Re: [ovirt-users] 答复: Ovirt 3.5 Bug !!!!!!!!!!!!!!!!!!
God ! Damn! It works! Thank you very much ! F.You are really awesome! Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Thu, 27 Nov 2014 08:14:19 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: users@ovirt.org; stira...@redhat.com Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! Hi guys, Simone: I don't think spice proxy helps in this case - the customers have two separate networks. Where should be the proxy placed then? Paul: - I still think that solution with a new display network accessible for both customers should be the intended way to do it. - But if you can't do it, you can try deploying a small vdsm hook i just wrote on all your hosts. It makes spice/vnc server listen on all interfaces (exactly the behavior of 3.4 by default). You can find it here [1]. You can deploy this hook (.py file) by placing the file in the hooks directory (/usr/libexec/vdsm/hooks/before_vm_start on Fedora) and renaming it to something meaningful (console_listen_on_all_ifs.py). Then configure in [vars] section /etc/vdsm/vdsm.conf by putting this line: console_listen_on_all_ifs = true Then restart vdsm and try running a vm and check if spice/vnc listens on all ifs. Cheers, F. [1]: http://gerrit.ovirt.org/#/c/35661/ - Original Message - From: Simone Tiraboschi stira...@redhat.com To: PaulCheung eq2...@msn.com Cc: Frantisek Kobzik fkob...@redhat.com, users@ovirt.org Sent: Thursday, November 27, 2014 10:30:38 AM Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! - Original Message - From: PaulCheung eq2...@msn.com To: Frantisek Kobzik fkob...@redhat.com Cc: users@ovirt.org Sent: Thursday, November 27, 2014 3:02:44 AM Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! Hi F, Is there a way make the spice port listening on all network interface ? Keep in in mind that you can also use the Spice Proxy, it could be a simpler design. http://www.ovirt.org/Features/Spice_Proxy Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Wed, 26 Nov 2014 08:47:53 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: xiec.f...@cn.fujitsu.com; users@ovirt.org; lver...@redhat.com; asegu...@redhat.com Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! Hi, But the 3.5 behavior is correct IMO. I think there are two possible solutions: 1, Create a brand new display network on the cluster (it'll be ONLY for displays) and make sure it's accessible by all clients. , or 2, Write a firewall rule or a VDSM hook that translates the spice/vnc traffic from vlans to the management network. (3, there is also a possibility to set 'display' attribute of your management network to false in the database. But I highly don't recommend this as the results aren't guaranteed.). Toni, could you check my suggestions, whether they are correct? Thanks! F. From: PaulCheung eq2...@msn.com To: Frantisek Kobzik fkob...@redhat.com Cc: Chao Xie xiec.f...@cn.fujitsu.com, users@ovirt.org, Lior Vernia lver...@redhat.com Sent: Wednesday, November 26, 2014 11:05:21 AM Subject: RE: [ovirt-users] 答复: Ovirt 3.5 Bug !! Except the display network, other network user can't telnet the 59xx spice port. I guess because the spice port only listening in this display network. But, all spice port can listening in all network interface in 0virt 3.4, why Ovirt 3.5 not provide this ? If I can't choose more than one network to display the spice port oVirt 3.5 , is there a way for me to down grade to oVirt 3.4? Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Wed, 26 Nov 2014 04:37:39 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: xiec.f...@cn.fujitsu.com; users@ovirt.org; lver...@redhat.com Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! Hi, I don't think multiple display network is possible within single cluster. How would engine know which is the correct one for given client? Also that would mean vdsm would have to start spice server on multiple interfaces and I believe it's not capable of this. But maybe I'm missing something. I'll try adding Lior from networking team. Lior, can you take a quick glance on this thread? Thanks! Franta. - Original Message - From: PaulCheung eq2...@msn.com To: Chao Xie xiec.f...@cn.fujitsu.com Cc: users@ovirt.org Sent: Wednesday, November 26, 2014 6:19:43 AM Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! JUST PS. What I mean is if they make it into checkbox, it would sloved my problem. Sorry for my poor English! Sincerely yours, PaulCheung tel: 180-8882-7173 From: xiec.f...@cn.fujitsu.com To: eq2
Re: [ovirt-users] 答复: Ovirt 3.5 Bug !!!!!!!!!!!!!!!!!!
Except the display network, other network user can't telnet the 59xx spice port. I guess because the spice portonly listening in this display network. But, all spice port can listening in all network interface in 0virt 3.4, why Ovirt 3.5 not provide this ? If I can't choose more than one network to display the spice port oVirt 3.5 , is there a way for me to down grade to oVirt 3.4? Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Wed, 26 Nov 2014 04:37:39 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: xiec.f...@cn.fujitsu.com; users@ovirt.org; lver...@redhat.com Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! Hi, I don't think multiple display network is possible within single cluster. How would engine know which is the correct one for given client? Also that would mean vdsm would have to start spice server on multiple interfaces and I believe it's not capable of this. But maybe I'm missing something. I'll try adding Lior from networking team. Lior, can you take a quick glance on this thread? Thanks! Franta. - Original Message - From: PaulCheung eq2...@msn.com To: Chao Xie xiec.f...@cn.fujitsu.com Cc: users@ovirt.org Sent: Wednesday, November 26, 2014 6:19:43 AM Subject: Re: [ovirt-users] 答复: Ovirt 3.5 Bug !! JUST PS. What I mean is if they make it into checkbox, it would sloved my problem. Sorry for my poor English! Sincerely yours, PaulCheung tel: 180-8882-7173 From: xiec.f...@cn.fujitsu.com To: eq2...@msn.com Subject: 答复: [ovirt-users] Ovirt 3.5 Bug !! Date: Wed, 26 Nov 2014 05:15:22 + Hi, Paul Did you change the code and let the “Migration Display” to checkbox ?Or just use PS to change the photo? 发件人 : users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] 代表 PaulCheung 发送时间 : 2014 年 11 月 26 日 11:27 收件人 : Frantisek Kobzik 抄送 : users@ovirt.org 主题 : Re: [ovirt-users] Ovirt 3.5 Bug !! Dear ALL, Can this turn into a multichoose box ? I need to display in all network interface!!! This can solve my problem now. Thank you very much! Sincerely yours, PaulCheung tel: 180-8882-7173 From: eq2...@msn.com To: fkob...@redhat.com CC: users@ovirt.org Subject: RE: [ovirt-users] Ovirt 3.5 Bug !! Date: Wed, 26 Nov 2014 10:55:44 +0800 Is there because the Display Network problem cause other network can not display ? How to enable all network's Display ? Sincerely yours, PaulCheung tel: 180-8882-7173 From: eq2...@msn.com To: fkob...@redhat.com CC: users@ovirt.org Subject: RE: [ovirt-users] Ovirt 3.5 Bug !! Date: Wed, 26 Nov 2014 09:53:33 +0800 It solved the host=kvm0x..com problem, But my guest still can't open the VM!!! User from D E, can't start the VM, except ovirt managerment network What should I do ? Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Tue, 25 Nov 2014 11:26:06 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: users@ovirt.org Subject: Re: [ovirt-users] Ovirt 3.5 Bug !! I'm not really sure if this the intended way to achieve customer separation. I don't know this field well, so I need to talk about it with my colleagues from networking team. Meanwhile you can try overriding your display address on host level like this: 1, In hosts subtab, edit host. 2, In the dialog select console. 3, Check 'Override display address', fill in corresponding host name (in your case kvm01.allwinnertech.com for host kvm01, kvm02.allwinnertech.com for kvm02 host etc) - do this for every host in the cluster. This should force returning hostnames in the .vv file. Cheers, Franta. - Original Message - From: LazyPaul eq2...@msn.com To: Frantisek Kobzik fkob...@redhat.com Cc: users@ovirt.org Sent: Tuesday, November 25, 2014 3:51:27 PM Subject: Re: [ovirt-users] Ovirt 3.5 Bug !! My network is look like this: 3 vlan, they can ’ t visit each other, so I have 3 dns server, The console.vv file in the ovirt 3.4 the host = kvm01.allwinnertech.com after update to 3.5 the host = 172.16.1.115, this cause the VLAN 101 vlan 102 user can ’ t open 172.16.1.115, It should be : host =kvm01.allwinnertech.com --- Server management network: VLAN 100
Re: [ovirt-users] Ovirt 3.5 Bug !!!!!!!!!!!!!!!!!!
Dear all , I am very thank you for your job!150 users from China waiting for your good news! Sincerely yours, PaulCheung tel: 180-8882-7173 Date: Tue, 25 Nov 2014 04:46:01 -0500 From: fkob...@redhat.com To: eq2...@msn.com CC: users@ovirt.org Subject: Re: [ovirt-users] Ovirt 3.5 Bug !! I'm gonna take a closer look at this and will create a bug for that. Cheers, Franta. - Original Message - From: PaulCheung eq2...@msn.com To: users@ovirt.org Sent: Tuesday, November 25, 2014 8:38:18 AM Subject: [ovirt-users] Ovirt 3.5 Bug !! Dear All, After update 3.4 to 3.5 , our 150 user can't open the VM , the console.vv file host from domain name change to IP address!!! Sincerely yours, PaulCheung tel: 180-8882-7173 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] USB support always disable
Dears,Every time I set it to Native, but after I click comfirm, and start the VM, it still show Disable. Is it a bug? Actually the USB is enable. Sincerely yours, PaulCheung tel: 180-8882-7173 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Bug: Spice port changed!!!!!
Dear David:
This problem have been solve!Using the vm ID to find the spice port!
#!/bin/bashcurl -k -v -u 'admin@internal:password!' -H Content-type:
application/xml -X GET
https://172.16.1.115/api/vms/ea273653-b083-4114-9ed4-bbb0bb5d38c1
./vm.infop1=$(cat ./vm.info|grep 'port')p2=$(cat ./vm.info|grep
'secure_port')port1=${p1:0-11:4}port2=${p2:0-18:4}spicy -h 172.16.1.115 -w
123456 -p $port1 -s $port2 -f --spice-ca-file=/home/cubie/ca.crt /dev/null
21
It is awesome!But dou you know what command can start the VM if the VM
stop/power off ?
Sincerely yours,
PaulCheung
tel: 180-8882-7173
Subject: Re: [ovirt-users] Bug: Spice port changed!
From: dj...@redhat.com
To: eq2...@msn.com
CC: users@ovirt.org
Date: Mon, 22 Sep 2014 14:44:03 +0200
Paul,
Short answer: your approach will not work. I mentioned the custom hooks
and engine-config/UserDefinedVMProperties for a reason. Please follow my
advice first before asking further advice.
Longer answer: your changes to the libvirt domains would apply on next
domain cold start but that will never happen because vdsm always creates
libvirt domains as transient ones so the libvirt domain will disappear
on guest OS shutdown. On next start of the same oVirt VM, vdsm will
creates a new domain XML that will be used to start a new libvirt
transient domain.
In order to make this new libvirt domain use your desired parameters,
you have to edit the XML before it is used to start the libvirt domain
and because we humans are too slow to do that and too annoyed to do that
on every VM start, vdsm hooks mechanism was devised and a script in
before_vm_start can do that changes for you (with input variables
defined in engine-config and set in VM's custom properties).
So back to my original suggestion: do you still think that it is wise to
try method that is more complicated and less secure than the custom
launcher method?
Regards,
David
On Po, 2014-09-22 at 11:11 +0800, PaulCheung wrote:
Dear David:
I am trying figure it out using my way. So I used virsh edit vm,
I change the port the 5980 5981, but still not work!!!
I found after virsh edit, there is a xml file here /etc/libvirt/qemu
which I edit using virsh edit vm.
And I also run this command :virsh define vm.xml
also not work.Can you tell me where is the file I can fixed the
spice port.
Sincerely yours,
PaulCheung
tel: 180-8882-7173
Subject: Re: [ovirt-users] Bug: Spice port changed!
From: dj...@redhat.com
To: eq2...@msn.com
CC: users@ovirt.org
Date: Thu, 18 Sep 2014 15:27:50 +0200
Hi,
2) is not a file, it's a key in engine-config
3) is a VDSM custom hook that needs to be in all the hypervisors in
DC/Cluster
Follow vdsm custom hook documentation (I don't have a link from top
of my head but web or ML archives will surely help).
David
On Thu, 2014-09-18 at 14:51 +0800, PaulCheung wrote:
Dear David,
Thank you for your help . Your answer is very professional.
I still can't not find a way to stick with static port assignments
For I don't understand you telling me , 23, where I can find the
file to modify?
However, if you _really_ want to stick with static port
assignments,
do
the following:
1) designate the port range so that it doesn't collide with
other
ranges
in use (e.g. RHEV uses 5900-6023, so 5800-5899 could be safe)
2) add a custom VM properties to the engine for setting of port
and
tls-port
3) add a vdsm hook to before_vm_start directory on each host
that
will
add port and tlsPort parameters to the graphics element of
libvirt
domain xml
Sincerely yours,
PaulCheung
tel: 180-8882-7173
Subject: Re: [ovirt-users] Bug: Spice port changed!
From: dj...@redhat.com
To: eq2...@msn.com
CC: users@ovirt.org
Date: Wed, 17 Sep 2014 10:40:42 +0200
Hi Paul,
This behaviour is by design. It is a bad idea to override it. A
good
approach to your problem would be to write a launcher script
that
would:
1) connect to the REST API
2) get the VM connection details
3) get new VM ticket
4) write this info down to a temporary .vv file [3]
5) launch remote-viewer
Some info how to use REST API is described here [1] and .vv file
format
is documented in virt-viewer sources [2]. Please note that [1]
is a
bit
outdated:
* you can use HTTP header filter: true to be able to log in as
non-admin
* you only have to use password login once when you use
prefer: persistent-auth HTTP header and you send the cookie
you
got
in a response to first request
Re: [ovirt-users] Bug: Spice port changed!!!!!
Dear David: I am trying figure it out using my way. So I used virsh edit vm, I change the port the 5980 5981, but still not work!!! I found after virsh edit, there is a xml file here /etc/libvirt/qemu which I edit using virsh edit vm. And I also run this command :virsh define vm.xml also not work.Can you tell me where is the file I can fixed the spice port. Sincerely yours, PaulCheung tel: 180-8882-7173 Subject: Re: [ovirt-users] Bug: Spice port changed! From: dj...@redhat.com To: eq2...@msn.com CC: users@ovirt.org Date: Thu, 18 Sep 2014 15:27:50 +0200 Hi, 2) is not a file, it's a key in engine-config 3) is a VDSM custom hook that needs to be in all the hypervisors in DC/Cluster Follow vdsm custom hook documentation (I don't have a link from top of my head but web or ML archives will surely help). David On Thu, 2014-09-18 at 14:51 +0800, PaulCheung wrote: Dear David, Thank you for your help . Your answer is very professional. I still can't not find a way to stick with static port assignments For I don't understand you telling me , 23, where I can find the file to modify? However, if you _really_ want to stick with static port assignments, do the following: 1) designate the port range so that it doesn't collide with other ranges in use (e.g. RHEV uses 5900-6023, so 5800-5899 could be safe) 2) add a custom VM properties to the engine for setting of port and tls-port 3) add a vdsm hook to before_vm_start directory on each host that will add port and tlsPort parameters to the graphics element of libvirt domain xml Sincerely yours, PaulCheung tel: 180-8882-7173 Subject: Re: [ovirt-users] Bug: Spice port changed! From: dj...@redhat.com To: eq2...@msn.com CC: users@ovirt.org Date: Wed, 17 Sep 2014 10:40:42 +0200 Hi Paul, This behaviour is by design. It is a bad idea to override it. A good approach to your problem would be to write a launcher script that would: 1) connect to the REST API 2) get the VM connection details 3) get new VM ticket 4) write this info down to a temporary .vv file [3] 5) launch remote-viewer Some info how to use REST API is described here [1] and .vv file format is documented in virt-viewer sources [2]. Please note that [1] is a bit outdated: * you can use HTTP header filter: true to be able to log in as non-admin * you only have to use password login once when you use prefer: persistent-auth HTTP header and you send the cookie you got in a response to first request. In the future, the steps 2-4 will become a one step of getting a ready-to-use .vv file from the API [3] but we aren't there yet. [1] http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal [2] https://git.fedorahosted.org/cgit/virt-viewer.git/tree/src/virt-viewer-file.c#n30 [3] https://bugzilla.redhat.com/show_bug.cgi?id=1128763 However, if you _really_ want to stick with static port assignments, do the following: 1) designate the port range so that it doesn't collide with other ranges in use (e.g. RHEV uses 5900-6023, so 5800-5899 could be safe) 2) add a custom VM properties to the engine for setting of port and tls-port 3) add a vdsm hook to before_vm_start directory on each host that will add port and tlsPort parameters to the graphics element of libvirt domain xml Best regards, David On St, 2014-09-17 at 10:41 +0800, PaulCheung wrote: Dear all, After shutdown the VM, then restart the VM the Vm's spice port is changed! Because I have 10 terminal ARM-Box running spice client connected to the vm, but after the VM shutdown and start again, the vm not the one whice the one before. I wish you can let us have a option, to let the VM with a fixed spice port, like: vm1: spice port : 5900 tls:5901 vm2: 5902 5903 And I have another recommond: have a fuction to do that : if the vm shutdown by user, it will start the VM automatic. That means the VM can not be shutdown! I hope you can have this two fuction! That means a lot to those who are using Terminal box user like me. I am sorry for my poor English. But I hope you all can understand what I am saying. Sincerely yours, PaulCheung tel: 180-8882-7173 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman
Re: [ovirt-users] Bug: Spice port changed!!!!!
Dear David, Thank you for your help . Your answer is very professional. I still can't not find a way to stick with static port assignmentsFor I don't understand you telling me , 23, where I can find the file to modify? However, if you _really_ want to stick with static port assignments, do the following: 1) designate the port range so that it doesn't collide with other ranges in use (e.g. RHEV uses 5900-6023, so 5800-5899 could be safe) 2) add a custom VM properties to the engine for setting of port and tls-port 3) add a vdsm hook to before_vm_start directory on each host that will add port and tlsPort parameters to the graphics element of libvirt domain xml Sincerely yours, PaulCheung tel: 180-8882-7173 Subject: Re: [ovirt-users] Bug: Spice port changed! From: dj...@redhat.com To: eq2...@msn.com CC: users@ovirt.org Date: Wed, 17 Sep 2014 10:40:42 +0200 Hi Paul, This behaviour is by design. It is a bad idea to override it. A good approach to your problem would be to write a launcher script that would: 1) connect to the REST API 2) get the VM connection details 3) get new VM ticket 4) write this info down to a temporary .vv file [3] 5) launch remote-viewer Some info how to use REST API is described here [1] and .vv file format is documented in virt-viewer sources [2]. Please note that [1] is a bit outdated: * you can use HTTP header filter: true to be able to log in as non-admin * you only have to use password login once when you use prefer: persistent-auth HTTP header and you send the cookie you got in a response to first request. In the future, the steps 2-4 will become a one step of getting a ready-to-use .vv file from the API [3] but we aren't there yet. [1] http://www.ovirt.org/How_to_Connect_to_SPICE_Console_Without_Portal [2] https://git.fedorahosted.org/cgit/virt-viewer.git/tree/src/virt-viewer-file.c#n30 [3] https://bugzilla.redhat.com/show_bug.cgi?id=1128763 However, if you _really_ want to stick with static port assignments, do the following: 1) designate the port range so that it doesn't collide with other ranges in use (e.g. RHEV uses 5900-6023, so 5800-5899 could be safe) 2) add a custom VM properties to the engine for setting of port and tls-port 3) add a vdsm hook to before_vm_start directory on each host that will add port and tlsPort parameters to the graphics element of libvirt domain xml Best regards, David On St, 2014-09-17 at 10:41 +0800, PaulCheung wrote: Dear all, After shutdown the VM, then restart the VM the Vm's spice port is changed! Because I have 10 terminal ARM-Box running spice client connected to the vm, but after the VM shutdown and start again, the vm not the one whice the one before. I wish you can let us have a option, to let the VM with a fixed spice port, like: vm1: spice port : 5900 tls:5901 vm2:5902 5903 And I have another recommond:have a fuction to do that : if the vm shutdown by user, it will start the VM automatic. That means the VM can not be shutdown! I hope you can have this two fuction! That means a lot to those who are using Terminal box user like me. I am sorry for my poor English. But I hope you all can understand what I am saying. Sincerely yours, PaulCheung tel: 180-8882-7173 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Bug: Spice port changed!!!!!
Dear all, After shutdown the VM, then restart the VM the Vm's spice port is changed! Because I have 10 terminal ARM-Box running spice client connected to the vm, but after the VM shutdown and start again, the vm not the one whice the one before. I wish you can let us have a option, to let the VM with a fixed spice port, like:vm1: spice port : 5900 tls:5901vm2:5902 5903 And I have another recommond:have a fuction to do that : if the vm shutdown by user, it will start the VM automatic. That means the VM can not be shutdown! I hope you can have this two fuction! That means a lot to those who are using Terminal box user like me. I am sorry for my poor English. But I hope you all can understand what I am saying. Sincerely yours, PaulCheung tel: 180-8882-7173 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Migration failed, No available host found
Dear ALL, I have 3 servers, KVM01, KVM02, KVM03I want to migration some vms to KVM02 , there show a message: Migration failed, No available host found (VM: AL1-Paul, Source: KVM03). But I can migration from kvm01 to kvm03, or kvm03 to kvm01, but not kvm02. I check the firewall, they are all the same!Can somebody help me! ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
