Re: [ovirt-users] Permission on Vm and User portal
Hi all, I've Ovirt 4.1.2 with an authentication LDAP (openldap). In this tree LDAP, I've two groups, students and teachers. How to add permissions to execute VMs or Pools to these groups without add permissions to each member of these groups. Thanks you in advance. Angel. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Cannot remove VM
Hi, I can't edit/remove/modify a VM. Always show a message: "Cannot remove VM. Related operation is currently in progress. Please try again later" I also used REST API curl -k -u admin@internal:passwd -X DELETE https://engine/ovirt-engine/api/vms/ and the output message is the same. How to can execute actions over the VM, or how to remove it from Cluster? Thanks in advance. Ángel González. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] host node non-operational
Hello, I've installed a engine server and 2 host nodes. After install the 2 nodes I've configured a nfs domain storage in the first node. After few minutes, the second host is down and I dont put it online. The log in the engine show: >Host node2 cannot access the Storage Domain(s) nfsexport_node1 attached to the Data Center Labs. Setting Host state to Non-Operational. The nfsexport Storage Domain Format is V4, but in the /etc/nfsmount.conf Defaultproto=tcp Defaultvers=3 Nfsvers=3 Also I've added the line NFS4_SUPPORT="no" to /etc/sysconfig/nfs file The node1's iptables rules are: ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:54321 ACCEPT tcp -- anywhere anywhere tcp dpt:54322 ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc ACCEPT udp -- anywhere anywhere udp dpt:sunrpc ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT udp -- anywhere anywhere udp dpt:snmp ACCEPT tcp -- anywhere anywhere tcp dpt:websm ACCEPT tcp -- anywhere anywhere tcp dpt:16514 ACCEPT tcp -- anywhere anywhere multiport dports rockwell-csp2 ACCEPT tcp -- anywhere anywhere multiport dports rfb:6923 ACCEPT tcp -- anywhere anywhere multiport dports 49152:49216 ACCEPT tcp -- anywhere anywhere tcp dpt:nfs ACCEPT udp -- anywhere anywhere udp dpt:nfs ACCEPT tcp -- anywhere anywhere tcp dpt:mountd ACCEPT udp -- anywhere anywhere udp dpt:mountd REJECT all -- anywhere anywhere reject-with icmp-host-prohibited And the output of showmount -e command in a terminal of node1 is: >/nfs/data * But the output of showmount -e node1 in a terminal of node2 is >clnt_create: RPC: Port mapper failure - Unable to receive: errno 113 (No route to host) Any help? Thanks you in advance. Ángel González ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Deploy host engine error: The task includes an option with an undefined variable
Hi all!
I'm deploying a host engine in a host node with a 8x Intel(R) Xeon(R)
CPU E5410 @ 2.33GHz.
The deploy proccess show the next message
[INFO]TASK [ovirt.hosted_engine_setup : Convert CPU model name]
[ERROR]fatal: [localhost]: FAILED! => {"msg": "The task includes an
option with an undefined variable. The error was: 'dict object' has no
attribute ''\n\nThe error appears to be in
'/usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/create_target_vm/01_create_target_hosted_engine_vm.yml':
line 105, column 15, but may\nbe elsewhere in the file depending on
the exact syntax problem.\n\nThe offending line appears to be:\n\n -
debug: var=server_cpu_dict\n ^ here\n\nThere appears to be both 'k=v'
shorthand syntax and YAML in this task. Only one syntax may be used.\n"}
The ansible deploy script in his 105 line show:
- name: Parse server CPU list
set_fact:
server_cpu_dict: "{{ server_cpu_dict |
combine({item.split(':')[1]: item.split(':')[3]}) }}"
with_items: >-
{{
server_cpu_list.json['values']['system_option_value'][0]['value'].split(';
')|list|difference(['']) }}
- debug: var=server_cpu_dict
I don´t know ansible and i don't how to resolve this issue. Any idea?
Thanks in advance,
Ángel González.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WO2A24N5B4EOEY5KNYRWF4GI2EPGIDER/
[ovirt-users] Re: Deploy host engine error: The task includes an option with an undefined variable
re/ovirt-hosted-engine-setup/ansible/trigger_role.yml',
'ansible_host': 'localhost', 'ansible_task': 'Parse server CPU list',
'task_duration': 1}
2020-06-10 18:25:30,387+0200 DEBUG ansible on_any args
kwargs
2020-06-10 18:25:30,897+0200 INFO ansible task start {'status': 'OK',
'ansible_type': 'task', 'ansible_playbook':
'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml',
'ansible_task': 'ovirt.hosted_engine_setup : debug'}
2020-06-10 18:25:30,897+0200 DEBUG ansible on_any args TASK:
ovirt.hosted_engine_setup : debug kwargs is_conditional:False
2020-06-10 18:25:30,898+0200 DEBUG ansible on_any args localhostTASK:
ovirt.hosted_engine_setup : debug kwargs
2020-06-10 18:25:31,488+0200 INFO ansible ok {'status': 'OK',
'ansible_type': 'task', 'ansible_playbook':
'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml',
'ansible_host': 'localhost', 'ansible_task': '', 'task_duration': 1}
2020-06-10 18:25:31,489+0200 DEBUG ansible on_any args
kwargs
2020-06-10 18:25:31,996+0200 INFO ansible task start {'status': 'OK',
'ansible_type': 'task', 'ansible_playbook':
'/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml',
'ansible_task': 'ovirt.hosted_engine_setup : Convert CPU model name'}
2020-06-10 18:25:31,996+0200 DEBUG ansible on_any args TASK:
ovirt.hosted_engine_setup : Convert CPU model name kwargs
is_conditional:False
2020-06-10 18:25:31,997+0200 DEBUG ansible on_any args localhostTASK:
ovirt.hosted_engine_setup : Convert CPU model name kwargs
2020-06-10 18:25:32,500+0200 DEBUG var changed: host "localhost" var
"ansible_play_hosts" type "" value: "[]"
2020-06-10 18:25:32,500+0200 DEBUG var changed: host "localhost" var
"ansible_play_batch" type "" value: "[]"
2020-06-10 18:25:32,501+0200 DEBUG var changed: host "localhost" var
"play_hosts" type "" value: "[]"
2020-06-10 18:25:32,501+0200 ERROR ansible failed {
"ansible_host": "localhost",
"ansible_playbook":
"/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml",
"ansible_result": {
"_ansible_no_log": false,
"msg": "The task includes an option with an undefined variable.
The error was: 'dict object' has no attribute ''\n\nThe error appears to
be in
'/usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/create_target_vm/01_create_target_hosted_engine_vm.yml':
line 105, column 15, but may\nbe elsewhere in the file depending on the
exact syntax problem.\n\nThe offending line appears to be:\n\n - debug:
var=server_cpu_dict\n ^ here\n\nThere appears to be both
'k=v' shorthand syntax and YAML in this task. Only one syntax may be
used.\n"
},
"ansible_task": "Convert CPU model name",
"ansible_type": "task",
"status": "FAILED",
"task_duration": 0
}
2020-06-10 18:25:32,501+0200 DEBUG ansible on_any args
kwargs ignore_errors:None
2020-06-10 18:25:32,504+0200 INFO ansible stats {
"ansible_playbook":
"/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml",
"ansible_playbook_duration": "01:10 Minutes",
"ansible_result": "type: \nstr: {'localhost': {'ok':
35, 'failures': 1, 'unreachable': 0, 'changed': 5, 'skipped': 5,
'rescued': 0, 'ignored': 0}}",
"ansible_type": "finish",
"status": "FAILED"
}
Thanks in advance.
Best Regards,
Ángel González.
El 10/6/20 a las 8:10, Yedidyah Bar David escribió:
On Tue, Jun 9, 2020 at 10:47 PM Strahil Nikolov via Users
wrote:
Can you put something like this before the 'Parse server cpu list' :
- name: Debug why parsing fails
debug:
msg:
- "Loop is done over {{
server_cpu_list.json['values']['system_option_value'][0]['value'].split(';
')|list|difference(['']) }}"
- "Actual value of server_cpu_dict before the set_fact is {{ server_cpu_dict
}}"
Note: e-mail clients can distort code. Don't copy/paste , but type the example
from above.
Best Regards,
Strahil Nikolov
На 9 юни 2020 г. 19:34:07 GMT+03:00, "Angel R. Gonzalez"
написа:
Hi all!
I'm deploying a host engine in a host node with a 8x Intel(R) Xeon(R)
CPU E5410 @ 2.33GHz.
The deploy proccess show the next message
[INFO]TASK [ovirt.hosted_engine_setup : Convert CPU model name]
[ERROR]fatal: [localhost]: FAILED! => {"msg": "The task includes an
option with an undefined variable. The error was: 'dict object' has
no
attribute ''\n\nThe error appears to be in
'/usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/create_target_vm/01_create_target_hosted_engine_vm.yml':
line 105, column 15, but may\nbe elsewhere in the file depending on
the exact syntax problem.\n\nThe offending line appears to be:\n\n -
debug: var=server_cpu_dict\n ^ here\n\nThere appears to be both 'k=v'
shorthand syntax and YAML in this task. Only one syntax may be
used.\n"}
The ansible deploy script in his 105 line show:
- name: Parse server CPU list
set_fact:
server_cpu_dict: "{{ server_cpu_dict |
combine({item.split(':')[1]: item.split(':')[3]}) }}"
with_items: >-
{{
server_cpu_list.json['values']['system_option_value'][0]['value'].split(';
')|list|difference(['']) }}
- debug: var=server_cpu_dict
I don´t know ansible and i don't how to resolve this issue. Any idea?
Please check/share /var/log/ovirt-hosted-engine-setup/*. Search there, e.g.,
for server_cpu_list, server_cpu_dict.
Your case seems similar to a few others, discussed recently in this thread:
[ovirt-users] Issues deploying 4.4 with HE on new EPYC hosts
Can you please check it?
In particular, what OS are you using? Perhaps CentOS Stream?
What is the output of:
rpm -q qemu-kvm libvirt
?
Thanks and best regards,
--
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/B5NGXFVGUCOIH2TKA3LQ2HRRZU5TU47C/
[ovirt-users] Ovirt-engine , certificate issue
Hello,
I've a issue when I try log in ovirt-engine manager with a browser. The
error message is:
PKIX path validation failed:
java.security.cert.CertPathValidatorException: validity check failed
The ovirt version is 4.4.5.11-1.
I follow the next commands for try resolve it.
# cp -a /etc/pki/ovirt-engine "/etc/pki/ovirt-engine.$(date "+%Y%m%d")"
# SUBJECT="$(openssl x509 -subject -noout -in
/etc/pki/ovirt-engine/certs/apache.cer | sed 's/subject= //')"
# /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name=apache
--password="PASSWORD" --subject="${SUBJECT}"
# openssl pkcs12 -passin "pass:PASSWORD" -nokeys -in
/etc/pki/ovirt-engine/keys/apache.p12 >
/etc/pki/ovirt-engine/certs/apache.cer
# openssl pkcs12 -passin "pass:PASSWORD" -nocerts -nodes -in
/etc/pki/ovirt-engine/keys/apache.p12 >
/etc/pki/ovirt-engine/keys/apache.key.nopass
# chmod 0600 /etc/pki/ovirt-engine/keys/apache.key.nopass
# systemctl restart ovirt-engine.service
But after restarting the issue is the same.
Any idea?
Thanks in advance
Ángel.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MPFXIEDZBFVC7JAOV77DCLDR3IVOSOMU/
[ovirt-users] Re: Ovirt-engine , certificate issue
Hi,
thank you very much for your support.
I've restarted httpd and the issue is resolved. But now, I've seen that
one of the nodes is NonResponsive mode, other is in Connecting mode and
the system log say:
"Engine's certification has expired at 2022-05-16. Please renew the
engine's certification."
Should I run the command engine-setup --offline for renew the engine's
certification?
Do I have to do some more actions before executing that command?
After the engine-setup --offline, the nodes will be up?
Thanks in advance.
Ángel.
El 17/5/22 a las 22:23, Gianluca Cecchi escribió:
On Tue, May 17, 2022 at 7:36 PM Sharon Gratch wrote:
Hi,
On Tue, May 17, 2022 at 7:33 PM Angel R. Gonzalez
wrote:
Hello,
I've a issue when I try log in ovirt-engine manager with a
browser. The
error message is:
PKIX path validation failed:
java.security.cert.CertPathValidatorException: validity check
failed
The ovirt version is 4.4.5.11-1.
I follow the next commands for try resolve it.
> # cp -a /etc/pki/ovirt-engine "/etc/pki/ovirt-engine.$(date
"+%Y%m%d")"
> # SUBJECT="$(openssl x509 -subject -noout -in
> /etc/pki/ovirt-engine/certs/apache.cer | sed 's/subject= //')"
> # /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh
--name=apache
> --password="PASSWORD" --subject="${SUBJECT}"
> # openssl pkcs12 -passin "pass:PASSWORD" -nokeys -in
> /etc/pki/ovirt-engine/keys/apache.p12 >
> /etc/pki/ovirt-engine/certs/apache.cer
> # openssl pkcs12 -passin "pass:PASSWORD" -nocerts -nodes -in
> /etc/pki/ovirt-engine/keys/apache.p12 >
> /etc/pki/ovirt-engine/keys/apache.key.nopass
> # chmod 0600 /etc/pki/ovirt-engine/keys/apache.key.nopass
> # systemctl restart ovirt-engine.service
But after restarting the issue is the same.
Any idea?
Maybe try to restart the apache HTTP Server as well:
/systemctl restart httpd/
If it still doesn't work then please share the errors within the
engine log /var/log/ovirt-engine/engine.log
Thanks,
Sharon
Otherwise you can run
engine-setup --offline
(it will not change anything on current config and will not try to
update any package)
between the answers to give it will notice that your certificate is
expired and you have to answer yes to the question to renew it
After that you should be able to access the engine again
HIH,
Gianluca
--
Ángel Ramón González Martín
Responsable de Laboratorios Docentes
Edificio Alan Turing Planta 3ª, Despacho A-313
Teléfono: 91497 2311 angel.gonza...@uam.es
Escuela Politécnica Superior
Universidad Autónoma de Madrid
C/ Francisco Tomás y Valiente 11, 28049 Madrid
Antes de imprimir este correo piense si es necesario. Cuidemos el
medioambiente.___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XNNPWDSUIGL47VYR2ZH7RWI7LY7WN5OM/
