Re: [Users] oVirt-3.2 users creating snapshots fail
Hi Karli I've tried to reproduce this bug in 3.2 but couldn't. Here is what I did. tell me where you did something different. - created a DC called dc_a - granted VmCreator roll to my_user - added a quota called quota_a to dc_a (unlimited resources for cpu, memory and storage). quota covers all clusters and all storage domains. - added my_user as a consumer of quota_a logged on to user portal as my_user: - created a new VM (consuming quota_a) - added a disk to the VM (consuming quota_a) - created snapshot from that vm everything looks ok. the snapshot was created thanks ofri - Original Message - From: Karli Sjöberg karli.sjob...@slu.se To: Ofri Masad oma...@redhat.com Cc: users@ovirt.org Sent: Monday, August 19, 2013 8:26:06 AM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail sön 2013-08-18 klockan 03:01 -0400 skrev Ofri Masad: Hi Karli, First of all, thank you for your feedback. I am not quite sure the thread you are referring to is relevant to the bug you are witnessing. The bug in the thread was fixed only in 3.3 because it was only introduced in 3.3 (the behavior may be the same). anyway, I will try to reproduce your bug. meanwhile, try to verify the following: - a storage quota exist which apply to the SD that the VM disks are located on. - the user is defined a consumer of that quota - the disks of the VM are consuming that quota Yes, yes and yes:) Still won´t let anyone snapshot. No one can snapshot even if I assign to an unlimited quota, as long as it´s active(tried both audit and enforcing), no one is allowed to snapshot:( when creating a snapshot the user is consuming quota (the same quota the disk is consuming). so, if the user does not have consumer permission for that quota, he cannot create a snapshot. thanks Ofri - Original Message - From: Karli Sjöberg karli.sjob...@slu.semailto:karli.sjob...@slu.se To: users@ovirt.orgmailto:users@ovirt.org Sent: Wednesday, August 14, 2013 4:25:50 PM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail Well, well, looki here, the issue is reported by at least two more users: http://lists.ovirt.org/pipermail/users/2013-June/014813.html Reported fixed already for 3.3... Whereas I´ve just been able to upgrade to 3.2 after five months of bang-head-against-wall:ing:( I would very much like to see an oVirt-3.2.3 that includes this fix for Quotas, because sure enough just disabling quota made users able to take snapshots again, when quotas are something we plan on using quite heavily. /Karli ons 2013-08-14 klockan 12:45 + skrev Karli Sjöberg: Hi! After upgrading from oVirt-3.1 to oVirt-3.2, users´s ability to create snapshots has disappeared. The only way to give users permission to take snapshots that I´ve found so far is to give them DataCenterAdmin or Super User in either System or DataCenter, and any other given Role is met by this lonely line in engine.log: 2013-08-14 14:27:01,106 WARN [org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand] (ajp--127.0.0.1-8702-19) CanDoAction of action CreateAllSnapshotsFromVm failed. Reasons:VAR__ACTION__CREATE,VAR__TYPE__SNAPSHOT,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION I even tried to create an admin Role with everything checked, all permissions granted, but a user or group associated with that Role still couldn´t take snapshots. Only the built-in Admin roles seems to function correctly. How can I start to troubleshoot this issue? -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.semailto:karli.sjob...@slu.se -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.semailto:karli.sjob...@slu.se ___ Users mailing list Users@ovirt.orgmailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.semailto:karli.sjob...@adm.slu.se ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt-3.2 users creating snapshots fail
Hi Karli, First of all, thank you for your feedback. I am not quite sure the thread you are referring to is relevant to the bug you are witnessing. The bug in the thread was fixed only in 3.3 because it was only introduced in 3.3 (the behavior may be the same). anyway, I will try to reproduce your bug. meanwhile, try to verify the following: - a storage quota exist which apply to the SD that the VM disks are located on. - the user is defined a consumer of that quota - the disks of the VM are consuming that quota when creating a snapshot the user is consuming quota (the same quota the disk is consuming). so, if the user does not have consumer permission for that quota, he cannot create a snapshot. thanks Ofri - Original Message - From: Karli Sjöberg karli.sjob...@slu.se To: users@ovirt.org Sent: Wednesday, August 14, 2013 4:25:50 PM Subject: Re: [Users] oVirt-3.2 users creating snapshots fail Well, well, looki here, the issue is reported by at least two more users: http://lists.ovirt.org/pipermail/users/2013-June/014813.html Reported fixed already for 3.3... Whereas I´ve just been able to upgrade to 3.2 after five months of bang-head-against-wall:ing:( I would very much like to see an oVirt-3.2.3 that includes this fix for Quotas, because sure enough just disabling quota made users able to take snapshots again, when quotas are something we plan on using quite heavily. /Karli ons 2013-08-14 klockan 12:45 + skrev Karli Sjöberg: Hi! After upgrading from oVirt-3.1 to oVirt-3.2, users´s ability to create snapshots has disappeared. The only way to give users permission to take snapshots that I´ve found so far is to give them DataCenterAdmin or Super User in either System or DataCenter, and any other given Role is met by this lonely line in engine.log: 2013-08-14 14:27:01,106 WARN [org.ovirt.engine.core.bll.CreateAllSnapshotsFromVmCommand] (ajp--127.0.0.1-8702-19) CanDoAction of action CreateAllSnapshotsFromVm failed. Reasons:VAR__ACTION__CREATE,VAR__TYPE__SNAPSHOT,USER_NOT_AUTHORIZED_TO_PERFORM_ACTION I even tried to create an admin Role with everything checked, all permissions granted, but a user or group associated with that Role still couldn´t take snapshots. Only the built-in Admin roles seems to function correctly. How can I start to troubleshoot this issue? -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.se -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.se ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] user can not create a snapshot
Hi Andrej, Actually, we haven't been able to reproduce this bug. Could you please give me some details: - what version are you using? - do you create a thin provision disk from template or a clone? - do you have only one disk on the template or many? - when creating a vm from template, do you assign same quota to the VM and the disks or a different one? Thanks, Ofri - Original Message - From: Andrej Bagon andrej.ba...@arnes.si To: Allon Mureinik amure...@redhat.com Cc: users users@ovirt.org Sent: Wednesday, June 12, 2013 3:42:09 PM Subject: Re: [Users] user can not create a snapshot Hi, I digged into the problem and the user has the UserVmManager privileges on the VM. The problem must be with the creation of the VM from template, where the userfrontend does not assign the right quota to the disk when creating a vm from template. This was also notified by Jure in the [Users] Disk quota and templates bug? thread. If I assign the right dick quota to the user (his quota) the snapshoting works. We will wait for the fix on the create vm from template disk quota fix. Thank you. On 06/11/2013 04:00 PM, Allon Mureinik wrote: The required action group is MANIPULATE_VM_SNAPSHOTS. It can be found in the roles UserVmManager, SuperUser, ClusterAdmin and DataCenterAdmin. If that does not do the trick - check the user's quota - maybe he's out. From: Andrej Bagon andrej.ba...@arnes.si To: users users@ovirt.org Sent: Monday, June 10, 2013 1:08:13 PM Subject: [Users] user can not create a snapshot Hi, I have a user with VmCreator rights in the datacenter. He can create, edit, manipulate his own virtual macihnes, but he can not add a snapshot to his own virtual machines. What rights do I have to give him also, so he can have the snapshot functionality as well? Right now he does get a Error while executing action: User is not authorized to perform this action. message. The Virtual machine is powered down at the time of taking a snapshot. Thank You. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] user can not create a snapshot
Hi Andrej thank you very much for the feedback. this bug was fixed for oVirt 3.3 (http://gerrit.ovirt.org/#/c/12618/) thanks, Ofri - Original Message - From: Andrej Bagon andrej.ba...@arnes.si To: Ofri Masad oma...@redhat.com Cc: Allon Mureinik amure...@redhat.com, users users@ovirt.org Sent: Wednesday, June 12, 2013 4:53:35 PM Subject: Re: [Users] user can not create a snapshot Hi, we are using Centos6.4 withoVirt Engine Version: 3.2.2-1.1.el6. We created a VM in admin portal, installed centos6 minimal and created a template. The template has a thin provisioned disk. The disk is shared to everyone. Then as a user in the frontend portal (user has quota, and vmcreator permisions on datacenter) we create a server with this template - in the resources tab we have to check thin for template provisioning (on clone we get a permission denied), and the user quota is selected ok for the user. When the VM is created, we check in the admin backend, we see that the disk quota is not right, but is the quota from the template. If we change the disk quota to the user, he can then make clones, his quota is reported right and everything works as expected. Andrej On 06/12/2013 03:42 PM, Ofri Masad wrote: Hi Andrej, Actually, we haven't been able to reproduce this bug. Could you please give me some details: - what version are you using? - do you create a thin provision disk from template or a clone? - do you have only one disk on the template or many? - when creating a vm from template, do you assign same quota to the VM and the disks or a different one? Thanks, Ofri - Original Message - From: Andrej Bagon andrej.ba...@arnes.si To: Allon Mureinik amure...@redhat.com Cc: users users@ovirt.org Sent: Wednesday, June 12, 2013 3:42:09 PM Subject: Re: [Users] user can not create a snapshot Hi, I digged into the problem and the user has the UserVmManager privileges on the VM. The problem must be with the creation of the VM from template, where the userfrontend does not assign the right quota to the disk when creating a vm from template. This was also notified by Jure in the [Users] Disk quota and templates bug? thread. If I assign the right dick quota to the user (his quota) the snapshoting works. We will wait for the fix on the create vm from template disk quota fix. Thank you. On 06/11/2013 04:00 PM, Allon Mureinik wrote: The required action group is MANIPULATE_VM_SNAPSHOTS. It can be found in the roles UserVmManager, SuperUser, ClusterAdmin and DataCenterAdmin. If that does not do the trick - check the user's quota - maybe he's out. From: Andrej Bagon andrej.ba...@arnes.si To: users users@ovirt.org Sent: Monday, June 10, 2013 1:08:13 PM Subject: [Users] user can not create a snapshot Hi, I have a user with VmCreator rights in the datacenter. He can create, edit, manipulate his own virtual macihnes, but he can not add a snapshot to his own virtual machines. What rights do I have to give him also, so he can have the snapshot functionality as well? Right now he does get a Error while executing action: User is not authorized to perform this action. message. The Virtual machine is powered down at the time of taking a snapshot. Thank You. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Disk quota and templates bug?
Hi Jure, The opened bug is not suppose to be in version 3.2.2 I've tried to reproduce the bug in 3.2.2 but could not reproduce it. I would like to get to the bottom of this and in order to do so I'll need your help with a detailed description of the bug. few things I would like to make sure: - The user which tries to create the VM from template is defined quota consumer for at least one quota. - The user quota include resource allocation to the storage domain which holds the VM disk. thanks in advance, Ofri - Original Message - From: Doron Fediuck dfedi...@redhat.com To: Greg Padgett gpadg...@redhat.com Cc: users@ovirt.org Sent: Thursday, May 30, 2013 9:31:50 AM Subject: Re: [Users] Disk quota and templates bug? - Original Message - From: Greg Padgett gpadg...@redhat.com To: Jure Kranjc jure.kra...@arnes.si Cc: users@ovirt.org, Doron Fediuck dfedi...@redhat.com Sent: Thursday, May 30, 2013 3:02:34 AM Subject: Re: [Users] Disk quota and templates bug? On 05/29/2013 10:05 AM, Jure Kranjc wrote: Hi, we've encountered an quota allocation problem which seems like a bug. Using engine 3.2.2. on CentOS, datacenter in enforced quota mode. Scenario: - Create a virtual machine, seal it and create template from it. Assign some quota to it. - Create a new user, set new quota limits to his username - This user creates a new VM from this template. In new server/desktop dialog, resource allocation, new disk gets set to user's quota (user only has permission for it's own quota). Create VM. - When VM is created it inherits the templates quota and not user's, as it should. So user is using templates disk quota. Quota for memory and vcpu works ok. No errors in engine.log. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi Jure, Thanks for reporting this. I'm not well-versed enough with storage quotas to assess, but adding Doron who should be able to help. Thanks, Greg Hi Guys, This is indeed a bug which was reported a few weeks ago. It should be handled for 3.3.0. As a work around you should be able to modify the quota allocation after the VM is created. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Where is live block migration?
Hi nnex, I'm not sure about your question. - If you are trying to migrate a VM (this is the wiki you have attached) then the 'Migrate' option is in the right click menu opened when clicking on a **running** virtual machine in the virtual machines tab. Migrating a VM is changing the host on which the VM is running (not moving the disks). - What i think you were looking for is 'Move Disk'. This feature allows you to move your disk from one storage to domain to another. 1. Select the Disks tab. 2. Select the virtual disk or disks to move. 3. Click Move to open the Move Disk(s) window. (button is on the top menu and right click menu) 4. Use the drop-down menu or menus to select the Target data domain. 5. Click OK to move the disks and close the window. see this documentation: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Administration_Guide/Moving_a_Virtual_Machine_Hard_Disk_Between_Data_Domains.html T All the best Ofri - Original Message - From: nnex n...@mail.ru To: users@ovirt.org Sent: Monday, March 11, 2013 7:45:08 AM Subject: [Users] Where is live block migration? Hi all. I'm successfully install a oVirt 3.2(fedora 18 distr). I'm successfuly deploy cluster also with two NFS storage also. But I'm can't move block device in VM to 2nd storage? i can't locate move button according this http://www.ovirt.org/Features/Design/StorageLiveMigration guide. Please help anyone. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Exporting backing up Snapshots
Hi Neil, If I understand you correctly, you are looking for a way to save the full state of the VM+Disks like an image. Snapshots are actually just delta from the former state. that is the reason they do not consume as much space as a full image. What you can do is use the export feature for VMs. just export the VM. by doing so you are saving both the VM state and the Disks state. Of course, this would require more space than used in a snapshot. Ofri - Original Message - From: Neil nwilson...@gmail.com To: users@ovirt.org Sent: Monday, March 11, 2013 2:00:53 PM Subject: [Users] Exporting backing up Snapshots Hi guys, I'm working on automating snapshots(not live, just paused) from my oVirt setup at the moment, but I can't seem to find out how to export the snapshots for backing up purposes so they can be moved to another storage domain etc. Please could someone point me in the right direction Thank you! Regards. Neil Wilson. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Adding external events to oVirt
Not sure if this will help but it seems that the current API calls for a different syntax: custom_event_id was changed to custom_id event_flood_in_sec was changed to flood_rate see if this helps Ofri - Original Message - From: satheesh hegde satheesh_he...@yahoo.co.in To: users@ovirt.org Sent: Thursday, March 7, 2013 6:36:25 PM Subject: [Users] Adding external events to oVirt Hi, I tried exploring the feature of adding external events in oVirt. ( Version 3.2 ) I just wrote a JavaScript to fetch events and it wroked fine.( GET operation to URL http://IP/api/events ). But when tried with POST operation, to add my own events, it threw error 405 Method not allowed . (URL http://IP/api/events ). (The html file is not included in any plugin code, its standalone file). (The data I passed is as specified in link: http://www.ovirt.org/Features/Design/DetailedExternalEvents;). What went wrong? Is it not supported on oVirt3.2 or the URL is incorrect? Regards Satheesh J ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] When does oVirt auto-migrate, and what does HA do?
- Original Message - From: Eli Mesika emes...@redhat.com To: Rob Zwissler r...@zwissler.org Cc: users@ovirt.org Sent: Wednesday, March 6, 2013 12:00:47 AM Subject: Re: [Users] When does oVirt auto-migrate, and what does HA do? - Original Message - From: Rob Zwissler r...@zwissler.org To: users@ovirt.org Sent: Tuesday, March 5, 2013 10:09:43 PM Subject: [Users] When does oVirt auto-migrate, and what does HA do? In what scenarios does oVirt auto-migrate VMs? I'm aware that it currently migates VMs when putting a host into maintenance, or when manually selecting migration via the web interface, but when else will hosts be migrated? Is there any automatic compensation for resource imbalances between hosts? I could find no documentation on this subject, if I missed it I apologize! The following is taken from the upcoming 3.2 docs: Automatic Virtual Machine Migration Red Hat Enterprise Virtualization Manager automatically initiates live migration of all virtual machines running on a host when the host is moved into maintenance mode. The destination host for each virtual machine is assessed as the virtual machine is migrated, in order to spread the load across the cluster. The Manager automatically initiates live migration of virtual machines in order to maintain load balancing or power saving levels in line with cluster policy. While no cluster policy is defined by default, it is recommended that you specify the cluster policy which best suits the needs of your environment. You can also disable automatic, or even manual, live migration of specific virtual machines where required. To set the auto cluster auto migration policy (load balancing / power saving) you can open the administrator portal and go to the 'Cluster' tab. In the 'General' sub tab click the 'Edit Policy' button (or click 'edit' on the selected cluster). In order to prevent a specific VM from being automatically migrated you can go to the 'Virtual Machines' tab and click 'edit' on the selected machine. In the pop-up window go to 'Host' tab and set the migration policy to this specific machine. In a related question, exactly what does enabling HA (Highly Available) mode do? The only documentation I could find on this is at http://www.ovirt.org/OVirt_3.0_Feature_Guide#High_availability but it is a bit vague, and being from 3.0, possibly out of date. Can someone briefly describe the HA migration algorithm? High availability is recommended for virtual machines running critical workloads. High availability can ensure that virtual machines are restarted in the following scenarios: When a host becomes non-operational due to hardware failure. When a host is put into maintenance mode for scheduled downtime. When a host becomes unavailable because it has lost communication with an external storage resource. When a virtual machine fails due to an operating system crash. High availability means that a virtual machine will be automatically restarted if its process is interrupted. This happens if the virtual machine is terminated by methods other than powering off from within the guest or sending the shutdown command from the Manager. When these events occur, the highly available virtual machine is automatically restarted, either on its original host or another host in the cluster. High availability is possible because the Red Hat Enterprise Virtualization Manager constantly monitors the hosts and storage, and automatically detects hardware failure. If host failure is detected, any virtual machine configured to be highly available is automatically restarted on another host in the cluster. In addition, all virtual machines are monitored, so if the virtual machine's operating system crashes, a signal is sent to automatically restart the virtual machine. With high availability, interruption to service is minimal because virtual machines are restarted within seconds with no user intervention required. High availability keeps your resources balanced by restarting guests on a host with low current resource utilization, or based on any workload balancing or power saving policies that you configure. This ensures that there is sufficient capacity to restart virtual machines at all times. Thanks, Rob ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VMWare vSphere resource pools access control like feature?
Hi Jiri, Maor is right. What you are looking for is Quota. See the videos explaining about Quota: http://www.youtube.com/playlist?feature=plcplist=PL2NsEhIoqsJFf2HWErznfQ-CS5fQdSRGC We'll be more then happy to help and answer questions. Ofri Masad - Original Message - From: Maor Lipchuk mlipc...@redhat.com To: Jiri Belka jbe...@redhat.com Cc: users@ovirt.org Sent: Wednesday, January 9, 2013 1:34:01 PM Subject: Re: [Users] VMWare vSphere resource pools access control like feature? Hi Jiri, Perhaps you are referring to quota (http://www.ovirt.org/Features/Quota) Regards, Maor On 01/09/2013 12:15 PM, Jiri Belka wrote: Hi, in vSphere you can create a resource pool[1] and define to it access control and delegation... quote Access control and delegation - When a top-level administrator makes a resource pool available to a department-level administrator, that administrator can then perform all virtual machine creation and management within the boundaries of the resources to which the resource pool is entitled by the current shares, reservation, and limit settings. Delegation is usually done in conjunction with permissions setting /quote Is it possible in oVirt? The usage here is to assing roles to a resource pool. You could do this with different DC/cluster in oVirt, but it looks like it is impossible if having _just_ one host (thus one DC/cluster). jirib [1] http://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.resmgmt.doc_50%2FGUID-AA95D1D1-55C0-419D-9E1A-C523C138CC65.html ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Quota screen casts
Hi everybody. Some new Quota screen casts have been uploaded to You-Tube. available at: http://www.youtube.com/playlist?list=PL2NsEhIoqsJFf2HWErznfQ-CS5fQdSRGCfeature=view_all Check out the new videos and learn about: - Introduction to Quota - Setting up Quota in oVirt 3.1 Web-Admin - Using Quota in oVirt 3.1 Web-Admin - Using Quota in oVirt 3.1 User-Portal Ofri Masad ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
