openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out root.pem
cp root.pem /tmp

3. Create key and CSR for engine:
openssl genrsa -out manager.lab.local.key 2048
openssl req -new -out manager.lab.local.csr -key manager.lab.local.key

4. Generate a certificate for engine and sign with the root CA key:

openssl x509 -req -in manager.lab.local.csr \
-CA root.pem \
-CAkey root.key \
-CAcreateserial \
-out manager.lab.local.crt \
-days 3650 \
-sha256 \
-extensions v3_req

5. Verify the trust chain and check the certificate details:
openssl verify -CAfile root.pem manager.lab.local.crt
openssl x509 -text -noout -in  manager.lab.local.crt  | head -15

6. Generate a P12 container: (with empty password)
openssl pkcs12 -export -out /tmp/apache.p12 \
-inkey manager.lab.local.key \
-in manager.lab.local.crt

8. Export key and cert:
openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer

>From the above steps we should have the following:

/tmp/root.pem
/tmp/apache.p12
/tmp/apache.key
/tmp/apache.cer

9. Place the certificates:
hosted-engine --set-maintenance --mode=global
cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
update-ca-trust
rm /etc/pki/ovirt-engine/apache-ca.pem
cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem

Backup existing key and cert:
cp /etc/pki/ovirt-engine/keys/apache.key.nopass
/etc/pki/ovirt-engine/keys/apache.key.nopass.bck
cp /etc/pki/ovirt-engine/certs/apache.cer
/etc/pki/ovirt-engine/certs/apache.cer.bck
cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
systemctl restart httpd.service

10. Create a new trust store configuration file:
vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf

ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""

11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass

12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf

# Key file for SSL connections
ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
# Certificate file for SSL connections
ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer

13. Import the certificate at system-wide  java trust store

update-ca-trust extract
keytool -list -alias ovirt -keystore /etc/pki/java/cacerts

14. Restart services:
systemctl restart httpd.service
systemctl restart ovirt-provider-ovn.service
systemctl restart ovirt-imageio-proxy
systemctl restart ovirt-websocket-proxy
systemctl restart ovirt-engine.service

Following the above I get at engine GUI:

sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target

I have tried also to run engine-setup in case it could fix anything (it
renewed the cert due to missing subjectAltName), and the above error still
persists.
I have tried several other suggestions from similar issues reported at this
list without any luck.
I have run out of ideas. Am I missing anything?
Thanx for any suggestions.
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSIKZJWMW6KKBLCHGZWWXVGQYLPMW7PJ/


[ovirt-users] Re: How to create a backup in event of hardware failure of a single hosted engine?

2020-11-17 Thread Alex K
On Tue, Nov 17, 2020, 11:08  wrote:

> Hello everyone,
> Currently we have a single bare metal that hosts oVirt and glusterFS which
> later on to be converted to a 3 nodes for HCI, currently another bare metal
> is coming this week and was planning to  initially create it as a backup.
>
> is it possible to deploy a new hosted engine then create a gluster volume
> for 1st one as a backup domain then attach it to the new one if hardware
> failure occurred, or there is another kind of setup that can be done?
>
I would add the new server as an additional host, first preparing the
gluster volumes under the hood. In this way you achieve HA for engine and
guest VMs. When third server arrives, repeat and have a proper 3 node
replica self hosted engine setup.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EYOW4WNUACRCTWLG2IRXEGISYFKBWAU7/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KZ5L3E6UXPHY56WGERVGNEGFGTLQB7RS/


[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

2020-11-17 Thread Alex K
On Tue, Nov 17, 2020, 16:12 <3c.moni...@gruppofilippetti.it> wrote:

> Hi all.
> I've deployed a VM from a corrupted template (it's disk is missing, but
> I've checked it later...).
> My Software Version is:4.3
> Now, I have an unmanaged VM in inventory and unable to remove it too.
> It's reference is "locked image".
> I've restarted ovirt-engine many times on self-hosted engine and hosts
> too, but no benefits.
> So, what's now?
> I've also consulted: https://access.redhat.com/solutions/396753
> but still no results.
> No tasks or items results to be "locked"...
> Any other ideas?
>
You might try using some of the tools mentioned at
https://www.ovirt.org/develop/developer-guide/db-issues/helperutilities.html
There is an unlock tool.

> Thanks a lot.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7IK2IAJTEMNR7IM4FJYVHJRJQTQZD537/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LNT3SXR62FVCBAW4FKC273BA23HO74PV/


[ovirt-users] Re: Upgrade OVIRT from 3.6 to 4.3

2020-11-11 Thread Alex K
On Wed, Nov 11, 2020, 17:03 Miguel Angel Costas 
wrote:

> Hi Guys!
>
> I need to upgrade from 3.6 to 4.3 and I have a doubt.
> Do I need to restard VMs for each upgrade (DC Compatibilty 1° 4.0  - 2°
> 4.1 - 3° 4.2 and 4° 4.3) or can modify the compatibilty  from 3.6 to 4.2
> and restart the vms in this only step.
>
I would restart to complete each step at a time.

>
> Best regards
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DAXCGYEQM4BM3KWMRAY4HMGE2YAHDB2H/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J573QMSFII62CBPC47CJJ73AITZETWMI/


[ovirt-users] Re: VM's gone to unknown state

2020-11-10 Thread Alex K
Hi Hariharan,

On Tue, Nov 10, 2020 at 11:36 AM  wrote:

> Dear Alex,
>
> Thanks for your kind response! So its mandatory to enable power
> management? Is that a good way to enable power management in running hosts
> or already installed hosts in Ovirt? If possible, let me know the benifits
> of using power management;

Yes, you need power management and it can be configured at any time. It is
needed so as the highly available VMs to be restarted at another host, when
one host fails and avoid having zombie VMs in unresponsive state as you
faced. Power management is means for the hosts to ensure the state of each
other and is a must for high availability.

>
> Thanks in advance!
>
> Best Regards,
> Hariharan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NRM5JY5TAPGFYNYYP7OQ372X27FA56F7/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LSEJBQAUVPUFLI5J7VI7URH6IGLM7W5R/


[ovirt-users] Re: VM with illegal snapshots

2020-11-09 Thread Alex K
On Fri, Oct 9, 2020, 12:59 Giorgio Biacchi  wrote:

> Hi,
> due to a bug in our Ovirt integrated backup system now we have some VMs
> with snapshots in illegal state.
>
> It seems that there's an inconsistency between the db and the real
> status of images on disk.
>
> Let me show an example:
>
> engine=# select
>
> image_guid,parentid,imagestatus,vm_snapshot_id,volume_type,volume_format,active
> from images where image_group_id='e34f77cb-54d5-40d0-b539-e0a5fd512d2d';
>   image_guid  |   parentid  |
> imagestatus |vm_snapshot_id| volume_type |
> volume_format | active
>
> --+--+-+--+-+---+
>  a107b6c4-842e-4b40-9215-c965431a0c0f |
> ---- |   4 |
> d19d6ca3-1989-4c67-8ee7-c0c43b3e6d74 |   2 | 4 | f
>  a4c86a68-9123-454c-b417-1b15038a4bf2 |
> a107b6c4-842e-4b40-9215-c965431a0c0f |   1 |
> e7a405ee-8fd4-4733-ae9c-5252bf07c9d3 |   2 | 4 | f
>  f6a61f2e-26bd-4b63-97c6-d66913ce48c5 |
> a4c86a68-9123-454c-b417-1b15038a4bf2 |   1 |
> 9d0958b9-4995-4e11-a027-a32d4bac52e4 |   2 | 4 | t
> (3 rows)
>
>
> [root@host02 ~]#  lvs -o+lv_tags |grep
> e34f77cb-54d5-40d0-b539-e0a5fd512d2d
>   a107b6c4-842e-4b40-9215-c965431a0c0f
> 459011cf-ebb6-46ff-831d-8ccfafd82c8a -wi---  149.50g
>
> IU_e34f77cb-54d5-40d0-b539-e0a5fd512d2d,MD_68,PU_----
>   f6a61f2e-26bd-4b63-97c6-d66913ce48c5
> 459011cf-ebb6-46ff-831d-8ccfafd82c8a -wi---   10.00g
>
> IU_e34f77cb-54d5-40d0-b539-e0a5fd512d2d,MD_348,PU_a107b6c4-842e-4b40-9215-c965431a0c0f
>
> so image guid a4c86a68-9123-454c-b417-1b15038a4bf2 is not present on
> disk, i think that the image was correctly merged but not removed from
> the database.
>
> Any suggestion on how to fix the database to reflect the real situation
> on disk??
>
In those cases I delete the entry from engine DB to reflect the status of
the image chain.

>
> TIA
> --
> gb
>
> PGP Key: http://pgp.mit.edu/
> Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OF4NTAC6BPGRP4YJZRWBXQCNBWLERL72/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VVQNIERW6XFUEA5NIPQJQHEHCQEIK6QY/


[ovirt-users] Re: VM's gone to unknown state

2020-11-09 Thread Alex K
On Mon, Nov 9, 2020, 19:12  wrote:

> Dear Strahil Nikolov,
>
> Thank you so much for your kind response and immediate help! The issue got
> resolved and now the hosts got up and running. There was a multiple
> problems in Hosts and again and again I got same issue. Then finally I
> rebooted the hosts thrice and also in Ovirt, I confirmed the reboot option.
> Then it was working fine.
>
This indicates that perhaps you have not configured power management. You
need to have that to avoid these issues.

>
> Nikolov, I ping you back for last issue regarding gluster storage space
> issue in Ovirt4.4. cause that issue still not get resolved.
>
> Thanks once again!
>
>
> Best Regards,
> Hariharan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NLIMYZJYENSM7B5YZ2QNKMOWMBCSLUPG/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CVP3PSBQQEYDRABNVWSHE6R6XCL2RJGW/


[ovirt-users] Re: Fence Agent in Virtual Environment

2020-11-05 Thread Alex K
On Thu, Nov 5, 2020, 18:20 Strahil Nikolov via Users 
wrote:

> This is just a guess , but you might be able to install fence_xvm on all
> Virtualized Hosts .
>
Did not know fence_xvm. Interesting to check it.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В четвъртък, 5 ноември 2020 г., 16:00:40 Гринуич+2, jb 
> написа:
>
>
>
>
>
> Hello,
>
> I would like to build a hyperconverged gluster with hosted engine in a
> virtual environment, on Fedora 33 with KVM.
>
> The setup is for testing purposes, specially for test upgrades before
> running them on the real physical Servers. But I want to have the setup
> as close as possible to the real environment, so the only thing is
> missing is a fence agent.
>
> Is there a way to simulate power management in a virtual environment?
>
>
> Jonathan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5SHGKNLTK24DQ3G7ZX6AGKIHLNCFS2J/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZY2RQ2F7FIC2Y2JCBPBPOJZTMQQ25WA5/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BPKZBINJF7HX4P7AXXCWXZF7UHMW2WHW/


[ovirt-users] Re: Fence Agent in Virtual Environment

2020-11-05 Thread Alex K
On Thu, Nov 5, 2020, 16:00 jb  wrote:

> Hello,
>
> I would like to build a hyperconverged gluster with hosted engine in a
> virtual environment, on Fedora 33 with KVM.
>
> The setup is for testing purposes, specially for test upgrades before
> running them on the real physical Servers. But I want to have the setup
> as close as possible to the real environment, so the only thing is
> missing is a fence agent.
>
> Is there a way to simulate power management in a virtual environment?
>

I had successfully used the following approach not much time ago:

# Setup power management for VMs:
at hardware host install:
```
yum install python-pip -y
yum install -y zeromq-devel
yum install -y gcc python-devel libvirt-devel
firewall-cmd --permanent --zone=public --add-port=623-624/udp
firewall-cmd --reload
vbmc add CentOS7-ovirt0 --username root --password yourpass --port 623
vbmc add CentOS7-ovirt1 --username root --password yourpass --port 624
[root@baremetal ~]# vbmc list
+++-+--+
| Domain name | Status | Address | Port |
+++-+--+
| CentOS7-ovirt0 | down | :: | 623 |
| CentOS7-ovirt1 | down | :: | 624 |
+++-+--+
[root@v2 ~]# vbmc start CentOS7-ovirt0
2019-10-16 18:44:57,397.397 26596 INFO VirtualBMC [-] Started vBMC instance
for domain CentOS7-ovirt0
[root@v2 ~]# vbmc start CentOS7-ovirt1
2019-10-16 18:45:38,056.056 26596 INFO VirtualBMC [-] Started vBMC instance
for domain CentOS7-ovirt1
[root@v2 ~]# vbmc list
++-+-+--+
| Domain name | Status | Address | Port |
++-+-+--+
| CentOS7-ovirt0 | running | :: | 623 |
| CentOS7-ovirt1 | running | :: | 624 |
++-+-+--+
at node0 host (VM) check:
ipmitool -I lanplus -U root -P yourpass -H  power status
(default port is 623)
ipmitool -I lanplus -U root -P yourpass -H  power status
-p 624
at ovirt GUI you need lanplus=1,-p623 and lanplus=1,-p624 options for each
host.
```

>
>
> Jonathan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5SHGKNLTK24DQ3G7ZX6AGKIHLNCFS2J/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UI2X2GGWNJGXVKW3GKGY43ZC6DU5HXSU/


[ovirt-users] Re: Question about OVN MTU

2020-10-29 Thread Alex K
On Tue, Oct 27, 2020, 02:49 Strahil Nikolov via Users 
wrote:

> Hello All,
>
> I would like to learn more about OVN and especially the maximum MTU that I
> can use in my environment.
>
> Current Setup 4.3.10
> Network was created via UI -> MTU Custom -> 8976 -> Create on External
> Provider -> Connect to Physical Network
>
> So my physical connection is MTU 9000 and I have read that Geneve uses 24
> bits (maybe that's wrong ?) , thus I have reduced the MTU to 8976.
>
>From the internet draft it seems that the tunnel header + reserved bits
comprise 64 bits. A common practice for Geneve implementations  is to use
8900 mtu for VMs when having 9000 mtu physical network.

The draft:
https://tools.ietf.org/html/draft-ietf-nvo3-geneve-08

>
> I did some testing on the VMs and ping with payload of '8914' was the
> maximum I could pass without fragmenting and thus the MTU on the VMs was
> set to 8942.
>
> Did I correctly configure the test network's MTU and am I understanding it
> correctly that we need extra 34 bits inside the network for encapsulation ?
>
> I have checked
> https://www.ovirt.org/develop/release-management/features/network/managed_mtu_for_vm_networks.html
> but I don't see any refference how to calculate the max MTU.
>
>
> Best Regards,
> Strahil Nikolov
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CKNS5T5KE2W5EIXBTGQDU3URKHQDVAM4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VIDP3MLYHWG2WXQ6JB6EHK66J5WBOMVT/


[ovirt-users] Re: Storage Domain Data (Master)

2020-10-25 Thread Alex K
On Fri, Oct 23, 2020, 19:33  wrote:

> When data (Master) is down the others Domains data are down too?
>
> What is the best practice when a problem ocurres to the Data Master?
>
You try to avoid problems with master data store by adding high
availability at the design. At HCI approach with glusterfs you have enough
nodes (at least 3, in replica 3) to provide the shared storage domain.

>
> Thansk
>
> --
> --
> Jose Ferradeira
> http://www.logicworks.pt
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2SKXORAPJV4X2MCHSCFIE6EVUJNHKIZL/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJVWJMW6S226THU6IBO5JEQYU3YOXZYD/


[ovirt-users] Re: Improve glusterfs performance

2020-10-21 Thread Alex McWhirter

In my experience, the ovirt optimized defaults are fairly sane. I may
change a few things like enabling read ahead or increasing the shard
size, but these are minor performance bumps if anything. 


The most important thing is the underlying storage, RAID 10 is ideal
performance wise, large stripe sizes are preferable for VM workloads,
etc... You want the underlying storage to be as fast as possible,
dedicated cache devices are a plus. IOPS and latency are often more
important that throughput. 


Network throughput and latency are also very important. I don't think i
would attempt a gluster setup on anything slower than 10GbE, jumbo
frames are a huge help, switches with large buffers are nice as well. Do
not L3 route gluster (at least not inter-server links) unless you have a
switch that can do line rate routing. High or inconsistent network
latency will bring gluster to it's knees. 


Kernel tuning / gluster volume options do help, but they are not
groundbreaking performance improvements. Usually just little speed
boosts here and there. 


On 2020-10-21 12:30, eev...@digitaldatatechs.com wrote:





Here is the post link: 

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/I62VBDYPQIWPRE3LKUUVSLHPZJVQBT4X/ 

Here is the actual link: 

https://docs.gluster.org/en/latest/Administrator%20Guide/Linux%20Kernel%20Tuning/ 

Eric Evans 

Digital Data Services LLC. 

304.660.9080 

From: supo...@logicworks.pt  
Sent: Wednesday, October 21, 2020 11:47 AM

To: eev...@digitaldatatechs.com
Cc: users 
Subject: Re: [ovirt-users] Improve glusterfs performance 

Thanks. 

This is what I found from you related to glusterfs: https://lists.ovirt.org/archives/list/users@ovirt.org/message/DN47OTYUUCOAFDD6QQC333AW5RBBN6SM/ 

But I don't find anything on how to imporve gluster. 

José 


-

De: eev...@digitaldatatechs.com
Para: supo...@logicworks.pt, "users" 
Enviadas: Quarta-feira, 21 De Outubro de 2020 15:53:00
Assunto: RE: [ovirt-users] Improve glusterfs performance 

I posted a link in the users list that details how to improve gluster and improve performance. Search gluster. 

Eric Evans 

Digital Data Services LLC. 

304.660.9080 

From: supo...@logicworks.pt  
Sent: Wednesday, October 21, 2020 9:42 AM

To: users 
Subject: [ovirt-users] Improve glusterfs performance 

Hello, 

Can anyone help me in how can I improve the performance of glusterfs to work with oVirt? 

Thanks 


--

-

Jose Ferradeira
http://www.logicworks.pt 


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EAWWGYZ4GUNHDBE23XBCOFUG56AZMFRU/___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LI6QSA4N3JPXXVXWUW73TYGYOJOUTF5C/


[ovirt-users] Re: How to make oVirt + GlusterFS bulletproof

2020-10-09 Thread Alex McWhirter

A few things to consider,

what is your RAID situation per host. If you're using mdadm based soft 
raid, you need to make sure your drives support power loss data 
protection. This is mostly only a feature on enterprise drives. 
Essenstially it ensures the drives reserve enough energy to flush the 
write cache to disk on power loss. Most modern drives have a non-trivial 
amount of built in write cache and losing that data on power loss will 
gladly corrupt files, especially on soft raid setups.


If you're using hardware raid, make sure you have disabled drive based 
write cache, and that you have a battery / capacitor connected for the 
raid cards cache module.


If you're using ZFS, which isn't really supported, you need a good UPS 
and to have it set up to shut systems down cleanly. ZFS will not take 
power outages well. Power loss data protection is really important too, 
but it's not a fixall for ZFS as it also caches writes in systems RAM 
quite a bit. A dedicated cache device with power loss data protection 
can help mitigate that, but really the power issues are a more pressing 
concern in this situation.



As far as gluster is concerned, there is not much that can easily 
corrupt data on power loss. My only thought would be if your switches 
are not also battery backed, this would be an issue.


On 2020-10-08 08:15, Jarosław Prokopowski wrote:

Hi Guys,

I had a situation 2 times that due to unexpected power outage
something went wrong and VMs on glusterfs where not recoverable.
Gluster heal did not help and I could not start the VMs any more.
Is there a way to make such setup bulletproof?
Does it matter which volume type I choose - raw or qcow2? Or thin
provision versus reallocated?
Any other advise?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MRM6H2YENBP3AHQ5JWSFXH6UT6J6SDQS/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZUMGUWDRATJERHSONGMQKHH3T457LVJC/


[ovirt-users] Re: Cannot access Engine VM

2020-08-18 Thread Alex K
On Tue, Aug 18, 2020, 09:14 Steven Bach via Users  wrote:

> Hello All,
>
> I installed Ovirt node 4.4.1.5 from the ovirt ISO, IP 192.168.1.53/24
> I setup the self hosted engine by logging into the web interface,
> configured it for 192.168.1.55/24 IP on the default generated bridge
> interface and setup a FQDN that is resolvable via DNS.
>
> Setup NFS storage, and all seems good.
>
> The Engine VM is running, but I cannot access it at all outside the node.
> SSH'd in the node I can ping the engine, anything else on that same subnet
> cannot SSH or even ping it (Again, DNS is resolving correctly to the IP
> Address). I am able to SSH into the engine from the node.
>
Sounds like networking or firewall issue. Do a packet trace. If they pass
through the node then check firewall. I would try also forwarding through
ssh to confirm engine health.

>
> While SSH'd into the Engine from the node, I can only ping the Node and
> nothing beyond that, not able to install ovirt repo, nothing.
>
> Any ideas are greatly appreciated, thank you,
>
> --
> Steven Bach
> sb...@bachnetworks.com
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PDMV3R6ODIAPHRRU6E4RUCU6QOKMRD4T/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XL76ABWNPGDD6QNPN5QHMY4BEE7GLK73/


[ovirt-users] Re: Help needed - Not able to find Windows Guest agent in 4.4.1.10-1.el8 Hosted Engine

2020-08-15 Thread Alex K
On Fri, Aug 14, 2020, 06:12 dhanaraj.ramesh--- via Users 
wrote:

> Hi Team,
>
> unable to locate Windows guest agant iso in 4.4.1.10-1.el8 Hosted Engine
> version. please share us where can i get the iso?
>
Usually I grab them from here: https://resources.ovirt.org/pub/
I was not able to find a 4.4 version, but 4.3 will do just fine.

>
> there is no /usr/share/oVirt-guest-tools-iso/oVirt-tools-setup.iso
> available in 4.4.1 HE
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BAHAWSDM5BRMJGUFIM337PP7NL5WPGX3/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U57AMBSVXWFOKFHGTQMWX72Y76HOIG6R/


[ovirt-users] Re: Migration not working

2020-08-14 Thread Alex K
On Fri, Aug 14, 2020, 16:16 Juan Pablo Lorier  wrote:

> Hi,
>
> I'm having issues with migration to some hosts. I have a 4 node cluster
> and I tried updating to see if it fixes but it's still failing. The reason
> is nos clear in the engine log.
>
>
> 2020-08-14 09:45:32,322-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [364e] EVENT_ID: VM_MIGRATION_START_SYSTEM_INITIAT
> ED(67), Migration initiated by system (VM: medialist2-videoteca, Source:
> virt2.tnu.com.uy, Destination: virt3.tnu.com.uy, Reason: ).
> 2020-08-14 09:45:32,336-03 INFO
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-429)
> [535a8bdb] Lock Acquired to object 'EngineLock:{exclusiveLocks='[aac7468
> 5-c969-4761-923f-043400176edf=VM]', sharedLocks=''}'
> 2020-08-14 09:45:32,355-03 INFO
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-429)
> [535a8bdb] Running command: MigrateVmToServerCommand internal: true. Ent
> ities affected :  ID: aac74685-c969-4761-923f-043400176edf Type: VMAction
> group MIGRATE_VM with role type USER
> 2020-08-14 09:45:32,383-03 INFO
> [org.ovirt.engine.core.vdsbroker.MigrateVDSCommand] (default task-429)
> [535a8bdb] START, MigrateVDSCommand( MigrateVDSCommandParameters:{hostId=
> '634f3f64-8945-470c-b31c-b8d4c73109e6',
> vmId='aac74685-c969-4761-923f-043400176edf', srcHost='virt2.tnu.com.uy',
> dstVdsId='f9e441a0-a4e6-4548-8c6f-83a958120f02', dstHost='virt4.
> tnu.com.uy:54321', migrationMethod='ONLINE', tunnelMigration='false',
> migrationDowntime='0', autoConverge='true', migrateCompressed='false',
> consoleAddress='null', maxBandwidth=
> '125', enableGuestEvents='true', maxIncomingMigrations='2',
> maxOutgoingMigrations='2', convergenceSchedule='[init=[{name=setDowntime,
> params=[100]}], stalling=[{limit=1, action=
> {name=setDowntime, params=[150]}}, {limit=2, action={name=setDowntime,
> params=[200]}}, {limit=3, action={name=setDowntime, params=[300]}},
> {limit=4, action={name=setDowntime, pa
> rams=[400]}}, {limit=6, action={name=setDowntime, params=[500]}},
> {limit=-1, action={name=abort, params=[]}}]]', dstQemu='172.16.100.45'}),
> log id: 1db80717
> 2020-08-14 09:45:32,385-03 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateBrokerVDSCommand]
> (default task-429) [535a8bdb] START, MigrateBrokerVDSCommand(HostName = virt
> 2.tnu.com.uy,
> MigrateVDSCommandParameters:{hostId='634f3f64-8945-470c-b31c-b8d4c73109e6',
> vmId='aac74685-c969-4761-923f-043400176edf', srcHost='virt2.tnu.com.uy',
> dstVdsId='f9e4
> 41a0-a4e6-4548-8c6f-83a958120f02', dstHost='virt4.tnu.com.uy:54321',
> migrationMethod='ONLINE', tunnelMigration='false', migrationDowntime='0',
> autoConverge='true', migrateCompre
> ssed='false', consoleAddress='null', maxBandwidth='125',
> enableGuestEvents='true', maxIncomingMigrations='2',
> maxOutgoingMigrations='2', convergenceSchedule='[init=[{name=setDow
> ntime, params=[100]}], stalling=[{limit=1, action={name=setDowntime,
> params=[150]}}, {limit=2, action={name=setDowntime, params=[200]}},
> {limit=3, action={name=setDowntime, para
> ms=[300]}}, {limit=4, action={name=setDowntime, params=[400]}}, {limit=6,
> action={name=setDowntime, params=[500]}}, {limit=-1, action={name=abort,
> params=[]}}]]', dstQemu='172.1
> 6.100.45'}), log id: 4085b503
> 2020-08-14 09:45:32,433-03 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateBrokerVDSCommand]
> (default task-429) [535a8bdb] FINISH, MigrateBrokerVDSCommand, return: , log
>  id: 4085b503
> 2020-08-14 09:45:32,437-03 INFO
> [org.ovirt.engine.core.vdsbroker.MigrateVDSCommand] (default task-429)
> [535a8bdb] FINISH, MigrateVDSCommand, return: MigratingFrom, log id: 1db8
> 0717
> 2020-08-14 09:45:32,446-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [535a8bdb] EVENT_ID: VM_MIGRATION_START_SYSTEM_INITIAT
> ED(67), Migration initiated by system (VM: reverse_proxy, Source:
> virt2.tnu.com.uy, Destination: virt4.tnu.com.uy, Reason: ).
> 2020-08-14 09:45:32,462-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [535a8bdb] EVENT_ID:
> USER_VDS_MAINTENANCE_WITHOUT_REASON(620), Host virt2.tnu.com.uy was
> switched to Maintenance mode by jplor...@tnu.com.uy.
> 2020-08-14 09:45:32,681-03 INFO
> [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback]
> (EE-ManagedThreadFactory-engineScheduled-Thread-14)
> [7667d149-886e-406b-9cd6-9b7472fa9944] Command 'MaintenanceNumberOfVdss'
> id: 'db97a747-115b-4f01-aa3d-6277080e6a44' child commands '[]' executions
> were completed, status 'SUCCEEDED'
> 2020-08-14 09:45:33,024-03 INFO
> [org.ovirt.engine.core.vdsbroker.VdsManager]
> (EE-ManagedThreadFactory-engineScheduled-Thread-62) [] Received first
> domain report for host virt2.tnu.com.uy
> 2020-08-14 09:45:33,686-03 INFO
> [org.ovirt.engine.core.bll.MaintenanceNumberOfVdssCommand]
> (EE-ManagedThreadFactory-engineScheduled-Thread-88)
> [76

  1   2   3   4   5   6   7   >