[ovirt-users] Pool machines not listed in VM tab

[Nicolás]

Hi,

We're running oVirt 3.5.3.1 and recently we had a crash of one of our 
hosts. Since then, there are some VMs that are not listed in the Virtual 
Machines tab, but still exist and are listed in the Pools tab when 
clicked on the specific pool.


Is there a way to re-synchronize the list of Virtual Machines in 
accordance with the information of the Pools tab?


Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Allowing a user to manage all machines in a pool

[Nicolás]

Hi,

We're running oVirt 3.5.3.1-1, and we're currently deploying some Pools 
for students and teachers, so each has access to one machine in the 
pool. Thus, each of them is granted the UserRole in the pool. Now the 
teacher is asking us to allow him access to all students' VMs via the 
Web GUI to evaluate their work.


Is there a permission to accomplish that? In worst of cases I will 
detach the VMs from the pool and grant the teacher the UserRole on each 
of them, but I'd like to know if there's a "cleaner" way.


Thanks.

Regards,

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Allowing a user to manage all machines in a pool

[Nicolás]

Any hints to this, please?

 Mensaje original 
De: Nicolás  
Fecha:20/11/2015  18:39  (GMT+00:00) 
Para: users@ovirt.org 
Asunto: [ovirt-users] Allowing a user to manage all machines in a pool 

Hi,

We're running oVirt 3.5.3.1-1, and we're currently deploying some Pools 
for students and teachers, so each has access to one machine in the 
pool. Thus, each of them is granted the UserRole in the pool. Now the 
teacher is asking us to allow him access to all students' VMs via the 
Web GUI to evaluate their work.

Is there a permission to accomplish that? In worst of cases I will 
detach the VMs from the pool and grant the teacher the UserRole on each 
of them, but I'd like to know if there's a "cleaner" way.

Thanks.

Regards,

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Network interface profiles disappeared after upgrading to 3.6.1

[Nicolás]

Done. For those having the same issue: 
https://bugzilla.redhat.com/show_bug.cgi?id=1299049


Regards,

Nicolás

El 15/01/16 a las 18:58, Einav Cohen escribió:

please file a BZ [1] on this issue with the necessary
details as explained on the "OVirt Engine Debug
Obfuscated UI" wiki page [2].
My guess is that the server side "Invalid XSRF token"
message is not related.


Thanks,
Einav

[1] https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt-engine

[2] http://www.ovirt.org/OVirt_Engine_Debug_Obfuscated_UI

- Original Message -

From: nico...@devels.es
To: users@ovirt.org
Sent: Friday, January 15, 2016 1:47:01 PM
Subject: Re: [ovirt-users] Network interface profiles disappeared after 
upgrading to 3.6.1

In the JavaScript console I see this:

Fri Jan 15 18:38:17 GMT+000 2016
SEVERE: Uncaught exception:
com.google.gwt.core.client.JavaScriptException: (TypeError)
   __gwt$exception: : NMk(...) is null
at Unknown.POm(Unknown Source)
at Unknown.ZFk(Unknown Source)
at Unknown.aGk(Unknown Source)
at Unknown.SJk(Unknown Source)
at Unknown.VJk(Unknown Source)
at Unknown.yIk(Unknown Source)
at Unknown.BIk(Unknown Source)
at Unknown.bTc(Unknown Source)
at Unknown.B6h(Unknown Source)
at Unknown.VS(Unknown Source)
at Unknown.mT(Unknown Source)
at Unknown.jAd/c.onreadystatechange<(Unknown Source)
at Unknown.Yp(Unknown Source)
at Unknown.aq(Unknown Source)
at Unknown._p/<(Unknown Source)
at Unknown.anonymous(Unknown Source)

Also tried granting the VnicProfileUser and even NetworkAdmin
permissions, no difference. In the server.log file I could find this:

2016-01-15 18:28:53,871 ERROR [io.undertow.servlet] (default task-28)
Exception while dispatching incoming RPC call:
com.google.gwt.user.client.rpc.RpcTokenException: Invalid RPC token
(Invalid XSRF token)
  at
org.ovirt.engine.ui.frontend.server.gwt.XsrfProtectedRpcServlet.validateXsrfToken(XsrfProtectedRpcServlet.java:31)
[frontend.jar:]
  at
org.ovirt.engine.ui.frontend.server.gwt.AbstractXsrfProtectedRpcServlet.onAfterRequestDeserialized(AbstractXsrfProtectedRpcServlet.java:56)
[frontend.jar:]
  at
com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:171)
[gwt-servlet.jar:]
  at
com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233)
[gwt-servlet.jar:]
  at
com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
[gwt-servlet.jar:]
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
[jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
[jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
  at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94)
[utils.jar:]
  at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132)
[frontend.jar:]
  at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:73)
[branding.jar:]
  at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:65)
[utils.jar:]
  at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31)
[aaa.jar:]
  at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
[undertow-servlet-1.1.8.Final.jar:1.1.8.Final]
  at
io.undertow.serv

[ovirt-users] How does VDSM-Fake actually work?

[Nicolás]

Hi,

I'm trying to set up VDSM-Fake 
(git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however, I'm 
a bit confused about how does it actually work. As the instructions say, 
I was able to build the project with Maven (however, the 
org.ovirt.vdsm-jsonrpc-java dependency version had to be changed to 
1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no longer 
provided at the repository).


Once built, I run mvn jetty:run and the server started correctly:

   2016-02-02 11:01:51.957:INFO::jetty-6.1.26
   2016-02-02 11:01:52.804:INFO::No Transaction manager found - if your
   webapp requires one, please configure one.
   2016-02-02 11:01:53,424 Application initialized.
   2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322
   2016-02-02 11:01:53.702:INFO::Started
   SelectChannelConnector@0.0.0.0:54321
   [INFO] Started Jetty Server
   [INFO] Starting scanner at interval of 10 seconds.

I could indeed verify it's listening on the VDSM port:

   [root@host ovirt-vdsmfake]# netstat -atpn | grep 54321
   tcp6   0  0 :::54321 :::*LISTEN 
   44870/java


So the next step is to add a fake host via REST. I used scripts provided 
here <http://www.ovirt.org/REST_API_Using_BASH_Automation> and I 
successfully added the host, however, it starts installing all the VDSM 
packages as it were a normal host and therefore it tries to start vdsmd 
as well, which throws an error as the Jetty Server is already listening 
on the 54321 port. I shut down the Jetty Server and allowed oVirt 
Manager to install all the packages properly, then stopped vdsmd and 
started the Jetty Server, but expectedly oVirt Engine fails with message 
"Host xxx is non responsive", so what I actually got is a real VDSM host 
and not a fake one.


FWIW, the fake VDSM runs on a different host, ports are reacheable from 
the oVirt engine, proper /etc/hosts has been added to the engine to 
reach the host, and no further customization of web.xml has been done.


I feel like I'm missing something here. Could someone shed some light on 
what's wrong?


Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How does VDSM-Fake actually work?

[Nicolás]

Is there a way to get an account on mojo.redhat.com or is it internal? 
I'm trying to open the document but credentials are required and I see 
no option to create an account.


El 04/02/16 a las 13:49, emarcian escribió:

Hi,
Seems like you need to change this settings update vdc_options set 
option_value='false' where option_name='InstallVds';

follow the instructions here:
https://mojo.redhat.com/docs/DOC-990399

in case you using 3.6 there is a new war (if you run the simulator as 
standalone).


-Eldad


On 02/04/2016 03:04 PM, Piotr Kliczewski wrote:

Eldad is working on making it working with engine 3.6. He should be able to
give you information you need.

On Wed, Feb 3, 2016 at 12:33 PM,  wrote:

Anything?

El 2016-02-02 10:18, Nicolás escribió:

Hi,

  I'm trying to set up VDSM-Fake
(git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however,
I'm a bit confused about how does it actually work. As the
instructions say, I was able to build the project with Maven (however,
the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed
to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no
longer provided at the repository).

  Once built, I run mvn jetty:run and the server started correctly:


2016-02-02 11:01:51.957:INFO::jetty-6.1.26  [1]
2016-02-02 11:01:52.804:INFO::No  [2] Transaction manager found - if
your webapp requires one, please configure one.
2016-02-02 11:01:53,424 Application initialized.
2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322
2016-02-02 11:01:53.702:INFO::Started  [3]
SelectChannelConnector@0.0.0.0:54321
[INFO] Started Jetty Server
[INFO] Starting scanner at interval of 10 seconds.

  I could indeed verify it's listening on the VDSM port:


[root@host ovirt-vdsmfake]# netstat -atpn | grep 54321
tcp6   0  0
:::54321
:::*LISTEN
44870/java

  So the next step is to add a fake host via REST. I used scripts
provided here [4] and I successfully added the host, however, it
starts installing all the VDSM packages as it were a normal host and
therefore it tries to start vdsmd as well, which throws an error as
the Jetty Server is already listening on the 54321 port. I shut down
the Jetty Server and allowed oVirt Manager to install all the packages
properly, then stopped vdsmd and started the Jetty Server, but
expectedly oVirt Engine fails with message "Host xxx is non
responsive", so what I actually got is a real VDSM host and not a fake
one.

  FWIW, the fake VDSM runs on a different host, ports are reacheable
from the oVirt engine, proper /etc/hosts has been added to the engine
to reach the host, and no further customization of web.xml has been
done.

  I feel like I'm missing something here. Could someone shed some light
on what's wrong?

  Thanks.

  Nicolás


Links:
--
[1]INFO::jetty-6.1.26
[2]INFO::No
[3]INFO::Started
[4]http://www.ovirt.org/REST_API_Using_BASH_Automation

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How does VDSM-Fake actually work?

[Nicolás]

Hi Roman,

El 16/02/16 a las 10:27, Roman Mohr escribió:
On Fri, Feb 12, 2016 at 12:45 PM, Michal Skrivanek 
mailto:michal.skriva...@redhat.com>> wrote:




On 09 Feb 2016, at 12:15, Nicolás mailto:nico...@devels.es>> wrote:

Is there a way to get an account on mojo.redhat.com
<http://mojo.redhat.com> or is it internal? I'm trying to open
the document but credentials are required and I see no option to
create an account.


yes it is

Eldad, would you please move it to ovirt.org <http://ovirt.org>
instead?


I recently played with fakevdsm myself. The result was the patch 
series in [1]. At least an updated README for the result of my patches 
can be found in [2].


Thanks,
michal



El 04/02/16 a las 13:49, emarcian escribió:

Hi,
Seems like you need to change this settings update vdc_options
set option_value='false' where option_name='InstallVds';
follow the instructions here:
https://mojo.redhat.com/docs/DOC-990399

in case you using 3.6 there is a new war (if you run the
simulator as standalone).

-Eldad


On 02/04/2016 03:04 PM, Piotr Kliczewski wrote:

Eldad is working on making it working with engine 3.6. He should be able to
give you information you need.

On Wed, Feb 3, 2016 at 12:33 PM, 
<mailto:nico...@devels.es>  wrote:

Anything?

El 2016-02-02 10:18, Nicolás escribió:

Hi,

  I'm trying to set up VDSM-Fake
(git://gerrit.ovirt.org/ovirt-vdsmfake.git) for some tests, however,
I'm a bit confused about how does it actually work. As the
instructions say, I was able to build the project with Maven (however,
the org.ovirt.vdsm-jsonrpc-java dependency version had to be changed
to 1.1.5 instead of 1.1.2-SNAPSHOT in pom.xml as this latter is no
longer provided at the repository).

  Once built, I run mvn jetty:run and the server started correctly:


2016-02-02 11:01:51.957:INFO::jetty-6.1.26  [1]
2016-02-02 11:01:52.804:INFO::No  [2] Transaction manager found - if
your webapp requires one, please configure one.
2016-02-02 11:01:53,424 Application initialized.
2016-02-02 11:01:53,442 Opening a Stomp server localhost:54322
2016-02-02 11:01:53.702:INFO::Started  [3]
SelectChannelConnector@0.0.0.0:54321
<mailto:SelectChannelConnector@0.0.0.0:54321>
[INFO] Started Jetty Server
[INFO] Starting scanner at interval of 10 seconds.

  I could indeed verify it's listening on the VDSM port:


[root@host ovirt-vdsmfake]# netstat -atpn | grep 54321
tcp6   0  0
:::54321
:::*LISTEN
44870/java

  So the next step is to add a fake host via REST. I used scripts
provided here [4] and I successfully added the host, however, it
starts installing all the VDSM packages as it were a normal host and
therefore it tries to start vdsmd as well, which throws an error as
the Jetty Server is already listening on the 54321 port. I shut down
the Jetty Server and allowed oVirt Manager to install all the packages
properly, then stopped vdsmd and started the Jetty Server, but
expectedly oVirt Engine fails with message "Host xxx is non
responsive", so what I actually got is a real VDSM host and not a fake
one.

  FWIW, the fake VDSM runs on a different host, ports are reacheable
from the oVirt engine, proper /etc/hosts has been added to the engine
to reach the host, and no further customization of web.xml has been
done.

  I feel like I'm missing something here. Could someone shed some light
on what's wrong?

  Thanks.

  Nicolás



@Nicolas I would recommend you to use the top of my gerrit patches to 
run vdsmake:


  git clone git://gerrit.ovirt.org/ovirt-vdsmfake 
<http://gerrit.ovirt.org/ovirt-vdsmfake>

  cd ovirt-vdsmfake
  git fetch git://gerrit.ovirt.org/ovirt-vdsmfake 
<http://gerrit.ovirt.org/ovirt-vdsmfake> refs/changes/70/53570/2 && 
git checkout FETCH_HEAD


then follow the instructions in the README of the checked out 
repository [3].


Hope that helps.

Best Regards,
Roman


[1] 
https://gerrit.ovirt.org/#/q/status:open+project:ovirt-vdsmfake+branch:master+topic:easy_access

[2] https://gerrit.ovirt.org/#/c/53570/
[3] https://gerrit.ovirt.org/#/c/53570/2/README



I could finally make fakevdsm work with your changes. Maybe I'm missing 
something but this works if the engine and the fake host are run on the 
same server - when I tried to run the fake host on a different host I 
wasn't seeing any responses from the host (the firewall was vanilla 
clean). In any case, I'm ok with both running on the same machine.


Will this be merged into master?

Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Manually assign DC and Cluster to Blank template

[Nicolás]

Hi Greg,

El 18/02/16 a las 18:36, Greg Padgett escribió:

On 02/18/2016 02:49 AM, nico...@devels.es wrote:

El 2016-02-17 22:55, Greg Padgett escribió:

On 02/16/2016 07:56 AM, nico...@devels.es wrote:

Hi,

We upgraded from oVirt 3.5 and 3.6 and deleted the Default cluster, so
now we have the Blank template with no DC and no Cluster, thus our
users
can't use it.

Is there a way to manually set these two parameters to the current DC
and Cluster values for the Blank template? I tried editing it but see
no
option to set them.

Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



Hi Nicolás,

Removing the default cluster should be ok, since the templates don't
bind VMs to a DC/Cluster--you should be able to specify the DC/Cluster
when creating a VM.

HTH,
Greg


Hi Greg,

I'll elaborate a bit further on the issue. I'm attaching a screenshot of
the 'Templates' tab on the webadmin pane - As you can see, all of them
have a Data Center and a Cluster assigned (columns 4 and 5) but the
Blank template (because we deleted the default DC). Even if this
template has the 'Everyone' permission, as we're granting permissions to
our users on the Data Center, they are not able to see the Blank
template in the list when deploying new machines in the userportal view,
so currently they necessarily need to choose a template from the list
which is not Blank, and that's an issue to some of them.

That's why I was wondering if there's a manual way to assign the DC and
Cluster to the Blank template, even modifying it directly in the DB, so
the users see it in the userportal.

Any hint is very appreciated.

Regards,

Nicolás



The default template is unbound to a DC/Cluster by design, so while 
forcing an assignment in the db could work (not sure), it's not 
supported and likely to break at some point.  See [1] for details on 
that 3.6 change.


However, since the root issue seems to be users not being able to use 
the template, you should be able to assign permissions that allow this 
from the Templates > Permissions sub-tab.  If this isn't working, it 
could be a bug.


[1] 
http://wiki.ovirt.org/develop/release-management/features/virt/blank-to-defaults/


Oh, now I see. Indeed, I was able to see the template in the side 
'Template' tab, but unable to see it when deploying a machine. I 
realized that for some reason the Blank template missed the 
UserTemplateBasedVm permission (most probably someone accidentally 
deleted it), so I added it back and now I can see it.


Thanks very much for the insight.

Regards,

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How to create a DataCenterQuota via Python SDK?

[Nicolás]

El 19/02/16 a las 13:56, nico...@devels.es escribió:

Hi,

I'm trying to create a Data Center Quota with limits for memory, vcpu 
and storage. As per the class definition, DataCenterQuota expects: a 
datacenter, a quota and a context. Quota class in turn expects limits 
but only as percentages, for hard and soft limits.


However if I dump an already created DataCenterQuota object I see:

{'_Base__context': 36443152,
 'parentclass': ,
 'permissions': 
0x278ef90>,
 'quotaclusterlimits': 
object at 0x2540490>,
 'quotastoragelimits': 
object at 0x278ef50>,

 'superclass': }

I see DataCenterQuotaQuotaClusterLimits and 
DataCenterQuotaQuotaStorageLimits allow creating limits for memory/cpu 
and storage respectively, and they're set in the DataCenterQuota 
__init__ method like this:


  self.quotaclusterlimits = DataCenterQuotaQuotaClusterLimits(self, 
context)
  self.quotastoragelimits = DataCenterQuotaQuotaStorageLimits(self, 
context)


However, I'm unable to find out how to handle the 'context' parameter 
to contain those two limit classes.


Could someone shed some light on it? An example would be welcome too.

Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


I found a way, not sure if it's the best way to go though (probably 
not), but works.


dc=api.datacenters.get(name='DC')
q = params.Quota(name='Python-SDK', description='Python-SDK', 
data_center=dc, cluster_soft_limit_pct=80, cluster_hard_limit_pct=20, 
storage_soft_limit_pct=80, storage_hard_limit_pct=20)

dc.quotas.add(q)

z = dc.quotas.get(name='Python-SDK')
qcl = params.QuotaClusterLimit(vcpu_limit=20, memory_limit=1)
z.quotaclusterlimits.add(qcl)
qsl = params.QuotaStorageLimit(limit=500)
z.quotastoragelimits.add(qsl)

Regards.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Storage migration: Preallocation forced on destination

[Nicolás]

Hi,

We're migrating an existing storage (glusterfs) to a new one (iSCSI). 
All disks on glusterfs are thin provisioned, but when migrating to iSCSI 
the following warning is shown:


The following disks will become preallocated, and may consume 
considerably more space on the target: local-disk


Why is that? Is there a way to migrate disks so they are thin 
provisioned on iSCSI as well?


Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Storage migration: Preallocation forced on destination

[Nicolás]

El 04/03/16 a las 20:23, Nir Soffer escribió:

On Fri, Mar 4, 2016 at 7:07 PM, Nicolás  wrote:

Hi,

We're migrating an existing storage (glusterfs) to a new one (iSCSI). All
disks on glusterfs are thin provisioned, but when migrating to iSCSI the
following warning is shown:

 The following disks will become preallocated, and may consume
considerably more space on the target: local-disk

Why is that? Is there a way to migrate disks so they are thin provisioned on
iSCSI as well?

The issue is that we use raw sparse format for thin provisioned disks
on file based
storage. The file system provides the thin provisioning, maintaining holes in
the files.

When we create the destination lv, we use the disk virtual size, so you get
practically a preallocated volume.

I think we can do better - before copying the disk, we can check the actual used
space (e.g. what qemu-img info or stat report), and create the
destination lv using
the used size (plus additional space for qcow format).

I tested this by extending the destination lv manually and then
copying data manually
using qemu-img convert, and it works.

Can you file a bug for this, and explain the use case?

Nir


Done, for the ones interested on it: 
https://bugzilla.redhat.com/show_bug.cgi?id=1314959


Thanks.

Regards.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Storage migration: Preallocation forced on destination

[Nicolás]

If instead of copying on step 1 the disk has been moved, any chance to adapt 
this workaround so the disk is thin provisioned on the target? We moved some 
machines before knowing this and unfortunately once moved to iSCSI the disk is 
preallocated, so moving it back won't do the trick.

Otherwise the workaround works perfectly.

Thanks.

 Mensaje original 
De: Nir Soffer  
Fecha:04/03/2016  23:23  (GMT+00:00) 
Para: Pavel Gashev  
Cc: Nicolás ,amureini ,users@ovirt.org 
Asunto: Re: [ovirt-users] Storage migration: Preallocation forced on 
destination 

On Sat, Mar 5, 2016 at 12:19 AM, Pavel Gashev  wrote:
> I think it's hard to calculate the additional space for cow format without 
> analysing raw image. It's better to allocate enough space, and then decrease 
> it after qemu-img convert.

We use 10% as a rough estimate for additional space when converting
from raw to qcow format. Sure it will waste some space, but it is good
enough.

How to you plan to check the used size on the destination lv?

> Please note that while disk moving keeps disk format, disk copying changes 
> format. So when you copy a thin provisioned disk to iSCSI storage it's being 
> converted to cow. The issue is that size of converted lv still looks like 
> preallocated. You can decrease it manually via lvchange, or you can move it 
> to a file based storage and back. Moving disks keeps disk format, but fixes 
> its size.

Yes, this seems to be the way to work around this issue currently:
1. Copy to the disk to block storage - will convert it to qcow format
on preallocated lv
2. Move disk from block storage to file storage
3. Move disk back to block storage

> Also please consider qcow compat=1.1 as default disk format both for file and 
> block storages.

This will make your disk incompatible with old ovirt versions on el6.
In storage domain format v3
we are using comapt=0.10.

We plan to move to compat=1.1 in 4.0.

>
>
>
> On 04/03/16 23:23, "users-boun...@ovirt.org on behalf of Nir Soffer" 
>  wrote:
>
>>On Fri, Mar 4, 2016 at 7:07 PM, Nicolás  wrote:
>>> Hi,
>>>
>>> We're migrating an existing storage (glusterfs) to a new one (iSCSI). All
>>> disks on glusterfs are thin provisioned, but when migrating to iSCSI the
>>> following warning is shown:
>>>
>>> The following disks will become preallocated, and may consume
>>> considerably more space on the target: local-disk
>>>
>>> Why is that? Is there a way to migrate disks so they are thin provisioned on
>>> iSCSI as well?
>>
>>The issue is that we use raw sparse format for thin provisioned disks
>>on file based
>>storage. The file system provides the thin provisioning, maintaining holes in
>>the files.
>>
>>When we create the destination lv, we use the disk virtual size, so you get
>>practically a preallocated volume.
>>
>>I think we can do better - before copying the disk, we can check the actual 
>>used
>>space (e.g. what qemu-img info or stat report), and create the
>>destination lv using
>>the used size (plus additional space for qcow format).
>>
>>I tested this by extending the destination lv manually and then
>>copying data manually
>>using qemu-img convert, and it works.
>>
>>Can you file a bug for this, and explain the use case?
>>
>>Nir
>>___
>>Users mailing list
>>Users@ovirt.org
>>http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Unable to use the SPICE HTML5 tool

[Nicolás]

Hi,

I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes 
everything is working fine, except that I can't start the SPICE HTML5 
tool for any of the installed machines I have.


I've installed the oVirt guest agent on the VM side, websocket-proxy is 
running and port 6100 is listening on the engine box:


   # systemctl status ovirt-websocket-proxy
   ovirt-websocket-proxy.service - oVirt Engine websockets proxy
   Loaded: loaded
   (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
   Active: active (running)

   # netstat -atpn | grep 6100
   tcp0  0 0.0.0.0:6100 0.0.0.0:*   LISTEN 
   7227/python


Also, I imported the CA cert (https://fqdn/ca.crt) on the browser. 
However, once I run the SPICE HTML5 client from the userportal, all I 
get is an empty grey square with the two "Send ctrl+alt+delete" and 
"Toggle messages output" buttons at the bottom. Nothing in the logs 
about this issue. I tried to run it both with Chromium and Firefox on a 
linux box.


Is there anything that I am missing? I've run out of ideas...

Thanks.

Nicolás


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Adding a new quota via the ovirt-shell

[Nicolás]

I can't find out how to do the same with the Python SDK, either. There 
seems to be a 'Quota' object amongst the params, but it doesn't seem to 
have defined the CPU, memory and disk tresholds parameters. It seems 
quite confusing to me, AFAIK a Quota object should be assigned to a 
Datacenter, so I don't know how the Quota object should be built 
specifying those parameters.


Any help with either the CLI or the SDK will be appreciated :-)

Thanks.

El 18/06/15 a las 14:49, nico...@devels.es escribió:

Hi,

Is it currently possible to define a new resource quota (CPU, memory, 
storage...) via the ovirt-shell (CLI) in oVirt 3.5.3? I have listed 
all the available commands but I can't find it under any of them.


Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Adding a new quota via the ovirt-shell

[Nicolás]

Hi,

Since this is not yet implemented, I was wondering whether adding quotas 
could be accomplished via purely raw SQL sentences.


I've done a database dump before and after creating a quota in the oVirt 
manager and I could see the following changes:


1) An insertion into table 'quota'
2) An insertion into table 'quota_limitation' with field quota_id as a 
foreign key to the ID of the above row

3) For consumer permissions: a row per user into table 'permissions'

Would that suffice in terms of engine consistency to reproduce a quota 
creation via the oVirt Manager?


Thanks.

Nicolás

El 18/06/15 a las 19:54, Ondra Machacek escribió:

Hi,

cli/sdks are built on top of REST API, but there is no support for 
quota in 3.5 in REST API.

But see[1], should be supported in 3.6.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=893927

On 06/18/2015 03:49 PM, nico...@devels.es wrote:

Hi,

Is it currently possible to define a new resource quota (CPU, memory, 
storage...) via the ovirt-shell (CLI) in oVirt 3.5.3? I have listed 
all the available commands but I can't find it under any of them.


Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Python-SDK: ovirtsdk4.Connection object autologout?

[Nicolás]

Hi Ravi,

Thanks for the info. As I see there is a patch already I'll patch our instance tomorrow and run the script to see how it behaves. I'll comment the BZ with the result.

Regards.

En 22/3/2017 4:06 p. m., Ravi Nori  escribió:Hi Nicolás,There has been some changes to how a session is refreshed after 4.0. So this is a BZ and is being tracked by BZ 1434605.Will post a patch to fix this. Thanks for reporting the issue.RaviOn Wed, Mar 22, 2017 at 9:10 AM,  <nico...@devels.es> wrote:Hi Juan,

I confirm this was working with 4.0.6 (but the same SDK package). The script is relatively new but I'm 100% sure it has been in execution for several weeks, in contrast to current version where after 5-6 iterations the exception starts showing up.

I've voted for the bug and added myself as CC.

Thank you.

Regards,

Nicolás

El 2017-03-22 12:58, Juan Hernández escribió:

On 03/22/2017 01:50 PM, Juan Hernández wrote:

On 03/22/2017 01:10 PM, nico...@devels.es wrote:

Hi,

We've recently upgraded from oVirt 4.0.x to 4.1.0 and it seems that the
behavior of a script we wrote in Python-SDK has changed slightly. We
have a script that needs to be executed forever (daemon mode). This
daemon creates an ovirtsdk4.Connection object and uses the same
Connection object all the time.

conn = sdk.Connection(
  url="">
  username=USERNAME,
  password=PASSWORD,
  ca_file=CAFILE
)

Between iterations we have ~5 minutes delays which we accomplish with a
time.sleep(...) call.

After some of these iterations (5 or 6), when trying to perform an
operation on the Connection object (in this case, listing all SDs):

    try:
        sys_serv = conn.system_service()
        sd_serv = sys_serv.storage_domains_service()
        storages = sd_serv.list(search=sd_search_query)
    except Error, e:
        log('ERR: Error getting storage domains: %s' % (e))

We start getting exceptions (i.e., the sd_serv.list() call throwing an
Error exception) with this message:

    ERR: Error getting storage domains: HTTP response code is 401.

I believe this has something to do with the Connection object expiring
(even if it's not idle more than 5 minutes at any time). Is there a way
to "refresh" the Connection object so it doesn't auto-logout (assuming
this is the actual problem)?

As I said, this started happening as of oVirt 4.1.0.
ovirt-engine-sdk-python version is 4.1.1.

Any ideas?



This sound like this bug, opened yesterday:

  SSO token used for the API expires when running only queries
  https://bugzilla.redhat.com/1434605

But I thought the same happened in 4.0. Can you confirm that you don't
see this problem in 4.0?

Open possible workaround is to force a refresh of the backend session
sending an external event, like in this example:


https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L112-L131

I also think that we need to modify the SDKs so that they detect expired
SSO tokens and renew them automatically. I will open another bug for that.



Here is the bug for adding automatic SSO token renew to the SDK, in case
you want to follow/vote it:

  Implement automatic SSO token renew
  https://bugzilla.redhat.com/1434830

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] VM "hot" RAM memory decrease

[Nicolás]

Hi,

I don't really know if this question is suitable on this list, as I 
doubt it's an oVirt bug, neither I know if it shall be considered a bug.


We recently run a VM on a host that was memory over-used (around 80% of 
usage). The VM booted correctly, then we run "top" and saw how physical 
RAM started decreasing every two seconds. At first it was 4GB, then less 
and less until it stabilized at around 600MB.


Based on this (correct me if I'm wrong), we believe this is an effect of 
having this VM with ballooning enabled, as it does exactly this: It 
adds/removes RAM depending on host decision. Thing is that this VM had a 
minimal guaranteed RAM of 1GB, so even if this happened due to 
ballooning, I'm not sure if it should have honored the minimum 
guaranteed RAM.


When this happened, we run a 'ps' to see with what options the qemu 
process was invoked, and parameters seemed correct (that's why I don't 
know if it should be posted here or even if it's a bug).


Is this the expected behavior?

Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ETL service sampling has encountered an error. Please consult the service log for more details.

[Nicolás]

Any ideas on this?

Thanks.

El 20/04/17 a las 12:12, nico...@devels.es escribió:

Hi,

We're using oVirt 4.1.1.8 (upgraded yesterday) and since it has been 
showing some strange errors I'd like to know about:


ETL service sampling has encountered an error. Please consult the 
service log for more details.


I'm attaching the engine log FWIW. This message showed up at 11:07:04 
but in the log I see the exceptions started 1 minute ago.


Also, at 11:07:58 this event showed up:

Engine server is not responding.

And at 11:12:58 it seems to recover:

Engine server is up and running.

At 12:00:00 this message showed up:

ETL service aggregation to hourly tables has encountered an error. 
Please consult the service log for more details.


But relative to this one I see nothing in logs.

Could someone clarify what these error messages mean?

Thanks.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM Portal looking for translators

[Nicolás]

Hi,

Why do I see a red lock on the translation page claiming "This 
project-version is readonly. It cannot be edited"? Do I have to be 
granted access specifically on the language site to translate?


(Not sure if related: Requested access to some language groups like 
described in [3], but it's still pending).


Thanks.

Nicolás

El 14/08/17 a las 19:37, Jakub Niedermertl escribió:

Hi all,

new VM Portal project [1] - a replacement of oVirt userportal -  is 
looking for community translators. If you know any of


* Chinese (Simplified)
* French
* German
* Italian
* Japanese
* Korean
* Portuguese
* Russian
* Spanish

and want to join translation effort, please

* sign up to Zanata translation environment [2]
* request an access to language group of your choice [3]
* and join us at [4]

Thank you

Regards
Jakub

[1]: https://github.com/oVirt/ovirt-web-ui
[2]: https://translate.zanata.org
[3]: https://translate.zanata.org/language/list
[4]: 
https://translate.zanata.org/iteration/view/ovirt-web-ui/1.2.0/languages



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] 100% memory usage on desktop environments

[Nicolás]

Hi,

Probably not an oVirt issue, but maybe someone can help. I've deployed a 
pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage). 
Each time I install an additional desktop environment (Gnome, KDE, 
whatever...), CPU usage rises to 100% all time to the extreme that 
interacting with the machine becomes impossible (maybe a mouse movement 
is propagated 3 minutes later or so...).


To debug this, I installed LXDE, which is a lightweight desktop 
environment based on Xorg. I could see there is an Xorg process 
consuming one of the CPUs and the machine stops responding as far as the 
desktop environment goes. I have not changed anything in the 
configuration file.


I could also see this only happens when QXL is chosen as the display 
driver. When CIRRUS is chosen, everything works smoothly and CPU is 
~100% idle. The downside is that we want to use SPICE and CIRRUS won't 
allow it.


Why does this happen? Is this an OS-side driver issue? Any hint how can 
it be fixed?


Thanks.

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] 100% memory usage on desktop environments

[Nicolás]

Hi Karli,

El 18/05/16 a las 16:59, Karli Sjöberg escribió:



Den 18 maj 2016 5:49 em skrev Nicolás :
>
> Hi,
>
> Probably not an oVirt issue, but maybe someone can help. I've 
deployed a

> pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage).

Just spitballing here: 14.04 only? Tried 16.04, or any other OS for 
that matter? For now, it sounds more guest related rather than oVirt.


/K



I tried a vanilla centos-7.1 as well and the same happens. I'm of the 
same opinion that this is more a guest related issue, it's just I'd like 
to find out why this only happens with QXL and not with CIRRUS.


Thanks.


> Each time I install an additional desktop environment (Gnome, KDE,
> whatever...), CPU usage rises to 100% all time to the extreme that
> interacting with the machine becomes impossible (maybe a mouse movement
> is propagated 3 minutes later or so...).
>
> To debug this, I installed LXDE, which is a lightweight desktop
> environment based on Xorg. I could see there is an Xorg process
> consuming one of the CPUs and the machine stops responding as far as 
the

> desktop environment goes. I have not changed anything in the
> configuration file.
>
> I could also see this only happens when QXL is chosen as the display
> driver. When CIRRUS is chosen, everything works smoothly and CPU is
> ~100% idle. The downside is that we want to use SPICE and CIRRUS won't
> allow it.
>
> Why does this happen? Is this an OS-side driver issue? Any hint how can
> it be fixed?
>
> Thanks.
>
> Nicolás
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] 100% memory usage on desktop environments

[Nicolás]

El 18/05/16 a las 18:11, Karli Sjöberg escribió:



Den 18 maj 2016 7:03 em skrev Nicolás :
>
> Hi Karli,
>
> El 18/05/16 a las 16:59, Karli Sjöberg escribió:
>>
>>
>> Den 18 maj 2016 5:49 em skrev Nicolás :
>> >
>> > Hi,
>> >
>> > Probably not an oVirt issue, but maybe someone can help. I've 
deployed a

>> > pretty basic VM (ubuntu 14.04 server, 4GB RAM, 4 CPUs, 15GB storage).
>>
>> Just spitballing here: 14.04 only? Tried 16.04, or any other OS for 
that matter? For now, it sounds more guest related rather than oVirt.

>>
>> /K
>
>
> I tried a vanilla centos-7.1 as well and the same happens. I'm of 
the same opinion that this is more a guest related issue, it's just 
I'd like to find out why this only happens with QXL and not with CIRRUS.

>
> Thanks.

Very interesting. Are your hosts all of the same architecture(family)?

/K



Actually we have a nice mixture of manufacturers. We run 7 hosts, paired 
4-2-1 in relation to architecture. All of them have the same resources, 
though (CPUs + RAM). In this case, I can't test the VM on different 
hosts because we've separated one of them (one of the "4") on a 
standalone oVirt datacenter as we're making tests on it, but I remember 
this has already happened to me in the past (I didn't have the time to 
debug it at that time, though).



>
>> > Each time I install an additional desktop environment (Gnome, KDE,
>> > whatever...), CPU usage rises to 100% all time to the extreme that
>> > interacting with the machine becomes impossible (maybe a mouse 
movement

>> > is propagated 3 minutes later or so...).
>> >
>> > To debug this, I installed LXDE, which is a lightweight desktop
>> > environment based on Xorg. I could see there is an Xorg process
>> > consuming one of the CPUs and the machine stops responding as far 
as the

>> > desktop environment goes. I have not changed anything in the
>> > configuration file.
>> >
>> > I could also see this only happens when QXL is chosen as the display
>> > driver. When CIRRUS is chosen, everything works smoothly and CPU is
>> > ~100% idle. The downside is that we want to use SPICE and CIRRUS 
won't

>> > allow it.
>> >
>> > Why does this happen? Is this an OS-side driver issue? Any hint 
how can

>> > it be fixed?
>> >
>> > Thanks.
>> >
>> > Nicolás
>> > ___
>> > Users mailing list
>> > Users@ovirt.org
>> > http://lists.ovirt.org/mailman/listinfo/users
>
>



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Snapshot deletion failure

[Nicolás]

Done, you can find it in [1]. Feel free to add/modify anything you 
consider inaccurate.


Thank you.

 [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1349950

El 24/06/16 a las 12:39, Nir Soffer escribió:

On Fri, Jun 24, 2016 at 11:39 AM, Vinzenz Feenstra  wrote:

On Jun 24, 2016, at 9:10 AM, nico...@devels.es wrote:

Hi,

We're trying to delete an auto-generated live snapshot that has been created 
after migrating an online VM's storage to a different domain. oVirt version is 
3.6.6 and VDSM version is 4.17.28. Most relevant log lines are:

2016-06-24 07:50:36,252 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) 
[799a22e3] Failed in 'MergeVDS' method
2016-06-24 07:50:36,256 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(pool-7-thread-10) [799a22e3] Correlation ID: null, Call Stack: null, Custom 
Event ID: -1, Message: VDSM host2.domain.com command failed: Merge failed
2016-06-24 07:50:36,256 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.MergeVDSCommand] (pool-7-thread-10) 
[799a22e3] Command 'MergeVDSCommand(HostName = host2.domain.com, 
MergeVDSCommandParameters:{runAsync='true', 
hostId='c31dca1a-e5bc-43f6-940f-6397e3ddbee4', 
vmId='7083832a-a1a2-42b7-961f-2e9c0dcd7e18', 
storagePoolId='fa155d43-4e68-486f-9f9d-ae3e3916cc4f', 
storageDomainId='9339780c-3667-4fef-aa13-9bec08957c5f', 
imageGroupId='65a0b0d4-5c96-4dd9-a31b-4d08e40a46a5', 
imageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', 
baseImageId='568b2f77-0ddf-4349-a45c-36fcb0edecb6', 
topImageId='9eec9e8f-38db-4abf-b1c4-92fa9383f8b1', bandwidth='0'})' execution 
failed: VDSGenericException: VDSErrorException: Failed to MergeVDS, error = 
Merge failed, code = 52
2016-06-24 07:50:36,256 ERROR [org.ovirt.engine.core.bll.MergeCommand] 
(pool-7-thread-10) [799a22e3] Engine exception thrown while sending merge 
command: org.ovirt.engine.core.common.errors.EngineException: EngineException: 
org.ovirt.engine.core.vdsbroker.vdsbroker.VDSErrorException: 
VDSGenericException: VDSErrorException: Failed to MergeVDS, error = Merge 
failed, code = 52 (Failed with error mergeErr and code 52)

I'm attaching relevant logs (both for ovirt-engine and SPM's vdsm).

What could be the reason for this error?

@Nir,

that looks like some issue in VDSM please have a look

jsonrpc.Executor/3::ERROR::2016-06-24 07:50:36,216::vm::4955::virt.vm::(merge) 
vmId=`7083832a-a1a2-42b7-961f-2e9c0dcd7e18`::Live merge failed (job: 
3ea68e36-6d99-4af9-a54e-4c5b06df6a0f)
Traceback (most recent call last):
   File "/usr/share/vdsm/virt/vm.py", line 4951, in merge
 flags)
   File "/usr/share/vdsm/virt/virdomain.py", line 68, in f
 ret = attr(*args, **kwargs)
   File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 124, 
in wrapper
 ret = f(*args, **kwargs)
   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1313, in wrapper
 return func(inst, *args, **kwargs)
   File "/usr/lib64/python2.7/site-packages/libvirt.py", line 668, in 
blockCommit
 if ret == -1: raise libvirtError ('virDomainBlockCommit() failed', 
dom=self)
libvirtError: block copy still active: disk 'vda' already in active block job

This means there was a previous attempt to merge, and the block job
did not complete yet.

Engine should detect that there is an active block job and wait until
it completes.

This is probably engine bug, please file a bug and attach complete vdsm and
engine logs.

Ala, can you look at this?

Nir


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt and Ceph

[Nicolás]

Hi,

We're using Ceph along with an iSCSI gateway, so our storage domain is actually an iSCSI backend. So far, we have had zero issues with cca. 50 high IO rated VMs. Perhaps [1] might shed some light on how to set it up.

Regards.

[1]: https://www.suse.com/documentation/ses-2/book_storage_admin/data/cha_ceph_iscsi.htmlEn 24/6/2016 9:28 p. m., Charles Gomes  escribió:



Hello
 
I’ve been reading lots of material about implementing oVirt with Ceph, however all talk about using Cinder.

Is there a way to get oVirt with Ceph without having to implement entire Openstack ?

I’m already currently using Foreman to deploy Ceph and KVM nodes, trying to minimize the amount of moving parts. I heard something about oVirt providing a managed Cinder appliance, have any seen this ?
 



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt and Ceph

[Nicolás]

Hi Nir,

El 25/06/16 a las 22:57, Nir Soffer escribió:

On Sat, Jun 25, 2016 at 11:47 PM, Nicolás  wrote:

Hi,

We're using Ceph along with an iSCSI gateway, so our storage domain is
actually an iSCSI backend. So far, we have had zero issues with cca. 50 high
IO rated VMs. Perhaps [1] might shed some light on how to set it up.

Can you share more details on this setup and how you integrate with ovirt?

For example, are you using ceph luns in regular iscsi storage domain, or
attaching luns directly to vms?


Fernando Frediani (responding to this thread) hit the nail on the head. 
Actually we have a 3-node Ceph infrastructure, so we created a few 
volumes on the Ceph nodes side (RBD) and then exported them to iSCSI, so 
it's oVirt who creates the LVs on the top, this way we don't need to 
attach luns directly.


Once the volumes are exported on the iSCSI side, adding an iSCSI domain 
on oVirt is enough to make the whole thing work.


As for experience, we have done a few tests and so far we've had zero 
issues:


 * The main bottleneck is the iSCSI gateway interface bandwith. In our
   case we have a balance-alb bond over two 1G network interfaces.
   Later we realized this kind of bonding is useless because MAC
   addresses won't change, so in practice only 1G will be used at most.
   Making some heavy tests (i.e., powering on 50 VMs at a time) we've
   reached this threshold at specific points but it didn't affect
   performance significantly.
 * Doing some additional heavy tests (powering on and off all VMs at a
   time), we've reached the maximum value of cca. 1200 IOPS at a time.
   In normal conditions we don't surpass 200 IOPS, even when these 50
   VMs do lots of disk operations.
 * We've also done some tolerance tests, like removing one or more
   disks from a Ceph node, reinserting them, suddenly shut down one
   node, restoring it... The only problem we've experienced is a slower
   access to the iSCSI backend, which results in a message in the oVirt
   manager warning about this: something like "Storage is taking to
   long to respond...", which was maybe 15-20 seconds. We got no VM
   pauses at any time, though, nor any significant issue.


Did you try our dedicated cinder/ceph support and compared it with ceph
iscsi gateway?


Not actually, in order to avoid deploying Cinder we directly implemented 
the gateway as it looked easier to us.



Nir


Hope this helps.

Regards.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages

[Nicolás]

Hi Martin,

Actually, up until now we had that cert configured in httpd and in websocket proxy. Seems that now in 4.0.x it's not enough, as opening the https://fqdn complains about the cert not being imported in the key chain. So I imported it via keytool, but I don't want to use it in the engine <-> VDSM communication.

Thanks!En 20/7/2016 2:48 p. m., Martin Perina  escribió:Hi,sorry for late response, I overlook your reply :-(​I looked at your logs and it seems to me that​ there's SSL error when engine tries to contact VDSM.​You have mentioned that your are using your own custom CA. ​Are you using it only for HTTPS certificate or do you want to use it also for Engine <-> VDSM communication?​Martin Perina On Wed, Jul 20, 2016 at 9:18 AM,   wrote:Any hints about this?

El 2016-07-13 11:13, nico...@devels.es escribió:

Hi,

Unfortunately, upgrading to 4.0.1RC didn't solve the problem.
Actually, the error changed to 'General SSLEngine problem', but the
result was the same, like this:

2016-07-13 09:52:22,010 INFO
[org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp
Reactor) [] Connecting to /10.X.X.X
2016-07-13 09:52:22,018 ERROR
[org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor)
[] Unable to process messages: General SSLEngine problem

It's worth mentioning that we're using our own SSL certificates (not
self-signed), and I imported the combined certificate into the
/etc/pki/ovirt-engine/.truststore key file. Not sure if related, but
just in case.

I had to downgrade to 3.6.7. I'm attaching requested logs, if you need
anything else don't hesitate to ask.

Regards.

El 2016-07-13 09:45, Martin Perina escribió:

Hi,

could you please share also vdsm.log from your hosts and also
server.log and setup logs from /var/log/ovirt-engine/setup directory?

Thanks

Martin Perina

On Wed, Jul 13, 2016 at 10:36 AM,  wrote:


Hi,

We upgraded from 3.6.6 to 4.0.0 and we have a big issue since the
engine cannot connect to hosts. In the logs all we see is this
error:

    ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL
Stomp Reactor) [] Unable to process messages

I'm attaching full logs.

Could someone help please?

Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users [1]




Links:
--
[1] http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) [] Unable to process messages

[Nicolás]

El 20/07/16 a las 16:45, Martin Perina escribió:



On Wed, Jul 20, 2016 at 4:44 PM, Nicolás <mailto:nico...@devels.es>> wrote:


Hi Martin,

Actually, up until now we had that cert configured in httpd and in
websocket proxy. Seems that now in 4.0.x it's not enough, as
opening the https://fqdn complains about the cert not being
imported in the key chain.


​Yes, there's an updated procedure on using external CA in 4.0, for 
details please take a look at Doc Text in


https://bugzilla.redhat.com/show_bug.cgi?id=1336838
​

So I imported it via keytool, but I don't want to use it in the
engine <-> VDSM communication.


​Hmm, so that would imply that we have some issue with existing 
internal enigne CA during upgrade ...
The strange thing is that we test upgrades a lot but so far we haven't 
seen any issues which will broke
SSL setup between engine and VDSM. You said that you had to downgrade 
back to 3.6.7 (so unfortunately for us we cannot investigate your 
nonworking setup more), but how did you do that?
Removing all engine packages and configuration​, installing back 3.6.7 
packaging and restoring configuration form backup?
I'm asking to know what changed in your setup between not working 4.0 
and working 3.6.7 ...




Indeed, those are the steps I followed to the point.

To add more strangeness, previously to upgrading this oVirt 
infrastructure, we upgraded another one that we have (also using own 
cert, a different one but from the same CA) and everything went 
smoothly. And what's more, previously to upgrading the engine that 
failed, I created a copy of that engine machine in a sandbox environment 
to see if upgrade process would or not success, and it worked perfectly.


The only difference between the sandbox and the real machine's process 
was that when upgrading the real one, the first time I run 
"engine-setup" it failed because 'systemd' reported PostgreSQL as it was 
not running (actually it was, thougg), so everything rolled back. I had 
to kill the PostgreSQL process, start it again with systemctl and then 
run "engine-setup", where the process completed successfully but the SSL 
issue appeared. Not sure if this rollback could have shattered the whole 
thing...


Anyhow, tomorrow I'm going to create another copy of the engine machine 
to a sandbox environment and try again. If it works I'll cross my 
fingers and give another try on the real machine...


Thanks!


Thanks

Martin


Thanks!
En 20/7/2016 2:48 p. m., Martin Perina mailto:mper...@redhat.com>> escribió:

Hi,

sorry for late response, I overlook your reply :-(

​I looked at your logs and it seems to me that​ there's SSL
error when engine tries to contact VDSM.
​You have mentioned that your are using your own custom CA.
​Are you using it only for HTTPS certificate or do you want to
use it also for Engine <-> VDSM communication?
​
Martin Perina


On Wed, Jul 20, 2016 at 9:18 AM, mailto:nico...@devels.es>> wrote:

Any hints about this?

El 2016-07-13 11:13, nico...@devels.es
<mailto:nico...@devels.es> escribió:

Hi,

Unfortunately, upgrading to 4.0.1RC didn't solve the
problem.
Actually, the error changed to 'General SSLEngine
problem', but the
result was the same, like this:

2016-07-13 09:52:22,010 INFO
[org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient]
(SSL Stomp
Reactor) [] Connecting to /10.X.X.X
2016-07-13 09:52:22,018 ERROR
[org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL
Stomp Reactor)
[] Unable to process messages: General SSLEngine problem

It's worth mentioning that we're using our own SSL
certificates (not
self-signed), and I imported the combined certificate
into the
/etc/pki/ovirt-engine/.truststore key file. Not sure
if related, but
just in case.


I had to downgrade to 3.6.7. I'm attaching requested
logs, if you need
anything else don't hesitate to ask.

Regards.

El 2016-07-13 09:45, Martin Perina escribió:

Hi,

could you please share also vdsm.log from your
hosts and also
server.log and setup logs from
/var/log/ovirt-engine/setup directory?

Thanks

Martin Perina

On Wed, Jul 13, 2016 at 10:36 AM,
mailto:nico...@devels.e

[ovirt-users] Migrate machines in unknown state?

[Nicolás]

Hi,

We're running oVirt 4.0.1 and today I found out that one of our hosts 
has all its VMs in an unknown state. I actually don't know how (and 
when) did this happen, but I'd like to restore service possibly without 
turning off these machines. The host is up, the VMs are up, 'qemu' 
process exists, no errors, it's just the VMs running on it that have a 
'?' where status is defined.


Is it safe in this case to simply modify database and set those VM's 
status to 'up'? I remember having to do this a time ago when we faced 
storage issues, it didn't break anything back then. If not, is there a 
"safe" way to migrate those VMs to a different host and restart the host 
that marked them as unknown?


Thanks.

Nicolás

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate machines in unknown state?

[Nicolás]

El 04/08/16 a las 07:18, Arik Hadas escribió:

- Original Message -

Hi,

We're running oVirt 4.0.1 and today I found out that one of our hosts
has all its VMs in an unknown state. I actually don't know how (and
when) did this happen, but I'd like to restore service possibly without
turning off these machines. The host is up, the VMs are up, 'qemu'
process exists, no errors, it's just the VMs running on it that have a
'?' where status is defined.

Is it safe in this case to simply modify database and set those VM's
status to 'up'? I remember having to do this a time ago when we faced
storage issues, it didn't break anything back then. If not, is there a
"safe" way to migrate those VMs to a different host and restart the host
that marked them as unknown?

Hi Nicolás,

I assume that the host these VMs are running on is empty in the webadmin,
right? if that is the case then you've probably hit [1]. Changing their
status to up is not the way to go since these VMs will not be monitored.


Hi Arik,

By "empty" you mean the webadmin reports the host being running 0 VMs? 
If so, that's not the case, actually the VM count seems to be correct in 
relation to "qemu-*" processes (about 32 VMs), I can even see the 
machines in the "Virtual machines" tab of the host, it's just they are 
all marked with the '?' mark.


Thanks.


Yes, there is no other way to resolve it other than changing the DB but
the change should be to update run_on_vds field of these VMs to the host
you know they are running on. Their status will then be updates in 15 sec.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1354494

Arik.


Thanks.

Nicolás

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate machines in unknown state?

[Nicolás]

El 04/08/16 a las 15:25, Arik Hadas escribió:


- Original Message -

El 2016-08-04 08:24, Arik Hadas escribió:

- Original Message -


El 04/08/16 a las 07:18, Arik Hadas escribió:

- Original Message -

Hi,

We're running oVirt 4.0.1 and today I found out that one of our hosts
has all its VMs in an unknown state. I actually don't know how (and
when) did this happen, but I'd like to restore service possibly without
turning off these machines. The host is up, the VMs are up, 'qemu'
process exists, no errors, it's just the VMs running on it that have a
'?' where status is defined.

Is it safe in this case to simply modify database and set those VM's
status to 'up'? I remember having to do this a time ago when we faced
storage issues, it didn't break anything back then. If not, is there a
"safe" way to migrate those VMs to a different host and restart the
host
that marked them as unknown?

Hi Nicolás,

I assume that the host these VMs are running on is empty in the
webadmin,
right? if that is the case then you've probably hit [1]. Changing their
status to up is not the way to go since these VMs will not be monitored.

Hi Arik,

By "empty" you mean the webadmin reports the host being running 0 VMs?
If so, that's not the case, actually the VM count seems to be correct
in
relation to "qemu-*" processes (about 32 VMs), I can even see the
machines in the "Virtual machines" tab of the host, it's just they are
all marked with the '?' mark.

No, I meant the 'Host' column in the Virtual Machines tab but if you
see
the VMs in the "Virtual machines" sub-tab of the host then run_on_vds
points to the right host..

The host is up in the webadmin as well?
Can you share the engine log?


Yes, the host is up in the webadmin, there are no issues with it, just
the VMs running on it have the '?' mark. I've made 3 tests:

1) Restart engine: did not help
2) Check firewall, seems to be ok.
2) PostgreSQL: UPDATE vm_dynamic SET status = 1 WHERE status = 8; :
After a while, I see lots of entries like this:

  2016-08-04 09:23:10,910 WARN
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler4) [6ad135b8] Correlation ID: null, Call Stack:
null, Custom Event ID: -1, Message: VM xxx is not responding.

I'm attaching the engine log, but I don't know when did this happen for
the first time, though. If there's a manual way/command to migrate VMs
to a different host I'd appreciate a hint about it.

Is it safe to restart vdsmd on this host?

The engine log looks fine - the VMs are reported as not-responding for
some reason. I would restart libvirtd and vdsmd then


Is restarting those two daemons safe? I mean, will that stop all qemu-* 
processes, so the VMs marked as unknown will stop?



Thanks.


Thanks.


Yes, there is no other way to resolve it other than changing the DB but
the change should be to update run_on_vds field of these VMs to the host
you know they are running on. Their status will then be updates in 15
sec.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1354494

Arik.


Thanks.

Nicolás

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Migrate machines in unknown state?

[Nicolás]

Hi,

It worked (thanks Ekin, I'd probably had not turned it off and it would 
indeed been restarted), restarting libvirtd and vdsmd made all machines 
set their status to up. Seems the cuprit is libvirtd in this case, as I 
could see some errors in the log. I'm attaching the log FWIW.


Thanks.

El 07/08/16 a las 19:37, Ekin Meroğlu escribió:

Hi,

Just a reminder, if you have power management configured, first turn 
that off for the host - when you restart vdsmd with the power 
management configured, engine finds it not responding and tries to 
fence (e.g. reboot) the host.


Other than that, restarting vdsmd has been safe in my experience...

Regards,

On Thu, Aug 4, 2016 at 6:10 PM, Nicolás <mailto:nico...@devels.es>> wrote:




El 04/08/16 a las 15:25, Arik Hadas escribió:


- Original Message -

El 2016-08-04 08:24, Arik Hadas escribió:

- Original Message -


El 04/08/16 a las 07:18, Arik Hadas escribió:

- Original Message -

Hi,

We're running oVirt 4.0.1 and today I
found out that one of our hosts
has all its VMs in an unknown state. I
actually don't know how (and
when) did this happen, but I'd like to
restore service possibly without
turning off these machines. The host is
up, the VMs are up, 'qemu'
process exists, no errors, it's just the
VMs running on it that have a
'?' where status is defined.

Is it safe in this case to simply modify
database and set those VM's
status to 'up'? I remember having to do
this a time ago when we faced
storage issues, it didn't break anything
back then. If not, is there a
"safe" way to migrate those VMs to a
different host and restart the
host
    that marked them as unknown?

Hi Nicolás,

I assume that the host these VMs are running
on is empty in the
webadmin,
right? if that is the case then you've
probably hit [1]. Changing their
status to up is not the way to go since these
VMs will not be monitored.

Hi Arik,

By "empty" you mean the webadmin reports the host
being running 0 VMs?
If so, that's not the case, actually the VM count
seems to be correct
in
relation to "qemu-*" processes (about 32 VMs), I
can even see the
machines in the "Virtual machines" tab of the
host, it's just they are
all marked with the '?' mark.

No, I meant the 'Host' column in the Virtual Machines
tab but if you
see
the VMs in the "Virtual machines" sub-tab of the host
then run_on_vds
points to the right host..

The host is up in the webadmin as well?
Can you share the engine log?

Yes, the host is up in the webadmin, there are no issues
with it, just
the VMs running on it have the '?' mark. I've made 3 tests:

1) Restart engine: did not help
2) Check firewall, seems to be ok.
2) PostgreSQL: UPDATE vm_dynamic SET status = 1 WHERE
status = 8; :
After a while, I see lots of entries like this:

  2016-08-04 09:23:10,910 WARN

[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(DefaultQuartzScheduler4) [6ad135b8] Correlation ID: null,
Call Stack:
null, Custom Event ID: -1, Message: VM xxx is not responding.

I'm attaching the engine log, but I don't know when did
this happen for
the first time, though. If there's a manual way/command to
migrate VMs
to a different host I'd appreciate a hint about it.

Is it safe to restart vdsmd on this host?

The engine log looks fine - the VMs are reported as
no

[ovirt-users] LDAP-based domain not working after upgrade?

[Nicolás]

Hi,

We're running oVirt 4.0.1.1, and we're trying to grant a permission to a 
user on a VM. Thing is when we open the 'Permissions' subtab on that VM, 
we click on Add, the LDAP backend shows up but any value entered into 
the search box returns nothing, even when I know the values exist.


This has been working on oVirt 3.x, we actually migrated to 4.x last 
week and didn't notice this issue.


Additionally, there's no combobox to choose the permission to grant?

All this is done with the admin@internal user, so I guess this is not a 
self-permission issue.


Interesting thing is that I can successfully log-in to the user portal 
with a LDAP based user and manage all the VMs assigned to them.


Just to see if there's been any configuration change, we also run the 
ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns 
is pretty similar to ours, and even the test commands (Login, Search) 
work successfully (I can see search returning user's data like name, 
surname, ...). We even applied this configuration to engine to see if it 
makes a difference but the result is the same, the search dialog returns 
nothing and neither I can see the permission to grant.


Any hint about this?

Thanks
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] LDAP-based domain not working after upgrade?

[Nicolás]

En 10/8/2016 2:29 p. m., Alexander Wels <awels@redhat.com> escribió:

On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:

> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas@devels.es wrote:

> > El 2016-08-10 08:58, Ondra Machacek escribió:

> > > On 08/10/2016 09:37 AM, Nicolás wrote:

> > >> Hi,

> > >> 

> > >> We're running oVirt 4.0.1.1, and we're trying to grant a permission to

> > >> a

> > >> user on a VM. Thing is when we open the 'Permissions' subtab on that

> > >> VM,

> > >> we click on Add, the LDAP backend shows up but any value entered into

> > >> the search box returns nothing, even when I know the values exist.

> > >> 

> > >> This has been working on oVirt 3.x, we actually migrated to 4.x last

> > >> week and didn't notice this issue.

> > >> 

> > >> Additionally, there's no combobox to choose the permission to grant?

> > > 

> > > There should be combo box to choose a role.

> > 

> > I've attached a screenshot, seems there's not.

> 

> Its highly likely the dropdown is there, but its scrolled below the bottom

> of the dialog and thus you can't see it. I thought I made sure all the

> dialogs were working, seems like I missed one. Let me check it out and see

> what is going on.

> 



Okay I double checked, I went to the VMs main tab, selected a VM, then went to 

the permissions sub tab. Clicked add. The dialog that popped up looks like the 

one attached, which is what I was expecting. The one you attached appears to 

be missing some styling, which is likely what caused the Role to Assign part 

to be scrolled below the bottom of the page.



Can you complete clear your cache (not shift reload, but settings->clear 

cache). If that doesn't work can you tell us the version of the patternfly rpm 

installed on your engine?



Yes, I already did that, also opened the engine on different clients and the behavior is the same, I believe this is not a client issue. Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch



Anyhow, I see there are lots of packages to update so I'll do so within a few days and report results.



> > >> All this is done with the admin@internal user, so I guess this is not

> > >> a

> > >> self-permission issue.

> > >> 

> > >> Interesting thing is that I can successfully log-in to the user portal

> > >> with a LDAP based user and manage all the VMs assigned to them.

> > >> 

> > >> Just to see if there's been any configuration change, we also run the

> > >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it

> > >> returns

> > >> is pretty similar to ours, and even the test commands (Login, Search)

> > >> work successfully (I can see search returning user's data like name,

> > >> surname, ...). We even applied this configuration to engine to see if

> > >> it

> > >> makes a difference but the result is the same, the search dialog

> > >> returns

> > >> nothing and neither I can see the permission to grant.

> > >> 

> > >> Any hint about this?

> > > 

> > > Maybe you hit similar issue to this one[1].

> > > 

> > > Can you please share engine.log, while you hit search button?

> > 

> > I'm also attaching the log at the time I hit the search button, but I'm

> > afraid there's no entry about that.

> > 

> > Thanks.

> > 

> > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675

> > > 

> > >> Thanks

> > >> ___

> > >> Users mailing list

> > >> Users@ovirt.org

> > >> http://lists.ovirt.org/mailman/listinfo/users

> 

> ___

> Users mailing list

> Users@ovirt.org

> http://lists.ovirt.org/mailman/listinfo/users

___

Users mailing list

Users@ovirt.org

http://lists.ovirt.org/mailman/listinfo/users




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/

[Nicolás]

We have a pretty likely configuration, with just one additional option:

FORCE_DATA_VERIFICATION=False

If it doesn't work, make sure the SSL_CERTIFICATE has the full bundle of 
your certificate, including intermediate certs, not just the public 
certificate. Then make sure to restart the ovirt-websocket-proxy daemon 
(not ovirt-engine).


El 14/08/16 a las 06:59, aleksey.maksi...@it-kb.ru escribió:

Hi Jiri.
But your variant does not work, too

# cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
PROXY_PORT=6100
SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
SSL_ONLY=True

Some error:
WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]

any ideas how to trablshut problem?

14.08.2016, 01:53, "Jiri Belka" :

I have different files for those variables, maybe this is the case?

Review again.

j.

- Original Message -
From: "aleksey maksimov" 
To: "Jiri Belka" 
Cc: "users" 
Sent: Saturday, August 13, 2016 4:57:45 PM
Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 
browser client -> WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/

I changed my file /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf 
to:

PROXY_PORT=6100
#SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer
#SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass
#CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem
SSL_ONLY=True

...and restart HostedEngine VM.
Problem still exists.

13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" :

  It does not work for me. any ideas?

  02.08.2016, 17:22, "Jiri Belka" :

   This works for me:

   # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
   PROXY_PORT=6100
   SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
   SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
   CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
   SSL_ONLY=True

   - Original Message -
   From: "aleksey maksimov" 
   To: "users" 
   Sent: Monday, August 1, 2016 12:13:38 PM
   Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 
browser client -> WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/

   Hello oVirt guru`s !

   I have successfully replaced the oVirt 4 site SSL-certificate according to the 
instructions from "Replacing oVirt SSL Certificate"
   section in "oVirt Administration Guide"
   http://www.ovirt.org/documentation/admin-guide/administration-guide/

   3 files have been replaced:

   /etc/pki/ovirt-engine/certs/apache.cer
   /etc/pki/ovirt-engine/keys/apache.key.nopass
   /etc/pki/ovirt-engine/apache-ca.pem

   Now the oVirt site using my certificate and everything works fine, but when I try to 
use SPICE HTML5 browser client in Firefox or Chrome I see a gray screen and message under 
the button "Toggle messages output":

   WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]

   Before replacing certificates SPICE HTML5 browser client works.
   Native SPICE client works fine.

   Tell me what to do with SPICE HTML5 browser client?
   ___
   Users mailing list
   Users@ovirt.org
   http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How to open vm console by API ?

[Nicolás]

Hi,

This has been asked a short time ago, you can find the thread in [1].

In [2] you can find an unofficial oVirt project written in Python + QT5 
that already does that, it connects to the API, gets a list of available 
VMs for the supplied credentials and then you can open a VM console to 
any of these machines (using virt-viewer).


Regards.

  [1]: http://lists.ovirt.org/pipermail/users/2016-June/040222.html
  [2]: https://github.com/nkovacne/ovirt-desktop-client

El 12/08/16 a las 07:59, Wang Evan escribió:


Hi :

I want to integrate oVirt-engine into our system platform. In 
reference to ovirt rest API , I have finished added host and create 
virtual machine. But I can't find the way to open vm console by API or 
CLI ,so what should I do ?


Thanks !

Evan



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] LDAP-based domain not working after upgrade?

[Nicolás]

El 15/08/16 a las 13:28, Ondra Machacek escribió:

On 08/13/2016 12:44 AM, nico...@devels.es wrote:

El 2016-08-12 20:38, Ondra Machacek escribió:

On 08/12/2016 05:53 PM, nico...@devels.es wrote:

El 2016-08-10 14:46, Nicolás escribió:

En 10/8/2016 2:29 p. m., Alexander Wels  escribió:


On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:



On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es

wrote:



El 2016-08-10 08:58, Ondra Machacek escribió:



> On 08/10/2016 09:37 AM, Nicolás wrote:



>> Hi,



>>



>> We're running oVirt 4.0.1.1 [1], and we're trying to grant a

permission to



>> a



>> user on a VM. Thing is when we open the 'Permissions' subtab

on that



>> VM,



>> we click on Add, the LDAP backend shows up but any value

entered into



>> the search box returns nothing, even when I know the values

exist.



>>



>> This has been working on oVirt 3.x, we actually migrated to

4.x last



>> week and didn't notice this issue.



>>



>> Additionally, there's no combobox to choose the permission to

grant?



>



> There should be combo box to choose a role.







I've attached a screenshot, seems there's not.







Its highly likely the dropdown is there, but its scrolled below

the bottom



of the dialog and thus you can't see it. I thought I made sure all

the



dialogs were working, seems like I missed one. Let me check it out

and see



what is going on.











Okay I double checked, I went to the VMs main tab, selected a VM,
then went to



the permissions sub tab. Clicked add. The dialog that popped up
looks like the



one attached, which is what I was expecting. The one you attached
appears to



be missing some styling, which is likely what caused the Role to
Assign part



to be scrolled below the bottom of the page.







Can you complete clear your cache (not shift reload, but
settings->clear



cache). If that doesn't work can you tell us the version of the
patternfly rpm



installed on your engine?







Yes, I already did that, also opened the engine on different clients
and the behavior is the same, I believe this is not a client issue.
Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch




Ok, this indeed seems like a graphics problem since I am seeing this
connecting to a machine through a VNC server and the Role combobox is
moved down out of the dialog.

However, the LDAP issue persists. When I choose the 'internal' 
domain, I
can search the 'admin' user successfully, however, if I set it to 
be the

LDAP domain, any search returns nothing.

Any hints or ideas how to debug this?


Can you please enable debug log[1] and send it here?

[1]
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L442 






Thanks. I was now able to see why it is failing:

TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13)
[] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin
limit exceeded), numEntries=0, numReferences=0, errorMessage='admin
limit exceeded')


This is server error, that number of entries to be returned is higher, 
than the limit set on server.
You should either increase that limit server side, or don't use '*', 
but use some filter. ( ie. user* )




That's the problem, the patterns we enter in the search box are specific 
usernames that usually return only one or 2 results at most from the 
LDAP directory, that's why I think this filter is needlessly too broad 
in our case. I've been making the query more specific on the command 
line (i.e., using ldapsearch) and removing some of the OR (|) clauses 
seems to return a lower number of entries below the limit, that's why I 
asked if it's possible to manually specify the filter.


Do you think it would be useful to open a RFE on BZ asking for a feature 
to allow the user specify the filter?


I'll see what's the best way to workaround this problem as is, either 
defining a user and allowing them a higher number of returned results or 
increasing the limit on the server side.


Thanks.



Indeed, if I run that query using the ldapsearch command I can clearly
see it is returning an "admin limit exceeded" error.

The applied filter is:
(&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username))) 




Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not
changed our LDAP configuration. Has the filter been changed in 4.x by
default?


It didn't.



If so, is there a way to override the filter to make it simpler? (In our
case we'll always seek by username, so no need to search by givenName,
sn or displayName).



Filtering is constructed on client side, in this case ovirt-engine 
backend,

so unfortuna

Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/

[Nicolás]

El 15/08/16 a las 17:18, aleksey.maksi...@it-kb.ru escribió:

I tried a version of Nicolás.
No success :((

1) I create full bundle cert file:

# cat /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/apache-ca.pem 
> /etc/pki/ovirt-engine/certs/apache-with-ca.cer
# openssl verify /etc/pki/ovirt-engine/certs/apache-with-ca.cer

/etc/pki/ovirt-engine/certs/apache-with-ca.cer: OK


In our case, the private certificate is stored in /etc/ssl/private and 
have 640 permissions for root:ssl-cert. If this is where your private 
key is stored or you have it in a permission-restricted directory, you 
should take this in consideration: The cert will be read by the 'ovirt' 
user, so you need to make sure the ovirt user has the secondary ssl-cert 
group assigned. You can check that running:


groups ovirt

If ssl-cert is not listed there, you might run:

usermod -aG ssl-cert ovirt

That will append the ssl-cert group to ovirt user. If you had to run it, 
you'll need to restart both ovirt-websocket-proxy and ovirt-engine daemons.


Regards.



2) I changed config file:

# cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

PROXY_PORT=6100
SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache-with-ca.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
SSL_ONLY=True
FORCE_DATA_VERIFICATION=False

3) I restarted the service

# service ovirt-websocket-proxy restart

Problem still exists :(
Any ideas how to trablshut problem?

14.08.2016, 08:59, "aleksey.maksi...@it-kb.ru" :

Hi Jiri.
But your variant does not work, too

# cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
PROXY_PORT=6100
SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
SSL_ONLY=True

Some error:
WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]

any ideas how to trablshut problem?

14.08.2016, 01:53, "Jiri Belka" :

  I have different files for those variables, maybe this is the case?

  Review again.

  j.

  - Original Message -
  From: "aleksey maksimov" 
  To: "Jiri Belka" 
  Cc: "users" 
  Sent: Saturday, August 13, 2016 4:57:45 PM
  Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 
browser client -> WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/

  I changed my file 
/etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to:

  PROXY_PORT=6100
  #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer
  #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass
  #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
  SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
  SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
  CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem
  SSL_ONLY=True

  ...and restart HostedEngine VM.
  Problem still exists.

  13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" :

   It does not work for me. any ideas?

   02.08.2016, 17:22, "Jiri Belka" :

This works for me:

# cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
PROXY_PORT=6100
SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
SSL_ONLY=True

- Original Message -
From: "aleksey maksimov" 
To: "users" 
Sent: Monday, August 1, 2016 12:13:38 PM
Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 
browser client -> WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/

Hello oVirt guru`s !

I have successfully replaced the oVirt 4 site SSL-certificate according to the 
instructions from "Replacing oVirt SSL Certificate"
section in "oVirt Administration Guide"
http://www.ovirt.org/documentation/admin-guide/administration-guide/

3 files have been replaced:

/etc/pki/ovirt-engine/certs/apache.cer
/etc/pki/ovirt-engine/keys/apache.key.nopass
/etc/pki/ovirt-engine/apache-ca.pem

Now the oVirt site using my certificate and everything works fine, but when I try to 
use SPICE HTML5 browser client in Firefox or Chrome I see a gray screen and message under 
the button "Toggle messages output":

WebSocket error: Can't connect to websocket on URL: 
wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]

Before replacing certificates SPICE HTML5 browser client works.
Native SPICE client works fine.

Tell me what to do with SPICE HTML5 browser client?
___
Users mailing list
Users@ovirt.org
http://list

[ovirt-users] Stalled disk migration

[Nicolás]

Hi,

We've done a major datastore migration recently between 2 iSCSI-based 
datastores. We've successfully migrated 35 machines, however, 5 of them 
seem to have stalled. All we can see in the events tab tab is:


  Moving Disk bla_Disk1 from iscsi01 to iscsi02

Disks are small enough (25-27Gb) to assume this won't progress since 
it's been more than 30 hs. since the migration began, other VMs took 
approximately 1-1.5 hours to fully migrate a disk, so this seems to be 
stalled.


The bad thing is that I can't find a way to "unstall" it. Disks are in a 
perpetual "migrating" status and there's no way to stop the migration 
(at least from the webadmin). I don't actually care if stopping the 
migration breaks those 5 machines since they are disposable, I just need 
to stop that event. I already tried restarting the ovirt-engine and it 
didn't work.


Log doesn't seem to provide nothing relevant.

Is there a way to do that? I wouldn't mind if I need to modify some 
record directly into the DB.


Thanks!

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Stalled disk migration

[Nicolás]

Just to update:

I used: PGPASSWORD=dbpass 
/usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -v -u engine -d 
engine -t disk 


This indeed got the disks back to the OK state, however, the task 
remained in the 'Events' tab so even with the unlocked disks I couldn't 
do anything, as oVirt complained about the disks being "moved", so I 
couldn't do anything of copying the disks, starting the VMs, moving the 
disks, etc.


"Miraculously" I checked the day after and both tasks disappeared from 
the Events tab, so I tried moving one disk again, with the same result: 
it stalled. I managed to copy the other disk to the destination 
datastore and attach it to the machine. This worked, but now I have one 
of the VMs still stalled even after running the "unlock_entity" script, 
as this time the task wasn't removed from the Events tab.


Regards.

El 06/10/16 a las 19:45, Nicolás escribió:

Hi,

We've done a major datastore migration recently between 2 iSCSI-based 
datastores. We've successfully migrated 35 machines, however, 5 of 
them seem to have stalled. All we can see in the events tab tab is:


  Moving Disk bla_Disk1 from iscsi01 to iscsi02

Disks are small enough (25-27Gb) to assume this won't progress since 
it's been more than 30 hs. since the migration began, other VMs took 
approximately 1-1.5 hours to fully migrate a disk, so this seems to be 
stalled.


The bad thing is that I can't find a way to "unstall" it. Disks are in 
a perpetual "migrating" status and there's no way to stop the 
migration (at least from the webadmin). I don't actually care if 
stopping the migration breaks those 5 machines since they are 
disposable, I just need to stop that event. I already tried restarting 
the ovirt-engine and it didn't work.


Log doesn't seem to provide nothing relevant.

Is there a way to do that? I wouldn't mind if I need to modify some 
record directly into the DB.


Thanks!

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] desktop version of client?

[Nicolás]

Hi Gianluca,

El 01/11/16 a las 13:17, Gianluca Cecchi escribió:

[...]

Hello,
thanks for reporting about this project I didn't know about.

By the way on a Fedora 24 client I was able to successfully test it 
without the need to create a python virtual environment




The truth is that I didn't do any tests on Fedora, just on Debian, 
Ubuntu, CentOS & RHEL and seeing the variety of different scenarios I 
decided to include a way to install both components that should work 
platform independently. However, it's true that this should be labelled 
as the "hard way" and if the user is able to install them without the 
need of a virtualenv, this should also be documented (this is a matter 
of preference, actually), so I'll update the README soon.


This is with python 2 present in F24 (not tested with the alternative 
python 3 Python 3.5.1):


$ python -V
Python 2.7.12

and the currently provided packages:

sip-4.18-2.fc24.x86_64
python-qt5-5.6-4.fc24.x86_6

I was able to then run

python ovirtclient.py

I was not able to using anyway virtualenv (both 2 and 3 versions) that 
seems anyway sort of broken
Without --always-copy switch the sip compilation tried to remove the 
provided sip.so and clearly it failed
With --always-copy I got errors able to temporarily fix changing 
fix_lib64 function but then error again about importing _io




I faced the last error a few days ago and it was because a version 
mismatch of different python components. I simply upgraded all the 
python related packages to the latest version, re-created the virtualenv 
and it worked. Not sure if that is the only one reason, but it worked in 
my case.


Thanks for the feedback.

Nicolás


Gianluca



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] desktop version of client?

[Nicolás]

Hi Michal,

El 02/11/16 a las 16:31, Michal Skrivanek escribió:

[...]

I wonder…coincidentally we started to explore simplified and modern 
interface for use cases like yours.

It’s by no means ready yet, but I wonder what you guys think about [1].
It’s just a proof of concept but the goals are the same, it’s 
browser-based but much more lightweight than the current GWT Basic 
User Portal


Thanks,
michal

[1] https://trello.com/c/blwDpjcJ



Looks good! This would even suffice our needs quite well. Actually, in 
our case we tried to avoid using a web browser because these thin 
clients are very specific for virtualization, so users should use them 
*only* to manage their VMs and if they need to browse something, it 
would be done from a VM they have access to (for example, a disposable 
machine from a VmPool). Anyhow, this can also be done with a bit of 
tweaking on the browser side, so if the project is finally released 
we'll consider it.


Regards,

Nicolás



As a side note, you didn't mention if your thin clients are linux or 
windows based but I believe this is for linux only.


HTH,

James

[1] https://ovirt-desktop-client.click 
<https://ovirt-desktop-client.click/>


2016-10-28 20:47 GMT+01:00 Amy Morrisson <mailto:amymorr9...@gmail.com>>:


Hey there,

I'm looking for some kind of desktop client for ovirt. I believe
as per what I've seen that there's nothing official so I'm
looking for any other options (even if it's an own development).
As a last resource we can use the web admin but the purpose is to
have a few thin clients which would start the client at boot time
so it's more confortable for users, plus most times the web admin
becomes slow after a while.

I'm not sure if something like this exists. In any case thanks
for any tip.

By the way, we're using ovirt 3.6.7, fwiw.

Amy Morrisson

___
Users mailing list
Users@ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>


___
Users mailing list
Users@ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users


Hey all,


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Specifying the datastore on a VmPool creation via Python-SDK?

[Nicolás]

Done [1].

Thank you.

  [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1412768

El 12/01/17 a las 16:16, Juan Hernández escribió:

On 01/11/2017 03:53 PM, nico...@devels.es wrote:

Any ideas to this?


My understanding is that there is no way to this with the API currently.
If you need it, please open a RFE. Meanwhile, I'd suggest to copy the
templates to the storage domain that you want to use, and then use the
copied templates. I don't see any other alternative.


El 2017-01-10 08:43, nico...@devels.es escribió:

Hi,

We've several templates that have their disks replicated (copied) on
all our Storage Domains. Problem is that we create our VmPools using
PythonSDK, and it usually creates the pool on one of our Storage
Domains that has a small amount of free disk space.

Some of the Data Stores have plenty of space and when creating the
VmPool, we'd like to be able to specify on which of these Storage
Domains to create the VmPool. So far I see no parameter on the
params.VmPool class to do that. I've tried using an Action, but the
request is not correct:

   action =
params.Action(storage_domain=api.storagedomains.get(name='...'))

   pool = params.VmPool(name='testlarge',
cluster=api.clusters.get(name='...'),
template=api.templates.get(name='Blank'), max_user_vms=1, size=1,
type_='manual', actions=action)
   pool = params.VmPool(name='testlarge',
cluster=api.clusters.get(name='...'),
template=api.templates.get(name='Blank'), max_user_vms=1, size=1,
type_='manual', actions=[action])

   api.vmpools.add(pool)

Both tries fail.

This is Python-SDK 3.x.

Is there a way to specify the destination Storage Domain onto where to
create the VmPool?

Thanks
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] ovirt-engine-notifier tuning?

[Nicolás]

Hi,

Is there a way to configure the frequency on which the 
ovirt-engine-notifier notifies about the same issue? We've recently had 
a Domain Storage with low space and an email was sent cca. every 15 
minutes. Is there a way to increase this notification time?


This is oVirt 4.0.4-4.

Thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Re: Stalled disk migration

[Nicolás]

Just to update:

I used: PGPASSWORD=dbpass 
/usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh -v -u engine -d 
engine -t disk 


This indeed got the disks back to the OK state, however, the task 
remained in the 'Events' tab so even with the unlocked disks I couldn't 
do anything, as oVirt complained about the disks being "moved", so I 
couldn't do anything of copying the disks, starting the VMs, moving the 
disks, etc.


"Miraculously" I checked the day after and both tasks disappeared from 
the Events tab, so I tried moving one disk again, with the same result: 
it stalled. I managed to copy the other disk to the destination 
datastore and attach it to the machine. This worked, but now I have one 
of the VMs still stalled even after running the "unlock_entity" script, 
as this time the task wasn't removed from the Events tab.


Regards.

El 06/10/16 a las 19:45, Nicolás escribió:

Hi,

We've done a major datastore migration recently between 2 iSCSI-based 
datastores. We've successfully migrated 35 machines, however, 5 of 
them seem to have stalled. All we can see in the events tab tab is:


  Moving Disk bla_Disk1 from iscsi01 to iscsi02

Disks are small enough (25-27Gb) to assume this won't progress since 
it's been more than 30 hs. since the migration began, other VMs took 
approximately 1-1.5 hours to fully migrate a disk, so this seems to be 
stalled.


The bad thing is that I can't find a way to "unstall" it. Disks are in 
a perpetual "migrating" status and there's no way to stop the 
migration (at least from the webadmin). I don't actually care if 
stopping the migration breaks those 5 machines since they are 
disposable, I just need to stop that event. I already tried restarting 
the ovirt-engine and it didn't work.


Log doesn't seem to provide nothing relevant.

Is there a way to do that? I wouldn't mind if I need to modify some 
record directly into the DB.


Thanks!

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

--
IMPORTANT!
This message has been scanned for viruses and phishing links.
However, it is your responsibility to evaluate the links and attachments you 
choose to click.
If you are uncertain, we always try to help.
Greetings helpd...@actnet.se



--
IMPORTANT!
This message has been scanned for viruses and phishing links.
However, it is your responsibility to evaluate the links and attachments you 
choose to click.
If you are uncertain, we always try to help.
Greetings helpd...@actnet.se


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RTWIBRFCXCIAAHTF4DHIOYPJFZUBT7CE/

[ovirt-users] Stalled disk migration

[Nicolás]

Hi,

We've done a major datastore migration recently between 2 iSCSI-based 
datastores. We've successfully migrated 35 machines, however, 5 of them 
seem to have stalled. All we can see in the events tab tab is:


  Moving Disk bla_Disk1 from iscsi01 to iscsi02

Disks are small enough (25-27Gb) to assume this won't progress since 
it's been more than 30 hs. since the migration began, other VMs took 
approximately 1-1.5 hours to fully migrate a disk, so this seems to be 
stalled.


The bad thing is that I can't find a way to "unstall" it. Disks are in a 
perpetual "migrating" status and there's no way to stop the migration 
(at least from the webadmin). I don't actually care if stopping the 
migration breaks those 5 machines since they are disposable, I just need 
to stop that event. I already tried restarting the ovirt-engine and it 
didn't work.


Log doesn't seem to provide nothing relevant.

Is there a way to do that? I wouldn't mind if I need to modify some 
record directly into the DB.


Thanks!

Nicolás
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

--
IMPORTANT!
This message has been scanned for viruses and phishing links.
However, it is your responsibility to evaluate the links and attachments you 
choose to click.
If you are uncertain, we always try to help.
Greetings helpd...@actnet.se



--
IMPORTANT!
This message has been scanned for viruses and phishing links.
However, it is your responsibility to evaluate the links and attachments you 
choose to click.
If you are uncertain, we always try to help.
Greetings helpd...@actnet.se


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2JFNPXPXDU7RTLNVMBIBXTW26W7QQNGN/

[ovirt-users] Clone a VM in the User Portal

[Nicolás]

Hi,

We're using oVirt 4.3.8, having an organization that intensively uses 
the User Portal. After upgrading from 4.2, we've noticed that cloning a 
VM from within the User Portal is not possible anymore. In our case, 
this feature was heavily used by hundreds of students deploying their VMs.


Is this feature in the roadmap yet? If not, do you consider it useful to 
open a RFE?


Thank you.

Regards,

Nico
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/

[ovirt-users] Re: Clone a VM in the User Portal

[Nicolás]

Hi Sharon,

Thanks for the reply! I've opened [1], so hopefully someone will be able 
to implement it.


Regards,

Nico

  [1]: https://github.com/oVirt/ovirt-site/issues/2389

El 10/11/20 a las 11:38, Sharon Gratch escribió:

Hi,

This feature of cloning a VM was indeed part of the old User Portal 
and you are right that it's not supported by the newer VM Portal 
(since oVirt 4.3).
It seemed that this wasn't required by VM Portal users (no user 
complained up till now) and that's why we omitted it and it's not part 
of our current roadmap to implement it as well.


Nevertheless, there is no real reason not to include that ability as 
part of VM Portal, so you are most welcome to open an issue on 
https://github.com/oVirt/ovirt-web-ui/issues

<https://github.com/oVirt/ovirt-site/issues>
and you can push a fix yourself if you have time (or someone else from 
the community) :-)


Thanks!
Sharon

On Fri, Nov 6, 2020 at 11:06 AM Nicolás <mailto:nico...@devels.es>> wrote:


Hi,

We're using oVirt 4.3.8, having an organization that intensively uses
the User Portal. After upgrading from 4.2, we've noticed that
cloning a
VM from within the User Portal is not possible anymore. In our case,
this feature was heavily used by hundreds of students deploying
their VMs.

Is this feature in the roadmap yet? If not, do you consider it
useful to
open a RFE?

Thank you.

Regards,

Nico
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUEW52WZUD27INREQXQ2OPLBLQW2RMK4/

[ovirt-users] Re: Clone a VM in the User Portal

[Nicolás]

Hi Arik,

El 10/11/20 a las 13:21, Arik Hadas escribió:



On Tue, Nov 10, 2020 at 3:08 PM Nicolás <mailto:nico...@devels.es>> wrote:


Hi Sharon,

Thanks for the reply! I've opened [1], so hopefully someone will
be able to implement it.

Regards,

Nico

  [1]: https://github.com/oVirt/ovirt-site/issues/2389

El 10/11/20 a las 11:38, Sharon Gratch escribió:

Hi,

This feature of cloning a VM was indeed part of the old User
Portal and you are right that it's not supported by the newer VM
Portal (since oVirt 4.3).
It seemed that this wasn't required by VM Portal users (no user
complained up till now) and that's why we omitted it and it's not
part of our current roadmap to implement it as well.

Nevertheless, there is no real reason not to include that ability
as part of VM Portal, so you are most welcome to open an issue on
https://github.com/oVirt/ovirt-web-ui/issues
<https://github.com/oVirt/ovirt-site/issues>
and you can push a fix yourself if you have time (or someone else
from the community) :-)

Thanks!
Sharon

    On Fri, Nov 6, 2020 at 11:06 AM Nicolás mailto:nico...@devels.es>> wrote:

Hi,

We're using oVirt 4.3.8, having an organization that
intensively uses
the User Portal. After upgrading from 4.2, we've noticed that
cloning a
VM from within the User Portal is not possible anymore. In
our case,
this feature was heavily used by hundreds of students
deploying their VMs.



Out of curiosity, why cloning a VM and not provisioning the VMs from 
template(s)?


Most of our students are IT-related, and their professors want to teach 
them the procedure to deploy a VM from scratch. Some other courses 
surely deploy their VMs from a template as they are not that IT oriented 
and they just want to have a working VM instead of building it from 
scratch. We have a lot of casuistry, but in our case about 400~500 
students would very welcome having back the clone option.


Regards,

Nico



Is this feature in the roadmap yet? If not, do you consider
it useful to
open a RFE?

Thank you.

Regards,

Nico
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/



___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUEW52WZUD27INREQXQ2OPLBLQW2RMK4/



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JIG42K45ABTUQZ6JWG3CO6KAWCG7AWQ4/

[ovirt-users] Re: Clone a VM in the User Portal

[Nicolás]

Hi Arik,

El 10/11/20 a las 15:22, Arik Hadas escribió:



On Tue, Nov 10, 2020 at 4:37 PM Nicolás <mailto:nico...@devels.es>> wrote:


Hi Arik,

El 10/11/20 a las 13:21, Arik Hadas escribió:



On Tue, Nov 10, 2020 at 3:08 PM Nicolás mailto:nico...@devels.es>> wrote:

Hi Sharon,

Thanks for the reply! I've opened [1], so hopefully someone
will be able to implement it.

Regards,

Nico

  [1]: https://github.com/oVirt/ovirt-site/issues/2389

El 10/11/20 a las 11:38, Sharon Gratch escribió:

Hi,

This feature of cloning a VM was indeed part of the old User
Portal and you are right that it's not supported by the
newer VM Portal (since oVirt 4.3).
It seemed that this wasn't required by VM Portal users (no
user complained up till now) and that's why we omitted it
and it's not part of our current roadmap to implement it as
well.

Nevertheless, there is no real reason not to include that
ability as part of VM Portal, so you are most welcome to
open an issue on https://github.com/oVirt/ovirt-web-ui/issues
<https://github.com/oVirt/ovirt-site/issues>
and you can push a fix yourself if you have time (or someone
else from the community) :-)

Thanks!
Sharon

    On Fri, Nov 6, 2020 at 11:06 AM Nicolás mailto:nico...@devels.es>> wrote:

Hi,

We're using oVirt 4.3.8, having an organization that
intensively uses
the User Portal. After upgrading from 4.2, we've noticed
that cloning a
VM from within the User Portal is not possible anymore.
In our case,
this feature was heavily used by hundreds of students
deploying their VMs.



Out of curiosity, why cloning a VM and not provisioning the VMs
from template(s)?


Most of our students are IT-related, and their professors want to
teach them the procedure to deploy a VM from scratch. Some other
courses surely deploy their VMs from a template as they are not
that IT oriented and they just want to have a working VM instead
of building it from scratch. We have a lot of casuistry, but in
our case about 400~500 students would very welcome having back the
clone option.


Thanks Nicolás.
I'd say that even for the IT-related students it may make more sense 
to provision VMs from templates instead of cloning VMs -
so you want them to deploy VMs from scratch, which means starting with 
a VM that is based on the blank template, add disk(s) and other 
devices, install and configure the guest and such; and then the 
students would use clone-VM to duplicate the VM they just prepared, right?


Yep, that's mostly it.

Why would you want them to clone the VM rather than creating a 
template out of this VM and provision further VMs from that template 
with thin-provisioned disks?




Because that would involve creating templates, and would require a 
permission they don't have. We've chosen a few permissions which make 
them able to deploy their own machines, but we don't want them to create 
templates or even access the admin panel.


Additionally, courses are composed of groups of students which deploy 
different infrastructures. So one could deploy an HAproxy architecture, 
some other could deploy a pacemaker+corosync architecture with different 
parameters (some of them need more disk, some of them need more 
memory...), so each group would need to create templates just to deploy 
a couple machines.


I think it's more practical (in this case) to deploy the couple of 
machines using a clone option. In some other courses, where all the VM 
parameters are equal, it's better to deploy the VM from a template and 
some subjects use this option too.


Thanks.

Nico



Regards,

Nico



Is this feature in the roadmap yet? If not, do you
consider it useful to
open a RFE?

Thank you.

Regards,

Nico
___
Users mailing list -- users@ovirt.org
<mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/HFMFJRV3AC3GVLYZJ32KAZCIAO25P3X3/



___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<ma

[ovirt-users] Ballooning disabled when creating a VmPool

[Nicolás]

Hi,

We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to 
handle our pools.


Pools are based on a template which has ballooning enabled. However, 
when deploying a VmPool based on that template, has the "Ballooning 
enabled" field disabled, uneditable and an icon which states: "The field 
is not attached to any instance type" (screenshot attached).


We're handling a big number of VMs based on pools (> 1500), and we think 
this should be enabled.


However, I don't see a field in the types.VmPool definition that allows 
that.


Is that even doable? Our Python code is similar to this:

   newpool = types.VmPool(name='test',
                     cluster=cl,
                         template=t,
                     max_user_vms=1,
                         size=1,
   type=types.VmPoolType.MANUAL)
   vmpool_serv.add(newpool)

 * cl is a types.Cluster instance with ballooning_enabled=True
 * t is a types.Template instance with Ballooning enabled.

Thanks.

Nico

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/

[ovirt-users] Re: Ballooning disabled when creating a VmPool

[Nicolás]

Sorry, I forgot to add the screenshot!

El 11/11/20 a las 12:32, Nicolás escribió:

Hi,

We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) to 
handle our pools.


Pools are based on a template which has ballooning enabled. However, 
when deploying a VmPool based on that template, has the "Ballooning 
enabled" field disabled, uneditable and an icon which states: "The 
field is not attached to any instance type" (screenshot attached).


We're handling a big number of VMs based on pools (> 1500), and we 
think this should be enabled.


However, I don't see a field in the types.VmPool definition that 
allows that.


Is that even doable? Our Python code is similar to this:

newpool = types.VmPool(name='test',
                     cluster=cl,
                         template=t,
                     max_user_vms=1,
                         size=1,
type=types.VmPoolType.MANUAL)
vmpool_serv.add(newpool)

  * cl is a types.Cluster instance with ballooning_enabled=True
  * t is a types.Template instance with Ballooning enabled.

Thanks.

Nico


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/

[ovirt-users] Re: Ballooning disabled when creating a VmPool

[Nicolás]

Hi Michal,

No, in the GUI it behaves as it should (ballooning is enabled after 
creating the pool).


Could you please point out where should I fill-in the bug? (bugzilla or 
github...)


Thanks!

El 12/11/20 a las 10:56, Michal Skrivanek escribió:

Hi Nicolas,
it does sound like a bug, ballooning shouldn’t be disabled in this case.
does it behave the same in GUI?

Thanks,
michal

On 12 Nov 2020, at 11:49, Nicolás <mailto:nico...@devels.es>> wrote:


Sorry, I forgot to add the screenshot!

El 11/11/20 a las 12:32, Nicolás escribió:

Hi,

We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) 
to handle our pools.


Pools are based on a template which has ballooning enabled. However, 
when deploying a VmPool based on that template, has the "Ballooning 
enabled" field disabled, uneditable and an icon which states: "The 
field is not attached to any instance type" (screenshot attached).


We're handling a big number of VMs based on pools (> 1500), and we 
think this should be enabled.


However, I don't see a field in the types.VmPool definition that 
allows that.


Is that even doable? Our Python code is similar to this:

newpool = types.VmPool(name='test',
                     cluster=cl,
                         template=t,
max_user_vms=1,
                         size=1,
type=types.VmPoolType.MANUAL)
vmpool_serv.add(newpool)

  * cl is a types.Cluster instance with ballooning_enabled=True
  * t is a types.Template instance with Ballooning enabled.

Thanks.

Nico


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/


12-17-02.png>___

Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org 
<mailto:users-le...@ovirt.org>

Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TQXOVXAJHSKKPC7DWRGKVZEUB4HBSV5D/

[ovirt-users] Re: Ballooning disabled when creating a VmPool

[Nicolás]

Hi,

I opened [1]. If this is not the right place/component/product please 
change it accordingly.


Thanks.

Regards,

Nico

  [1]: https://bugzilla.redhat.com/show_bug.cgi?id=1897532

El 12/11/20 a las 12:21, Nicolás escribió:

Hi Michal,

No, in the GUI it behaves as it should (ballooning is enabled after 
creating the pool).


Could you please point out where should I fill-in the bug? (bugzilla 
or github...)


Thanks!

El 12/11/20 a las 10:56, Michal Skrivanek escribió:

Hi Nicolas,
it does sound like a bug, ballooning shouldn’t be disabled in this case.
does it behave the same in GUI?

Thanks,
michal

On 12 Nov 2020, at 11:49, Nicolás <mailto:nico...@devels.es>> wrote:


Sorry, I forgot to add the screenshot!

El 11/11/20 a las 12:32, Nicolás escribió:

Hi,

We're using oVirt 4.3.8 along with ovirt-engine-sdk-python (4.4.1) 
to handle our pools.


Pools are based on a template which has ballooning enabled. 
However, when deploying a VmPool based on that template, has the 
"Ballooning enabled" field disabled, uneditable and an icon which 
states: "The field is not attached to any instance type" 
(screenshot attached).


We're handling a big number of VMs based on pools (> 1500), and we 
think this should be enabled.


However, I don't see a field in the types.VmPool definition that 
allows that.


Is that even doable? Our Python code is similar to this:

newpool = types.VmPool(name='test',
cluster=cl,
template=t,
max_user_vms=1,
                         size=1,
type=types.VmPoolType.MANUAL)
vmpool_serv.add(newpool)

  * cl is a types.Cluster instance with ballooning_enabled=True
  * t is a types.Template instance with Ballooning enabled.

Thanks.

Nico


___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRWPZSNGX5UCZJW7NIT6XY72BFYTTHOL/


12-17-02.png>___

Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org 
<mailto:users-le...@ovirt.org>

Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PFO66W2AVDEPMZ74BG76IWJ4DRSY7TSF/





___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TQXOVXAJHSKKPC7DWRGKVZEUB4HBSV5D/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GS34TT7IMWCRMZQBS445AAMN6IPQOUJZ/

[ovirt-users] Really slow manager node

[Nicolás]

Hi,

We're running oVirt 4.3.8 and even if this is a problem we've had since 
a lot of time (I would say since 4.0.x), I decided to look for help in 
case anything can be done.


Our environment is heavily used by users in our University (about 3000 
users), and currently our oVirt infrastructure has 1928 virtual 
machines, being 882 of them currently running. We have a separate 
physical machine for the manager node, and the problem is that this 
machine is very, very, very slow, despite it has (from my point of view) 
enough physical resources to run efficiently.


By slow I mean even the SSH access to it takes about 10 seconds, not 
just the admin/user portals. Any operation takes enough time to make the 
experience not comfortable to our users (enter the VM portal, start a 
VM, open a console...).


Node machine's parameters are:
18GB of RAM memory
1 processor with 12CPUs
300GB SCSI Disk, local storage. No Storage Domain is stored in this node 
machine.


Currently, most consuming processes are:

28802 ovirt 20   0 3302876   1,5g  25988 S   1,0  8,7  22:46.36 
ovirt-engine -server -XX:+TieredCompilation -Xms1024M -Xmx1024M -Xss1M 
-Djava.aw+
28701 ovirt 20   0 5465432 807704  13140 S   5,9  4,4   3:15.53 
ovirt-engine-dwhd 
-Dorg.ovirt.engine.dwh.settings=/tmp/tmp8wtnTA/settings.proper+


# free -m
  total    used    free  shared buff/cache   
available

Mem:  17886    6669    2734 255 8482   10625
Swap:  6143    1002    5141

There are also a lot of postgresql processes:

postgres  2186  0.0  0.0 261812  4136 ?    Ss   jun05  37:39 
/opt/rh/rh-postgresql10/root/usr/bin/postmaster -D 
/var/opt/rh/rh-postgresql10/lib/pgsql/data
postgres  3176  0.0  0.0 216084   656 ?    Ss   jun05   0:00 
postgres: logger process
postgres  3290  0.0  0.2 262204 37476 ?    Ss   jun05  77:31 
postgres: checkpointer process
postgres  3291  0.3  0.2 262052 36960 ?    Ss   jun05 754:02 
postgres: writer process
postgres  3292  0.0  0.0 261812  1988 ?    Ss   jun05 100:51 
postgres: wal writer process
postgres  3293  0.0  0.2 262380 36748 ?    Ss   jun05  21:58 
postgres: autovacuum launcher process
postgres  3294  0.1  0.0 219216  1412 ?    Ds   jun05 335:41 
postgres: stats collector process
postgres  3295  0.0  0.0 262220  1460 ?    Ss   jun05   0:11 
postgres: bgworker: logical replication launcher
postgres  3393  0.0  0.2 265792 40452 ?    Ss   jun05  15:36 
postgres: engine engine ::1(51664) idle
postgres  6105  0.3  0.0 271532 15976 ?    Ds   13:01   0:00 
postgres: autovacuum worker process   ovirt_engine_history
postgres  6216  0.2  0.0 263864 11440 ?    Ss   13:02   0:00 
postgres: autovacuum worker process   engine
postgres  6245  0.0  0.0 262888  6212 ?    Ss   13:02   0:00 
postgres: engine engine 127.0.0.1(42400) idle
postgres  6246  0.0  0.0 262844  3256 ?    Ss   13:02   0:00 
postgres: autovacuum worker process   template1
postgres 18815  0.0  0.0 262912  5852 ?    Ss   nov01   0:00 
postgres: django django 127.0.0.1(59564) idle
postgres 23148  0.0  0.2 266052 43024 ?    Ss   oct28   9:01 
postgres: engine engine 127.0.0.1(59714) idle
postgres 23149  0.0  0.0 262980  6820 ?    Ss   oct28   0:00 
postgres: engine engine 127.0.0.1(59716) idle
postgres 28784  0.0  0.0 262816  3492 ?    Ss   12:02   0:00 
postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39470) idle
postgres 28785  0.0  0.0 262816  3496 ?    Ss   12:02   0:00 
postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39472) idle
postgres 28921  0.8  0.7 375152 146452 ?   Ss   12:03   0:30 
postgres: engine engine 127.0.0.1(39484) idle
postgres 29007  3.3  0.7 369348 142184 ?   Ds   12:03   1:58 
postgres: engine engine 127.0.0.1(39498) SELECT
postgres 29009  5.0  0.3 294736 72776 ?    Ss   12:03   2:58 
postgres: ovirt_engine_history ovirt_engine_history 127.0.0.1(39500) idle
postgres 29048  0.0  0.0 263664 12176 ?    Ss   12:03   0:00 
postgres: engine engine 127.0.0.1(39530) idle
postgres 29064  0.6  0.8 384936 157852 ?   Ss   12:03   0:24 
postgres: engine engine 127.0.0.1(39532) idle
postgres 29065  1.2  0.7 358944 137028 ?   Ss   12:03   0:43 
postgres: engine engine 127.0.0.1(39534) idle
postgres 29066  1.9  0.7 355800 132800 ?   Ss   12:03   1:08 
postgres: engine engine 127.0.0.1(39536) idle
postgres 29067  1.0  0.7 370688 140504 ?   Ss   12:03   0:37 
postgres: engine engine 127.0.0.1(39538) idle
postgres 29068  1.7  0.7 360984 139584 ?   Ss   12:03   1:02 
postgres: engine engine 127.0.0.1(39540) idle
postgres 29069  1.3  0.7 358140 136268 ?   Ss   12:03   0:48 
postgres: engine engine 127.0.0.1(39542) idle
postgres 29070  3.7  0.7 372064 141724 ?   Ss   12:03   2:13 
postgres: engine engine 127.0.0.1(39544) idle
postgres 29071  0.8  0.6 337224 114132 ?   Ss   12:03   0:31 
postgres: engine engine 127.0.0.1(39546) idle
postgres

[ovirt-users] Re: Really slow manager node

[Nicolás]

Hi Toni,

(re-adding the users@ovirt.org list)

El 16/11/20 a las 23:37, tfe...@swissonline.ch escribió:


Hi,

Chances are, that this performance issue may be unrelated to oVirt.

The first thing that comes to my mind is that the system may have a 
bottleneck on the I/O.



Please have a look at:

iostat -x 5

The system may have problems with disk performance, if %util > 95 and 
avgqu-sz > 3 over longer periods of time.





Actually %util never goes beyond the 85%, being the average on 70%; for 
the avgqu-sz, the average value is about 25 (with peaks of 160 as far as 
I could see).


If that's not the case, you may next want to have a look at limits 
(/etc/security/limits.conf).


There may also be default limits which may be too low. (nofile, nproc 
come to my mind)




This file seems not to have been touched (all the content is commented out).


Are there any errors or warnings in the messages or audit logs?




Nothing special, I've checked for the last couple days and everything 
seems ok.



And also htop, iotop, vmstat may help to get a quick overview.




Yep, I've used most of these commands to check, but I've been unable to 
see something clarifying.


In my opinion the slowness could be caused for not using SSD disks and 
because of a low polling interval by the DWHd, but that's just my 
assumption and I've been unable to get some data that would confirm this.


Thanks for the help!

Nico


Hope this helps,

Toni


On 16.11.20 14:08, Nicolás wrote:

Hi,

We're running oVirt 4.3.8 and even if this is a problem we've had 
since a lot of time (I would say since 4.0.x), I decided to look for 
help in case anything can be done.


Our environment is heavily used by users in our University (about 
3000 users), and currently our oVirt infrastructure has 1928 virtual 
machines, being 882 of them currently running. We have a separate 
physical machine for the manager node, and the problem is that this 
machine is very, very, very slow, despite it has (from my point of 
view) enough physical resources to run efficiently.


By slow I mean even the SSH access to it takes about 10 seconds, not 
just the admin/user portals. Any operation takes enough time to make 
the experience not comfortable to our users (enter the VM portal, 
start a VM, open a console...).


Node machine's parameters are:
18GB of RAM memory
1 processor with 12CPUs
300GB SCSI Disk, local storage. No Storage Domain is stored in this 
node machine.


Currently, most consuming processes are:

28802 ovirt 20   0 3302876   1,5g  25988 S   1,0  8,7 22:46.36 
ovirt-engine -server -XX:+TieredCompilation -Xms1024M -Xmx1024M 
-Xss1M -Djava.aw+
28701 ovirt 20   0 5465432 807704  13140 S   5,9  4,4 3:15.53 
ovirt-engine-dwhd 
-Dorg.ovirt.engine.dwh.settings=/tmp/tmp8wtnTA/settings.proper+


# free -m
  total    used    free  shared buff/cache   
available

Mem:  17886    6669    2734 255 8482   10625
Swap:  6143    1002    5141

There are also a lot of postgresql processes:

postgres  2186  0.0  0.0 261812  4136 ?    Ss   jun05  37:39 
/opt/rh/rh-postgresql10/root/usr/bin/postmaster -D 
/var/opt/rh/rh-postgresql10/lib/pgsql/data
postgres  3176  0.0  0.0 216084   656 ?    Ss   jun05   0:00 
postgres: logger process
postgres  3290  0.0  0.2 262204 37476 ?    Ss   jun05  77:31 
postgres: checkpointer process
postgres  3291  0.3  0.2 262052 36960 ?    Ss   jun05 754:02 
postgres: writer process
postgres  3292  0.0  0.0 261812  1988 ?    Ss   jun05 100:51 
postgres: wal writer process
postgres  3293  0.0  0.2 262380 36748 ?    Ss   jun05  21:58 
postgres: autovacuum launcher process
postgres  3294  0.1  0.0 219216  1412 ?    Ds   jun05 335:41 
postgres: stats collector process
postgres  3295  0.0  0.0 262220  1460 ?    Ss   jun05   0:11 
postgres: bgworker: logical replication launcher
postgres  3393  0.0  0.2 265792 40452 ?    Ss   jun05  15:36 
postgres: engine engine ::1(51664) idle
postgres  6105  0.3  0.0 271532 15976 ?    Ds   13:01   0:00 
postgres: autovacuum worker process   ovirt_engine_history
postgres  6216  0.2  0.0 263864 11440 ?    Ss   13:02   0:00 
postgres: autovacuum worker process   engine
postgres  6245  0.0  0.0 262888  6212 ?    Ss   13:02   0:00 
postgres: engine engine 127.0.0.1(42400) idle
postgres  6246  0.0  0.0 262844  3256 ?    Ss   13:02   0:00 
postgres: autovacuum worker process   template1
postgres 18815  0.0  0.0 262912  5852 ?    Ss   nov01   0:00 
postgres: django django 127.0.0.1(59564) idle
postgres 23148  0.0  0.2 266052 43024 ?    Ss   oct28   9:01 
postgres: engine engine 127.0.0.1(59714) idle
postgres 23149  0.0  0.0 262980  6820 ?    Ss   oct28   0:00 
postgres: engine engine 127.0.0.1(59716) idle
postgres 28784  0.0  0.0 262816  3492 ?    Ss   12:02   0:00 
postgres: ovirt_engine_history ovirt_engine_history 127

[ovirt-users] VM Portal. User can't access the details box

[Nicolás]

Hi,

We're running oVirt 4.1.8. We make an intense use of the VM Portal, as 
our students use it to access and handle their machines. We're currently 
having an issue with just one of our users. He claims that he created a 
VM, and when tried to edit its details (clicking on the pencil), a 
screen stating that the "VM Portal is experiencing some issues" is shown 
(screenshot added).


I granted a UserRole permission on a user I handle, and I don't 
experience that problem, I can edit the VM with no issues. The user also 
states that this happens on any VM he creates.


I see nothing relevant in the log regarding this issue.

Please, any hint how to debug this?

Thanks.

Nicolás
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BVKO35XCMMUIYZHWTFBSJ6Q6ET7UGCZO/

[ovirt-users] Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

Hi,

I'm restoring a full ovirt engine backup, having used the --scope=all 
option, for oVirt 4.3.


I restored the backup on a fresh CentOS7 machine. The process went well, 
but when trying to log into the restored authentication system I get the 
following message which won't allow me to log in:


  The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

Thanks.

Nicolás
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/

[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

Please, any help with this?

El 24/3/21 a las 10:05, Nicolás escribió:

Hi,

I'm restoring a full ovirt engine backup, having used the --scope=all 
option, for oVirt 4.3.


I restored the backup on a fresh CentOS7 machine. The process went 
well, but when trying to log into the restored authentication system I 
get the following message which won't allow me to log in:


  The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

Thanks.

Nicolás
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/

[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

bump...

El 26/3/21 a las 8:21, Nicolás escribió:

Please, any help with this?

El 24/3/21 a las 10:05, Nicolás escribió:

Hi,

I'm restoring a full ovirt engine backup, having used the --scope=all 
option, for oVirt 4.3.


I restored the backup on a fresh CentOS7 machine. The process went 
well, but when trying to log into the restored authentication system 
I get the following message which won't allow me to log in:


  The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

Thanks.

Nicolás
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/N6Q4EEC3KKK7PDXHNUO4EP5QZSG5FBGI/

[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

Hi Shani,

El 6/4/21 a las 15:15, Shani Leviim escribió:

Hi,
Did you try to refresh the page and try again?


Yes, several times. Also different browsers with no difference.


Can you share a screenshot?


Sure. Adding the screenshot in this e-mail. This happens after 
authenticating like admin (internal) on either the administration panel 
or the VM portal.


Thanks.



*Regards,
*
*Shani Leviim
*


On Tue, Apr 6, 2021 at 4:20 PM Nicolás <mailto:nico...@devels.es>> wrote:


bump...

El 26/3/21 a las 8:21, Nicolás escribió:
> Please, any help with this?
>
> El 24/3/21 a las 10:05, Nicolás escribió:
>> Hi,
>>
>> I'm restoring a full ovirt engine backup, having used the
--scope=all
>> option, for oVirt 4.3.
>>
>> I restored the backup on a fresh CentOS7 machine. The process went
>> well, but when trying to log into the restored authentication
system
>> I get the following message which won't allow me to log in:
>>
>>   The provided authorization grant for the auth code has expired.
>>
    >> What does that mean and how can it be fixed?
>>
>> Thanks.
>>
>> Nicolás
>> ___
>> Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
>> To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>>

https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCOTJCNOSALL6U544KG5A/
> ___
> Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
> To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
>

https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWVYJYEJTW6ZSTZSMOJWC/
___
Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-le...@ovirt.org
<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/N6Q4EEC3KKK7PDXHNUO4EP5QZSG5FBGI/



___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5372JXMK24HNNOESWBQNJVG3B72MPSL7/

[ovirt-users] Re: Faild ovirt-websocket-proxy.

[Nicolás]

This is your error, which is pretty straightforward:

   Apr 28 02:03:54ovirt.hostedengine.com ovirt-websocket-proxy.py
   [1694]: ovirt-websocket-proxy [1694] ERROR run: 554 Error: SSL_ONLY
   is set but SSL_CERTIFICATE or SSL_KEY file not found.

You have to edit your 
/etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf file and 
set both SSL_CERTIFICATE and SSL_KEY values. This is my config:


   PROXY_PORT=6100
   SSL_CERTIFICATE=/etc/ssl/certs/mycert.cert
   SSL_KEY=/etc/ssl/private/mycert.key
   FORCE_DATA_VERIFICATION=False
   CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
   SSL_ONLY=True

Hope this helps.

El 28/4/21 a las 11:00, jesad...@gmail.com escribió:

Hello again.
After getting the hosted-engine vm back, now I have the following problem. I 
can't use the graphic console. The websocket-proy fails me. Surely when I 
update the certificates I have missed some intermediate step, but I do not know 
how to follow.
Anyone know of a link to follow the certificate change procedure in the 
websocket-proxy service.
Thank you.
PS: Here I leave the output of the service:
● ovirt-websocket-proxy.service - oVirt Engine websockets proxy
Loaded: loaded (/usr/lib/systemd/system/ovirt-websocket-proxy.service; 
enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Wed 2021-04-28 02:03:54 UTC; 7h ago
   Process: 1694 ExecStart = / usr / share / ovirt-engine / services / 
ovirt-websocket-proxy / ovirt-websocket-proxy.py --systemd = notify $ 
EXTRA_ARGS start (code = exited, status = 1 / FAILURE)
  Main PID: 1694 (code = exited, status = 1 / FAILURE)

Apr 28 02:03:53 ovirt.myhostedengine.com systemd [1]: Starting oVirt Engine 
websockets proxy ...
Apr 28 02:03:54 ovirt.myhostedengine.com ovirt-websocket [1694]: 2021-04-28 02: 
03: 54,614 +  ovirt-websocket-proxy: ERROR run: 554 Error: SSL_ONLY is set 
but SSL_CERTIFICATE or SSL_KEY file not found.
Apr 28 02:03:54ovirt.hostedengine.com ovirt-websocket-proxy.py [1694]: 
ovirt-websocket-proxy [1694] ERROR run: 554 Error: SSL_ONLY is set but 
SSL_CERTIFICATE or SSL_KEY file not found.
Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: 
ovirt-websocket-proxy.service: main process exited, code = exited, status = 1 / 
FAILURE
Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: Failed to start oVirt 
Engine websockets proxy.
Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: Unit 
ovirt-websocket-proxy.service entered failed state.
Apr 28 02:03:54 ovirt.myhostedengine.com systemd [1]: 
ovirt-websocket-proxy.service failed.

Sorry if I say any inconsistencies, but I'm new to this whole ovirt topic.
Thanks again.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/27OKNERV7RAKGTI6UWFEVQ4J6JUCUQA2/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2SIEHDTISAHB6EFEZNJZFWF6DCKMMCVL/

[ovirt-users] Re: VM-Pool is already attached to a User

[Nicolás]

Hi,

It's possible that you bumped into:

Original bug: https://bugzilla.redhat.com/show_bug.cgi?id=1462236
Downstream clone: https://bugzilla.redhat.com/show_bug.cgi?id=1635337.

It has been solved in 4.3.5.

Regards,

Nicolás

El 2/7/21 a las 13:55, Dominique D escribió:

I created a VM pool (20 Windows) and the first 6 users took a virtual machine 
in the VM portal.

the following other users have this message

"Cannot attach VM to VM-Pool. VM-Pool is already attached to a User"

I have 15 users and 20 VMs available, do you know why I have this message ?

I have no user registered in the permissions tab of the vm available.

ovirt 4.4.1

Thank you.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BBUPBG4X4TZ5NJC5ZAZO4OJ56MYGS436/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZQS46LT4CTV5XCXC3L7OGFBJY3OLY2H2/

[ovirt-users] The provided authorization grant for the auth code has expired.

[Nicolás]

Hi,

A time ago I posted a similar question and I couldn't get it solved. I 
couldn't spend more time on this up until now, so I'm trying again and 
having the same error, which I'm unable to fix. I would really 
appreciate some help since I cannot find any documentation for this.


I'm restoring a full ovirt engine backup, having used the --scope=all 
option, for oVirt 4.3.


I restored the backup on a fresh CentOS7 machine. The process went well, 
but when trying to log into the restored authentication system I get the 
following message which won't allow me to log in:


  The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

I'm also attaching a screenshot.

Thanks.

Nicolás
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/37DLCDTPAOZHUQS76KNP4HW7V42KMNMW/

[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

Hi Didi,

El 7/4/21 a las 9:27, Yedidyah Bar David escribió:

On Wed, Mar 24, 2021 at 12:07 PM Nicolás  wrote:

Hi,

I'm restoring a full ovirt engine backup, having used the --scope=all
option, for oVirt 4.3.

I restored the backup on a fresh CentOS7 machine. The process went well,
but when trying to log into the restored authentication system I get the
following message which won't allow me to log in:

The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

Can you please check also this thread:

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFIADZPL6JOPDETJ23CZ/

What version was used for backup, and what version for restore?


For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used.

For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used.



Did you have a 3rd-party CA cert installed?


I am using a custom LetsEncrypt certificate in apache. I have this 
certificate configured in httpd and ovirt-websocket-proxy, but it's 
exactly the same certificate I have configured in the oVirt installation 
that was backed up (as I understand it, it's not the same case than the 
one described in the link - I might be wrong). So I copied the same 
certificate on the other side too.



Please verify that it was backed up and restored correctly, or manually
reinstalled after restore.


As per the logs, both processes ended correctly, no errors showed up. I 
also run the 'engine-setup' command on the restored machine, and it 
ended with no errors/warnings.


I'm attaching an engine.log of the restored node in case it helps, from 
the moment I restart the engine and try to log in.


Thanks for any help regarding this, as I can't figure out what else 
could be happening.


Nicolás


Good luck and best regards,
--
Didi





engine2.log.tar.gz
Description: application/gzip
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3VPJ5GDTHYOQTBAWLIJR/

[ovirt-users] Re: Restored engine backup: The provided authorization grant for the auth code has expired.

[Nicolás]

Hi,

As I see this is an issue hard to get help on, I'll ask it otherwise:

Alternatively to backup and restore, is there a way to migrate an 
oVirt-manager installation to other machine? We're trying to move the 
manager machine since the current physical machine is getting short of 
resources, and we already have a prepared physical host to migrate it to.


If there's an alternative way to migrate it, I'd be very grateful if 
someone could shed some light on it.


Thanks.

El 2/8/21 a las 13:02, Nicolás escribió:

Hi Didi,

El 7/4/21 a las 9:27, Yedidyah Bar David escribió:

On Wed, Mar 24, 2021 at 12:07 PM Nicolás  wrote:

Hi,

I'm restoring a full ovirt engine backup, having used the --scope=all
option, for oVirt 4.3.

I restored the backup on a fresh CentOS7 machine. The process went 
well,
but when trying to log into the restored authentication system I get 
the

following message which won't allow me to log in:

    The provided authorization grant for the auth code has expired.

What does that mean and how can it be fixed?

Can you please check also this thread:

https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFIADZPL6JOPDETJ23CZ/ 



What version was used for backup, and what version for restore?


For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used.

For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was 
used.




Did you have a 3rd-party CA cert installed?


I am using a custom LetsEncrypt certificate in apache. I have this 
certificate configured in httpd and ovirt-websocket-proxy, but it's 
exactly the same certificate I have configured in the oVirt 
installation that was backed up (as I understand it, it's not the same 
case than the one described in the link - I might be wrong). So I 
copied the same certificate on the other side too.



Please verify that it was backed up and restored correctly, or manually
reinstalled after restore.


As per the logs, both processes ended correctly, no errors showed up. 
I also run the 'engine-setup' command on the restored machine, and it 
ended with no errors/warnings.


I'm attaching an engine.log of the restored node in case it helps, 
from the moment I restart the engine and try to log in.


Thanks for any help regarding this, as I can't figure out what else 
could be happening.


Nicolás


Good luck and best regards,
--
Didi




___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3VPJ5GDTHYOQTBAWLIJR/


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/54CDGSH5DOHZJLCKLB625LC2FCFEH47H/

[ovirt-users] Re: Using third-party certificate: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[Nicolás]

Please, any help with this?

El 29/9/21 a las 13:21, nico...@devels.es escribió:

Hi,

I'm making a bare metal oVirt installation, version 4.4.8. 
'ovirt-engine' command ends well, however, we're using a third-party 
certificate (from LetsEncrypt) both for the apache server and the 
ovirt-websocket-proxy. So we changed configuration files regarding 
httpd and ovirt-websocket-proxy.


Once changed the configurations, if I try to log in to the oVirt 
engine, I get a "PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to 
find valid certification path to requested target" error.


In prior versions we used to add the chain to the 
/etc/pki/ovirt-engine/.truststore file, however, simply listing the 
current certificates seems not to be working on 4.4.8.


  # LANG=C keytool -list -keystore /etc/pki/ovirt-engine/.truststore 
-alias intermedia_le -storepass mypass

  keytool error: java.io.IOException: Invalid keystore format

Is there something I'm missing here?

Thank
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VWVBQGIWJSPWVTV5UK2I2VXBNDV6GSS/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VKYBE6TJZFMAXX2G6GPMXIQYW7F5LABY/