[ovirt-users] Re: Any plans on oVirt Major release with new feature?

[Alex K]

On Tue, Jun 11, 2024 at 5:23 PM Jean-Louis Dupond via Users 
wrote:

> I have some good news to share, and that is that we will continue
> working on oVirt!
> As we want to keep development active, we can share that we have an open
> position to work on oVirt now:
>
> https://careers.team.blue/jobs/4597190-java-python-developer-virtualization-stack
>
> If somebody would be interested, feel free to contact me directly.
> But you can expect more and more patches from our side hopefully :)
>
> And hopefully some other companies jump the ship and get oVIrt
> development up-to-speed again!
> As there is no (open source) alternative at this moment that comes even
> close to oVirt.
>
Great to hear this! oVirt is indeed a great project.

>
> On 27/05/2024 09:22, Sandro Bonazzola wrote:
> > Hi, let me try to answer your questions:
> >
> >> I would like to know if there is any plans for major release with new
> feature for consider alternative of other hypervisor?
> > As of today, there's no discussion about a new major release neither on
> devel mailing list nor on users mailing list. Nobody stepped in to  lead
> the next major release development. I think this is a good thread for those
> companies who are thinking about putting some effort on oVirt sharing their
> plans.
> >
> >> I've been using the oracle ovirt for couple of years pretty good one. I
> would like know the future of oVirt as well along with feature plans.
> > I wrote a blog post about the future of oVirt around 2 years ago here:
> https://blogs.ovirt.org/2022/02/future-of-ovirt-february-2022/ ; nothing
> really changed since then.
> >
> >> Since Red Hat Virtualizazion is going out of support, we need to know
> if Ovirt is still alive and development continues.
> > Despite no major release is currently being planned, yes, oVirt
> development is still continuing. As an example here are the commits since
> last release of oVirt Engine package:
> https://github.com/oVirt/ovirt-engine/compare/ovirt-engine-4.5.6...master
> >
> >>   do you know if there is a professional support offer for an Ovirt
> production infrastructure?
> > You can find something here:
> https://www.ovirt.org/community/user-stories/users-and-providers.html ; I
> guess there are others who probably will reply to you in private.
> >
> > Hope it helps,
> >
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GPD6DRW2WTD42T24Z3SYTCER4K7GOM5R/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZKLW3NBIBZVTSMU4S62BWTLBZKVDBIXD/

[ovirt-users] Re: Ovirt standalone engine ssl cert is about to expire

[Alex K]

On Mon, May 27, 2024 at 3:44 PM Jayme  wrote:

> I believe all you should need to do is run engine-setup --offline
>
Yes this is sufficient to renew the cert.

>
> On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users <
> users@ovirt.org> wrote:
>
>> Need some help with the renewal of the ssl certificate (I believe it is a
>> self-signed cert )that is about to expire in a month, this is a standalone
>> ovirt engine running  software Version:4.3.4.3-1.el7. The certificate was
>> good for 5 years and it is about to expire.
>>
>>
>>
>> As I understand correctly, this certificate is for the https access for
>> the management page.
>>
>>
>>
>> Can this be done on a running system without affecting any hosts or VMs?
>>
>>
>>
>> Any instructions for the standalone ovirt engine scenario that you guys
>> can share?
>>
>>
>>
>> Thanks a lot,
>>
>>
>>
>>
>>
>>
>>
>> *Software Version:*4.3.4.3-1.el7
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65M3PZN6XJ5TXR3J3OFB/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJGJIBMKLSVFGZXIFWYX/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FD5NOMLLXM47DTGNL76KDPTOE3IZQADE/

[ovirt-users] static IP with OVN subnet

[ravi k]

Hello,
Hope you are all doing well. We have an interesting thing going on and so 
wanted to share with you all for some ideas and feedback.
We configured a cluster with OVS switch and added an external network with 
subnet. So OVN started managing the subnet using DHCP. But here's the problem. 
When we add a nic with this network, an ip is assigned by DHCP. But we want an 
IP of our choice to be assigned. Here's what we tried. 
1. We tried using the ovn-nbctl lsp-set-address like ovn-nbctl 
lsp-set-addresses 7840c97b-73c2-4246-a2a8-0e9e5b7f420a "56:6f:6b:54:00:ec 
10.19.3.8" to update the static IP. But this does not persist a NIC unplug or a 
VM reboot.

So you might ask why not just try assigning a static IP and not add the 
external subnet. We want to use security groups. For security groups to work, 
the ip assigned to the NIC and the IP in the value for fixed_ips in `openstack 
port show` should be the same. So the same thing repeats here as well. If we 
use the `openstack port set` to update the fixed_ips, a NIC unplug or a VM 
reboot will remove the IP. 

We have an internal IPAM that provides us IPs during our automated 
provisioning. Did anyone try this or have any ideas how to work around this? 
The only option seems to be just use DHCP and then update that IP in our 
internal IPAM tool. 
Please let me know if I'm unclear and any more info is required.

Regards,
rav
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M3GBNIFQS43ZYKQJMX3E2N5CSZK5NZVC/

[ovirt-users] why ovirtmgmt requires untagged network

[ravi k]

Hello,

I tried searching the archives but couldn't find anything related, so posting a 
new thread. When adding a new host to the cluster, why do we need to assign the 
IP on an untagged network in the bond? 

It is failing with error in setupnetworks when we tried it with the IP assigned 
to a vlan interface over the bond. For context, the cluster is an ovs-switch 
based cluster. It works when added to a traditional linux bridge based cluster. 

Can someone throw some light on this please?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XR5Z7VJCO6BLB3SMA67QIW246UUHZGEH/

[ovirt-users] adding host to cluster with ovs switch failing

[ravi k]

Hello all,

I'm facing a strange error. I was able to add a host to a linux bridge based 
cluster. However if I try adding the host to a cluster with OVS switch it is 
failing. I can see that nmstate was able to create the ovirtmgmt bridge as 
well. At that point of time both the ovirtmgmt and the bond0.vlan interfaces 
have the ip assigned. It then fails and rolls back the config. A workaround 
that I found to be working was to add the host to linux bridge cluster first 
and then change the cluster to OVS cluster. 

Here's a background about the setup. The host is an AMD EPYC with OEL 8.6 
installed. The OLVM manager is a standalone VM at 4.4.8. We have a bond0 and ip 
is assigned to bond0.1222 interface. The interfaces are in a LACP bond on the 
switch as well. I enabled debug in NetworkManager in the hope of finding some 
clues, but couldn't. 

I know 4.4 is EOL. As this is a user mailing list, I thought I'll reach out in 
hope if someone has seen any similar issue. 

supervdsm log
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,336::plugin::172::root::(apply_changes) Nispor: desired network state 
{'name': 'bond0', 'type': 'bond', 'state': 'up', 'mac-address': 
'e4:3d:1a:82:9f:c0', 'link-aggregation': {'port': ['ens10f0np0', 'ens5f0np0'], 
'options': {'ad_actor_sys_prio': 65535, 'ad_actor_system': '00:00:00:00:00:00', 
'ad_select': 'stable', 'ad_user_port_key': 0, 'all_slaves_active': 'dropped', 
'arp_all_targets': 'any', 'arp_interval': 0, 'arp_validate': 'none', 
'downdelay': 0, 'lacp_rate': 'slow', 'miimon': 100, 'min_links': 0, 'updelay': 
0, 'use_carrier': True, 'xmit_hash_policy': 'layer2', 'arp_ip_target': ''}, 
'mode': '802.3ad'}, 'ipv4': {'enabled': False}, 'ipv6': {'enabled': False}, 
'mtu': 1500, 'lldp': {'enabled': False}, 'accept-all-mac-addresses': False, 
'_brport_options': {'name': 'bond0'}, '_controller': 'vdsmbr_6SMdIi3B', 
'_controller_type': 'ovs-bridge'}
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,336::plugin::172::root::(apply_changes) Nispor: desired network state 
{'name': 'ovirtmgmt', 'type': 'ovs-interface', 'state': 'up', 'mtu': 1500, 
'ipv4': {'enabled': True, 'address': [{'ip': '10.129.221.19', 'prefix-length': 
24}], 'dhcp': False, '_dns': {'server': ['10.150.5.100', '10.229.0.60'], 
'search': [], '_priority': 0}, '_routes': [{'table-id': 329647082, 
'destination': '0.0.0.0/0', 'next-hop-address': '10.129.221.1', 
'next-hop-interface': 'ovirtmgmt'}, {'table-id': 329647082, 'destination': 
'10.129.221.0/24', 'next-hop-address': '10.129.221.19', 'next-hop-interface': 
'ovirtmgmt'}, {'table-id': 254, 'destination': '0.0.0.0/0', 'next-hop-address': 
'10.129.221.1', 'next-hop-interface': 'ovirtmgmt'}], '_route_rules': 
[{'ip-from': '', 'ip-to': '10.129.221.0/24', 'priority': 3200, 'route-table': 
329647082}, {'ip-from': '10.129.221.0/24', 'ip-to': '', 'priority': 3200, 
'route-table': 329647082}]}, 'ipv6': {'enabled': False, '_routes':
  [], '_route_rules': []}, 'mac-address': 'E4:3D:1A:82:9F:C0', 
'_brport_options': {'name': 'ovirtmgmt', 'vlan': {'mode': 'access', 'tag': 
1222}}, '_controller': 'vdsmbr_6SMdIi3B', '_controller_type': 'ovs-bridge'}
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,336::plugin::172::root::(apply_changes) Nispor: desired network state 
{'name': 'vdsmbr_6SMdIi3B', 'state': 'up', 'type': 'ovs-bridge', 'bridge': 
{'port': [{'name': 'bond0'}, {'name': 'ovirtmgmt', 'vlan': {'mode': 'access', 
'tag': 1222}}]}, 'ipv6': {'enabled': False}}
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,340::context::148::root::(register_async) Async action: Update profile 
uuid:d8c57758-f784-44f4-a33a-c050ec50b9b9 iface:bond0 type:bond started
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,340::context::148::root::(register_async) Async action: Add profile: 
623b6249-7cfa-4813-9ef6-4870ec6f3a79, iface:bond0, type:ovs-port started
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,340::context::148::root::(register_async) Async action: Add profile: 
ed8f5cae-5400-42fd-a72e-645e1fa61a39, iface:ovirtmgmt, type:ovs-interface 
started
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,341::context::148::root::(register_async) Async action: Add profile: 
3572b137-2091-4825-b418-4d6966430cc1, iface:ovirtmgmt, type:ovs-port started
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,341::context::148::root::(register_async) Async action: Add profile: 
bd45447d-f241-4d14-bf5b-28c3966c011d, iface:vdsmbr_6SMdIi3B, type:ovs-bridge 
started
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,343::context::157::root::(finish_async) Async action: Update profile 
uuid:d8c57758-f784-44f4-a33a-c050ec50b9b9 iface:bond0 type:bond finished
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,349::context::157::root::(finish_async) Async action: Add profile: 
623b6249-7cfa-4813-9ef6-4870ec6f3a79, iface:bond0, type:ovs-port finished
MainProcess|jsonrpc/3::DEBUG::2022-05-26 
14:32:25,350::context::157::root::(finish_async) Async action: Add profile: 

[ovirt-users] Re: LACP across multiple switches

[ravi k]

> For the ovirtmgmt there’s some caveats to add it on top of bonds. I’m not 
> sure if as today
> is solved, but you need to preconfigure vdsm if you want the bonded 
> interfaces to host
> ovirtmgmt.

Can you please elaborate on the "preconfigure vdsm if you want the bonded 
interfaces to host ovirtmgmt" bit. What config should be changed in vdsm for it 
to work?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6IMHJIUJPUMWHAUKI5GKQ5KFK7VMW3KV/

[ovirt-users] what happens during a host bootstrap

[ravi k]

Hello,

When we add a host to ovirt, the steps at a high level are virtualization 
checks, installation of packages, and creation of a bridge. Can someone please 
share more details around the bridge creation? 

I'll try explaining what I observed. We have a bond0 and the ip is assigned to 
bond0.121 interface. When we add the host to ovirt, the vdsm bridge is created 
and ovirtmgmt port is added to the bridge. In case of a OVS switch based 
cluster, the br-int bridge is also created. The current ip details are 
obtained, bond0 and bond0.121 are brought down and the ip is assigned to the 
ovirtmgmt interface.

With 4.4 and above this is performed using nmstatectl. I enabled debug in 
nmstate to observe the steps in detail. So if there's any document or page that 
I can refer to please post the link. I'm trying to debug a  issue where nmstate 
is creating the ovirtmgmt but rolling back the config due to connectivity 
failure. So it got me interested in understanding what happens in the 
background during the setupnetworks phase. 

Regards.
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4HUBGGW7LVNIEQIU3R6ZXSQDPWRDP4E7/

[ovirt-users] Re: new host addition to OVN cluster fails with Connectivity check failed, rolling back

[ravi k]

What's surprising is we're seeing the same issue in 4.4.8 as well. Sadly even 
this is also EOL now. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/X2BIPN3Z5CYFN3PSOVBNDQPX5CFNANOW/

[ovirt-users] Re: new host addition to OVN cluster fails with Connectivity check failed, rolling back

[ravi k]

> I would suggest to rather go with 4.5 directly.

Thanks. I'm afraid we may not be able to go with 4.5 yet as we're going with 
Oracle. 

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C76W2CX54BI3FWKD6HH7PTR4ZEMAZET5/

[ovirt-users] Re: new host addition to OVN cluster fails with Connectivity check failed, rolling back

[ravi k]

Hi Sandro,
Thanks for that. I remember you mentioned this in another post too :) I posted 
about this as there might be some users using 4.3 and might pitch in with some 
ideas. We're starting out with a greenfield setup. Would you suggest that we 
rather go with 4.4 directly?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LO42OOBSIL5W5BUC2DGDCJNIEMSBLSPG/

[ovirt-users] new host addition to OVN cluster fails with Connectivity check failed, rolling back

[ravi k]

Hello,

I have a a oVirt 4.3 installation with two clusters. One of the cluster has 
switch type as OVS. I'm trying to add a second host to this cluster. I did a 
clean install of the OS, configured bond0 and bond0.2306 as the VLAN interface. 
I was able to add the host to the cluster. 
When I go to setup networks and drag ovirtmgmt onto bond0, I notice in the host 
that it was able to create the vdsm and br_int bridges, create ovirtmgmt 
interface and assign the IP on top of it. However I also notice that the 
bond0.2306 interface also exists with the ip assigned. Then it rolls back the 
config removing the bridges. I checked the supervdsm log and see that it's 
rolling back because "connectivity::48::root::(check) Connectivity check 
failed, rolling back"

I'm pasting the relevant lines from supervdsm below

MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:53,381::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
network_caps with {'bridges': {}, 'bondings': {'bond0': {'ipv4addrs': [], 
'active_slave': '', 'ad_aggregator_id': '1', 'netmask': '', 'ad_partner_mac': 
'44:38:39:ff:01:33', 'hwaddr': '7c:d3:0a:60:e9:48', 'speed': 2, 'gateway': 
'', 'ipv6autoconf': True, 'addr': '', 'dhcpv6': False, 'ipv6addrs': [], 'mtu': 
'9000', 'dhcpv4': False, 'switch': 'legacy', 'ipv4defaultroute': False, 
'slaves': ['eno1', 'eno2'], 'ipv6gateway': '::', 'opts': {'mode': '4'}}}, 
'nameservers': ['10.222.0.6', '10.333.0.6'], 'nics': {'eno1': {'permhwaddr': 
'7c:d3:0a:60:e9:48', 'ipv6autoconf': True, 'addr': '', 'speed': 1, 
'dhcpv6': False, 'ipv6addrs': [], 'ad_aggregator_id': '1', 'dhcpv4': False, 
'netmask': '', 'ipv4defaultroute': False, 'ipv4addrs': [], 'hwaddr': 
'7c:d3:0a:60:e9:48', 'mtu': '9000', 'ipv6gateway': '::', 'gateway': ''}, 
'eno2': {'permhwaddr': '7c:d3:0a:60:e9:49', 'ipv6autoco
 nf': True, 'addr': '', 'speed': 1, 'dhcpv6': False, 'ipv6addrs': [], 
'ad_aggregator_id': '1', 'dhcpv4': False, 'netmask': '', 'ipv4defaultroute': 
False, 'ipv4addrs': [], 'hwaddr': '7c:d3:0a:60:e9:48', 'mtu': '9000', 
'ipv6gateway': '::', 'gateway': ''}, 'eno3': {'ipv6autoconf': True, 'addr': '', 
'speed': 1, 'dhcpv6': False, 'ipv6addrs': [], 'mtu': '1500', 'dhcpv4': 
False, 'netmask': '', 'ipv4defaultroute': False, 'ipv4addrs': [], 'hwaddr': 
'7c:d3:0a:60:e9:4a', 'ipv6gateway': '::', 'gateway': ''}, 'eno4': 
{'ipv6autoconf': True, 'addr': '', 'speed': 1, 'dhcpv6': False, 
'ipv6addrs': [], 'mtu': '1500', 'dhcpv4': False, 'netmask': '', 
'ipv4defaultroute': False, 'ipv4addrs': [], 'hwaddr': '7c:d3:0a:60:e9:4b', 
'ipv6gateway': '::', 'gateway': ''}, 'enp0s20f0u1u6': {'ipv6autoconf': True, 
'addr': '', 'speed': 0, 'dhcpv6': False, 'ipv6addrs': [], 'mtu': '1500', 
'dhcpv4': False, 'netmask': '', 'ipv4defaultroute': False, 'ipv4addrs': [], 
'hwaddr': '7e:d3:0a:60:e9:4f', 'ipv6gateway': '
 ::', 'gateway': ''}}, 'supportsIPv6': True, 'vlans': {'bond0.2306': {'iface': 
'bond0', 'ipv6autoconf': True, 'addr': '10.119.6.237', 'dhcpv6': False, 
'ipv6addrs': [], 'vlanid': 2306, 'mtu': '9000', 'dhcpv4': False, 'netmask': 
'255.255.255.0', 'ipv4defaultroute': True, 'ipv4addrs': ['10.119.6.237/24'], 
'ipv6gateway': '::', 'gateway': '10.119.6.1'}}, 'networks': {}}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,243::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
get_pti with () {}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,243::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
get_pti with -1
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,244::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
get_retp with () {}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,244::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
get_retp with -1
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,244::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
get_ibrs with () {}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,245::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
get_ibrs with 1
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,245::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
get_ssbd with () {}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,245::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
get_ssbd with -1
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,246::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
check_qemu_conf_contains with ('vnc_tls', '1') {}
MainProcess|jsonrpc/1::DEBUG::2022-04-21 
11:26:54,250::supervdsm_server::106::SuperVdsm.ServerCallback::(wrapper) return 
check_qemu_conf_contains with True
MainProcess|jsonrpc/2::DEBUG::2022-04-21 
11:26:55,304::supervdsm_server::99::SuperVdsm.ServerCallback::(wrapper) call 
setupNetworks with ({u'ovirtmgmt': {u'ipv6autoconf': True, u'vlan': u'2306', 
u'ipaddr': u'10.119.6.237', u'switch': u'ovs', u'mtu': 9000, u'bonding': 
u'bond0', u'dhcpv6': False, u'STP': u'no', u'bridged': u'true', 

[ovirt-users] OVN in oVirt : practical use cases

[ravi k]

Hello,
I was exploring OVN in oVirt and got thinking as to where it's practical use 
cases are? Folks who've implemented it in their production environments, can 
you please explain how you are using OVN in your environment. It seemed to be a 
bit complex for implementing and maintaining. It might be complex to me because 
I'm still fairly new to it. 

So is the OVN/OVS implementation geared towards teams that build the backend 
functionalities for virtualization softwares like VMware NSX etc? Hence my 
question asking if there are any practical benefits to using OVN/OVS in a 
regular virtualization environment. 

For example, if we're a financial or automobile setup where we use oVirt for 
provisioning VMs, what extra value does OVN/OVS add if we were to use it.

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5EBFOJSMKRYVA5YT7TLMAG23JV2TSBSQ/

[ovirt-users] Re: OVN routing and firewalling in oVirt

[ravi k]

Thank you very much for listing down the steps. It's been 5 years. So I'm not 
sure if we still need to create LRPs and LSPs manually? I ask because I do not 
see any provision in the oVirt interface. 

If we have a large number of networks defined in OVN, then it'll be a task to 
add the LRPs and LSPs?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MTQJCOKHMG2J7H6MFERPL2BGGHDYTYPY/

[ovirt-users] Duplicate nameserver in Host causing unassigned state when adding. possible bug?

[ravi k]

Hello all,

We are running oVirt 4.3.10.4-1.0.22.el7. I noticed an interesting issue or a 
possible bug yesterday. I was trying to add a host when I noticed that it was 
failing and the host status was going into 'unassigned' state. 

I saw the below error in the engine log. 

/var/log/ovirt-engine/engine.log
2022-04-07 15:17:07,739+04 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.CollectVdsNetworkDataAfterInstallationVDSCommand]
 (EE-ManagedThreadFactory-engine-Thread-24723) [4917a348] HostName = olvsrv005u
2022-04-07 15:17:07,739+04 ERROR 
[org.ovirt.engine.core.vdsbroker.vdsbroker.CollectVdsNetworkDataAfterInstallationVDSCommand]
 (EE-ManagedThreadFactory-engine-Thread-24723) [4917a348] Failed in 
'CollectVdsNetworkDataAfterInstallationVDS' method, for vds: 'olvsrv005u'; 
host: '10.119.6.232': CallableStatementCallback; SQL [{call insertnameserver(?, 
?, ?)}ERROR: duplicate key value violates unique constraint "name_server_pkey"
  Detail: Key (dns_resolver_configuration_id, 
address)=(459b68e6-b684-4cf6-8834-755249a6bd3a, 10.119.10.212) already exists.
  Where: SQL statement "INSERT INTO
name_server(
  address,
  position,
  dns_resolver_configuration_id)
VALUES (
  v_address,
  v_position,
  v_dns_resolver_configuration_id)"
PL/pgSQL function insertnameserver(uuid,character varying,smallint) line 3 at 
SQL statement; nested exception is org.postgresql.util.PSQLException: ERROR: 
duplicate key value violates unique constraint "name_server_pkey"
  Detail: Key (dns_resolver_configuration_id, 
address)=(459b68e6-b684-4cf6-8834-755249a6bd3a, 10.119.10.212) already exists.

Then I checked the resolv.conf on the host

[root@olvsrv005u ~]# cat /etc/resolv.conf
# Version: 1.00
search uat.abc.com

nameserver 10.119.10.212
nameserver 10.119.10.212

Well, ideally it's of no use having duplicate nameserver. But it was not 
affecting the functionality of the host. However it was failing the addition of 
the host, probably because it was failing when updating the host's config in 
the engine DB due to the duplicate nameserver.

To test this I commented the duplicate value and checked. The host is now added 
successfully. 

2022-04-07 15:33:37,301+04 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.GetHardwareInfoAsyncVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [] START, 
GetHardwareInfoAsyncVDSCommand(HostName = olvsrv005u, VdsIdA
ndVdsVDSCommandParametersBase:{hostId='459b68e6-b684-4cf6-8834-755249a6bd3a', 
vds='Host[olvsrv005u,459b68e6-b684-4cf6-8834-755249a6bd3a]'}), log id: 52e7ec52
2022-04-07 15:33:37,301+04 INFO  
[org.ovirt.engine.core.vdsbroker.vdsbroker.GetHardwareInfoAsyncVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [] FINISH, 
GetHardwareInfoAsyncVDSCommand, return: , log id: 52e7ec52
2022-04-07 15:33:37,356+04 INFO  
[org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] Running command: 
SetNonOperationalVdsCommand internal: true. Entities affected :
ID: 459b68e6-b684-4cf6-8834-755249a6bd3a Type: VDS
2022-04-07 15:33:37,360+04 INFO  
[org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] START, 
SetVdsStatusVDSCommand(HostName = olvsrv005u, SetVdsStatusVDSCommandPa
rameters:{hostId='459b68e6-b684-4cf6-8834-755249a6bd3a', 
status='NonOperational', nonOperationalReason='NETWORK_UNREACHABLE', 
stopSpmFailureLogged='false', maintenanceReason='null'}), log id: 1bfc90a3
2022-04-07 15:33:37,363+04 INFO  
[org.ovirt.engine.core.vdsbroker.SetVdsStatusVDSCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] FINISH, 
SetVdsStatusVDSCommand, return: , log id: 1bfc90a3
2022-04-07 15:33:37,404+04 ERROR 
[org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] 
(EE-ManagedThreadFactory-engineScheduled-Thread-39) [3de72cb7] Host 
'olvsrv005u' is set to Non-Operational, it is missing the following networks

Should I raise this as a bug? I'm of the opinion that it should be because if 
it's not breaking the host's functionality then it should be ok. 

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AG2YNGDUGRJR5C3KITMIGPGUJ4LRCF3Y/

[ovirt-users] Re: Network filters in oVirt : zero-trust, IP and port filtering

[ravi k]

I've created the below filter. The intention is that it will allow incoming 
traffic only from SRCIP parameter and within the port range. 
However I'm still able to access the VM from other IPs as well. We are running 
oVirt 4.3 and the networks are vlan tagged. 

 virsh -r nwfilter-dumpxml clean-ip-port-filter

  f9d2ff6b-db31-41a0-8f1b-97dc0166c10a
  

  


Could it be because of the statement "VLAN (802.1Q) packets, if sent by a 
virtual machine, cannot be filtered with rules for protocol IDs arp, rarp, ipv4 
and ipv6 but only with protocol IDs mac and vlan." in 
https://libvirt.org/formatnwfilter.html?
If netfilters do not work with vlan packets, is there any other way I can 
implement such filtering?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/26QZXVTPR32XMZXXUZUXLAEGM6NK62DR/

[ovirt-users] Re: Link multiple self-hosted engines

[ravi k]

The thread 
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/CD5WDA2Y77MHQOV73DQ5UA7W3YO7COUY/
 also suggests using ManageIQ. I'll read more on that to find out. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K2T6V4JDT5HYU6JLCWHTCQQWPBZ7LPEL/

[ovirt-users] Link multiple self-hosted engines

[ravi k]

Hello,
We are planning to install self-hosted engines in our production and DR 
locations which are separated physically. VMware's vcenter has a feature 
wherein we can link vcenters so we can access both DCs in the same console. 
Do we have something like that in oVirt as well? I was searching and found this 
for oVirt 3.5 
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/4LDSUM4NRHUONOC4HUPRYNKXCNL4TRBF/#B6QUSHZYFZ2MLUSU5VXA542UTKG6PXUH
 
The suggestion which mentions about using ManageIq seemed interesting. If 
anyone is managing multiple oVirt environments please share some ideas from 
experience. 

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IGJLBFPJUKI46DBTT3KDS66FYBTRROK6/

[ovirt-users] Re: OVS switch type for hosted-engine

[ravi k]

I tried this and it didn't work. In 4.3 the option to change the switch type is 
not allowed. I still changed the switch type of ovirtmgmt in the file and 
rebooted. But it didn't have any effect. 

Isn't there a way we can specify OVS as switch type when installing the 
self-hosted engine?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/I2IOHY42OKJ6QSQTI6KM7KHMRKMV6SAH/

[ovirt-users] Re: OVS switch type for hosted-engine

[ravi k]

> Just to close this thread, we were able to manually convert our hosted-engine 
> 4.1.1

Hello Devin,
Thanks a lot for this. I was setting up a cluster and intended it enable OVN in 
it. I came across this thread when searching for a solution. 
Does this change in 4.3 version or 4.4 so we can specify switch type when 
creating a self-hosted engine. Any ideas?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/743UMYSQV3MQGBFTGTW7D7UL3N5ECIEZ/

[ovirt-users] Re: New oVirt self-hosted engine deployment : design ideas

[ravi k]

> If you are going to have more hosts, please note that it's not
> recommended to have more than 8 hosted-engine hosts. So if you'll
> still want to keep them all in the same cluster, some of them will be
> HE hosts and some not - this might be slightly confusing, depending on
> your use case.
Thanks a lot for replying. I'm planning to just have 2 self-hosted hosts in the 
cluster01. I'll create a cluster02 and add the remaining regular hosts to it. 

> You can try searching the list archives for previous discussions about
> topology/architecture that people had over the years.
> 
> You might want to check also this somewhat-old but still mostly
> relevant doc, which is for RHV, but probably applies 99% to oVirt as
> well:
> 
> https://www.redhat.com/en/resources/best-practice-rhv-technology-detail
> 
> Good luck and best regards,
I'll go through this doc and will also search the threads. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FCA27NIWKSDPNGMSEH2CLOBTLU37J3IC/

[ovirt-users] New oVirt self-hosted engine deployment : design ideas

[ravi k]

Hello,
We are creating a self-hosted engine deployment and have come up with a draft 
design. I thought I'll get your thoughts on improving it. It is still a test 
setup and so we can make changes to make it resilient. 
We have four hosts, host01..04. I did the self-hosted engine deployment on the 
first node which created a dc, cluster01 and a storage domain hosted_storage. I 
added host02 also as a self-hosted engine host to cluster01.
Now the questions :-)
1. It is recommended not to use this SD hosted_storage for regular VMs. So I'll 
create another SD dc_sd01. Should I use this dc_sd01 and cluster01  when 
creating regular VMs? What's the best practice?
2. It is a bit confusing to get my head around this concept of running regular 
VMs on these self-hosted engine hosts. Can I just run regular VMs in these 
hosts and they'll run fine?
3. Please do suggest any other recommendations from experience in terms of 
designing the clusters, storage domains etc. It'll help as it is a new setup 
and we have the scope to make changes. 

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VPBNU6TW2AOXPANQCF5KIXRHNTCNXL4Q/

[ovirt-users] New virtual machine default properties

[ravi k]

Hello,

We are currently using oVirt version 4.3.10.4-1.0.22.el7. When we click on 
create new VM, the OS is selected as "other OS" and "optimized for" is desktop. 
I'm creating the VMs from Ansible. The problem is that the "video type" is 
defaulting to QXL due to which the VM is failing to start with an error " Exit 
message: unsupported configuration: this QEMU does not support 'qxl' video 
device."

It used to default to VGA earlier because this playbook was working earlier. So 
I'm guessing some config would've been changed which is causing this. But I was 
not able to find where this default config is set. Can you please help? I 
checked to see if I can set it in the Ansible playbook. But Ansible's ovirt_vm 
module only provides headless_mode and protocol options. It would be nice if it 
provided the video type parameter as well. 
Is there any config file in the engine that I can tweak to set the default 
values for a new VM creation?

Regards,
Ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SCGRB67GVOW4TJ62Z5OQVPG566JXI4T7/

[ovirt-users] Re: Network filters in oVirt : zero-trust, IP and port filtering

[ravi k]

> you can use it from the engine under some conditions.
> 1) You need to make sure that all hosts have this filter.
> 2) You need to define this filter in engine DB otherwise you would need
> some kind of hook to apply it.

Thanks a lot for that. If there's any doc that hints on how to define the 
filter in the engine DB, can you please point me there? Right now I'm creating 
a filter to test for this functionality. Once it's working I'll then try 
defining it in the DB. 
Also if it's working as expected we'll submit it to libvirt as well. 

Regards,
ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6DTFTTGNWTNRQQ3V2PMED6BMOKWPQJ66/

[ovirt-users] Network filters in oVirt : zero-trust, IP and port filtering

[ravi k]

Good people of the community, 
Hope you are all doing well. We are exploring the network filters in oVirt to 
check if we can implement a zero-trust model at the network level. The 
intention is to have a filter which takes two parameters, IP and PORT. After 
that there will be a 'deny all' rule. We realized that none of the default 
network filters offer such a functionality and the only option is to write a 
custom filter. 
Why don't we have such a filter in libvirt and thereby in oVirt? Someone 
would've already thought about such a use case. So I was thinking maybe network 
filters aren't meant to be used for implementing such functionalities like 
zero-trust?

Also what are some practical use cases of the default filters that are 
provided? I was able to understand and use the clean-traffic and 
clean-traffic-gateway.

Regards,
ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J2PUNVD7N45X7YDE5UX2CXWGDEFDS46M/

[ovirt-users] Re: Installing a windows vm from importing an OVA Template

[ravi k]

Hello,
I work along with Moiz and here's what we tried. 

We created a blank VM, loaded Windows 2016 ISO and booted it up. When we select 
the OS as Windows 2016 x64 the ISO is loaded but the screen is stuck with the 
windows logo. The CPU spikes up to 99%.
However if we select the OS as 'Other OS' the installation proceeds. We 
compared the XML files in both cases and noticed that the below parameters are 
added when we select the OS as windows 2016. 










I guess this is expected because of the line "hypervEnabled = 
vmInfoBuildUtils.isHypervEnabled(vm.getVmOsId(), 
vm.getCompatibilityVersion());" in 
https://github.com/oVirt/ovirt-engine/blob/ovirt-engine-4.3/backend/manager/modules/vdsbroker/src/main/java/org/ovirt/engine/core/vdsbroker/builder/vminfo/LibvirtVmXmlBuilder.java

However the question is why are the hyperv enlightenments causing a problem? 
The host details are as below:
Linux server01 3.10.0-1160.49.1.el7.x86_64 #1 SMP Tue Nov 23 11:18:01 PST 2021 
x86_64 x86_64 x86_64 GNU/Linux

 lscpu
Architecture:  x86_64
CPU op-mode(s):32-bit, 64-bit
Byte Order:Little Endian
CPU(s):96
On-line CPU(s) list:   0-95
Thread(s) per core:2
Core(s) per socket:24
Socket(s): 2
NUMA node(s):  2
Vendor ID: GenuineIntel
CPU family:6
Model: 85
Model name:Intel(R) Xeon(R) Platinum 8160 CPU @ 2.10GHz
Stepping:  4
CPU MHz:   2100.000
BogoMIPS:  4200.00
Virtualization:VT-x
L1d cache: 32K
L1i cache: 32K
L2 cache:  1024K
L3 cache:  33792K
NUMA node0 CPU(s): 0-23,48-71
NUMA node1 CPU(s): 24-47,72-95
Flags: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca 
cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx 
pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl 
xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl 
vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic 
movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 
3dnowprefetch epb cat_l3 cdp_l3 invpcid_single intel_ppin intel_pt ssbd mba 
ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid fsgsbase tsc_adjust bmi1 
hle avx2 smep bmi2 erms invpcid rtm cqm mpx rdt_a avx512f avx512dq rdseed adx 
smap clflushopt clwb avx512cd avx512bw avx512vl xsaveopt xsavec xgetbv1 cqm_llc 
cqm_occup_llc cqm_mbm_total cqm_mbm_local dtherm ida arat pln pts hwp_epp pku 
ospke md_clear spec_ctrl intel_stibp flush_l1d

The CPU type in ovirt detects it as Intel Skylake-Server-noTSX-IBRS Family. We 
tried changing the cpu type for the VM to broadwell and other types to no 
effect. 

The ovirt version is 4.3.10.4-1.0.22.el7
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5BKRP3PVXH7UW3Z736VURGDQGBWPH6WO/

[ovirt-users] Re: New oVirt setup with OVN : Hypervisor with LACP bond : queries

[ravi k]

>With those conditions you don't need to start any
> service, everything should be running and the hosts installed
> in the cluster will have tunnels ready on ovirtmgmt.

Thanks for that. It is clear now. We have an existing oVirt setup with logical 
networks created. In order to test OVN we are going to add a new cluster with 
switch type as OVS and the default network provider as ovirt-provider-ovn. We 
will then add a host to this cluster.

The section 14.2.7.5 mentions "You can create an external provider network that 
overlays a native Red Hat Virtualization network so that the virtual machines 
on each appear to be sharing the same subnet."
Does this mean that we should always first create a native RHV network that 
talks to the physical network? Is it not possible for OVN to talk directly to 
the physical network by using the LACP bond configured in the physical host?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/AHMBUFPAMNGNOCX47UCFZCDAJ3PKXLSR/

[ovirt-users] Re: New oVirt setup with OVN : Hypervisor with LACP bond : queries

[ravi k]

> You should not run ovn-config manually,  if the host bond0 has ovirtmgmt on
> top of it. That is all done by host deploy. The step might be needed if you
> want to have a tunnel on a different interface than ovirtmgmt is using.

Thanks for that. We performed a normal oVirt install and as a part of it the 
controller was installed in the manager. I can see the pre-req rpms and 
services are also installed in the hypervisors. So If I understood correctly 
you're saying that the tunnels and bridge would've been already created when we 
added the host?
If we just bring up the openvswitch and ovn-controller services we should be 
able to see the tunnels and bridge. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XOBGD7VYYBAW4MK2F3SSWHFHWAHGLUYW/

[ovirt-users] Re: New oVirt setup with OVN : Hypervisor with LACP bond : queries

[ravi k]

> Can you give some more details about your current vSphere infrastructure?
> What about the level of downtime you could give when migrating?
> Have you already planned the strategy to transfer your VMs from vSphere to
> oVirt?

We are still in the initial stages and so conducting a POC. 

> Take care that probably on your VMware side your VMs have virtual hw for
> nics defined as vmxnet, so when you migrate to oVirt, it will change and so
> depending on your OS type (Windows based or Linux based) and in case of
> Linux, depending on your distro and version, some manual operations could
> be required to remap vnic assignments and definitions.

We are planning to clone a VM and then migrate it to note down the findings. We 
will surely verify the virtual nic hw as well.

> Take care that in RHV this feature is still considered Technology Preview,
> so not recommended for production. It could apply to oVirt even more, so...
> BTW, what do you mean with "... the fact that we have a SDN..."? Do you
> mean standard virtual networking in contrast with physical one or do you
> have any kind of special networking in vSphere now (NSX or such...)?

We have SDN implemented at our physical network level. IIRC it is Cumulus. We 
do not have NSX. What I meant was as we have SDN implemented at the physical 
network level. So will it make it easier to connect our Ovirt to the physical 
network. 
I will go through the docs you updated and come back.

> That was a thread originated by me... ;-)
> But please consider that it is 5 years old now! At that time we were at 4.1
> stage, while now we are at very different 4.4, so refer in case to recent
> threads and better recent upstream (oVirt) and downstream (RHV) official
> documentation pointed above
> Also, at that time ansible was not very much in place, while now in many
> configuration tasks it is deeply involved.
> The main concern in that thread was the impact of having OVN tunneling on
> the ovirtmgmt management network, that is the default choice when you
> configure OVN, in contrast with creating a dedicated network for it.

My apologies. I wasn't clear. As the IP was assigned on bond0 which is a LACP 
bond, do we need to make any changes before running the vdsm-tool ovn-config 
  ?

> some manual undocumented steps through OpenStack Networking API or Ansible
> could be required depending on your needs

I'll go through the docs you mentioned and update here about my progress. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FCOB5JRZVHFYDDUNWP5JUL2T6OA2IILG/

[ovirt-users] New oVirt setup with OVN : Hypervisor with LACP bond : queries

[ravi k]

Hello team,
Thank you for all the wonderful work you've been doing. I'm starting out new 
with oVirt and OVN. So please excuse me if the questions are too naive. 
We intend to do a POC to check if we can migrate VMs off our current VMware to 
oVirt. The intention is to migrate the VMs with the same IP into oVirt. We've 
setup oVirt with three hypervisors. All of them have four ethernet adapters. We 
have SDN implemented in our network and LACP bonds are created at the switch 
level. So we've created two bonds, bond0 and bond1 in each hypervisor. bond0 
has the logical networks with vlan tagging created like bond0.101, bond0.102 
etc. 

As a part of the POC we also want to explore OVN as well to check if we can 
implement a zero trust security policy. Here are the questions now :)

1. We would like to migrate VMs with the current IP into oVirt. Is it possible 
to achieve this? I've been reading notes and pages that mention about extending 
the physical network into OVN. But it's a bit confusing on how to implement it.
How do we connect OVN to the physical network? Does the fact that we have a SDN 
make it easier to get this done?
I am still reading the ovn-architecture page. It is mentioned that the gateway 
is the component that extends a tunnel-based logical network into a physical 
network. 

2. We have the IP for the hypervisor assigned on a logical network(ovirtmgmt) 
in bond0. I read in 
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/CIE6MZ47GRCEX4Z6GWRLFSERCEODADJY/
 that oVirt does not care about how the IP is configured when creating the 
tunnels.  

3. Once we have OVN setup, ovn logical networks created and VMs 
created/migrated, how do we establish the zero trust policy? From what I've 
read there are ACLs and security groups. Any pointers on where to explore more 
about implementing it. 

If you've read till here, thank you for your patience. 

Regards,
ravi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OUEO35NTR4LA4XW3JA6TFLFJAP7NH23I/

[ovirt-users] Re: NFS Synology NAS (DSM 7)

[Alex K]

On Fri, Aug 27, 2021, 19:48 Maton, Brett  wrote:

> Hi List,
>
>   I can't get oVirt 4.4.8.5-1.el8 (running on oVirt Node hosts) to connect
> to an NFS share on a Synology NAS.
>
>   I gave up trying to get the hosted engine deployed and put that on an
> iscsi volume instead...
>
>   The directory being exported from NAS is owned by vdsm / kvm (36:36)
> perms I've tried:
>   0750
>   0755
>   0777
>
> Tried auto / v3 / v4_0
>
>   As others have mentioned regarding NFS, if I connect manually from the
> host with
>
>   mount nas.mydomain.com:/volume1/ov_nas
>
>   It connects and works just fine.
>
>   If I try to add the share as a domain in oVirt I get
>
> Operation Cancelled
> Error while executing action Add Storage Connection: Permission settings
> on the specified path do not allow access to the storage.
> Verify permission settings on the specified storage path.
>
> When tailing /var/log/messages on
>
> When tailing /var/log/messages on the oVirt host, I see this message
> appear (I changed the domain name for this post so the dots might be
> transcoded in reality):
>
> Aug 27 17:36:07 ov001 systemd[1]: 
> rhev-data\x2dcenter-mnt-nas.mydomain.com:_volume1_ov__nas.mount:
> Succeeded.
>
>   The NAS is running the 'new' DSM 7, /etc/exports looks like this:
>
> /volume1/ov_nas  x.x.x.x(rw,async,no_root_squash,anonuid=36,anongid=36)
>
Did you try squashing to root?

>
>
> (reloaded with exportfs -ra)
>
>
> Any suggestions appreciated.
>
> Regards,
> Brett
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y74ILXTU6L2XEIIQDG5SE6WEQ6DSUOXA/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MM6CLUHHQFIWTXQSIQ7C7EPWFAW3NAOF/

[ovirt-users] Re: Fencing ilo4

[Alex K]

On Fri, Aug 27, 2021, 20:33  wrote:

> Hi
> This thread points to the same thing but there's no solution.
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CGHM7K2DJH76MQSDYNBNXI4LXUU7IHHS/
> I am seting up a new kvm environment. Oracle linux virtualization manager
> is up, kvm host prepared and I am trying to set up fencing with ilo4.
>
> When adding via gui I get
> ERROR [org.ovirt.engine.core.bll.pm.FenceProxyLocator] (default task-12)
> [62fc5810-5d9a-4baf-b1a7-983da8d039fc] Can not run fence action on host
> 'kvm1', no suitable proxy host was found.
>
I think you need at least two hosts to test power management from UI.

I left options blank but tried privlvl=operator,lanplus=on and nothing.


>
> Test via cli works fine.
> [root@kvm1 lib]# fence_ilo4 -a 192.168.9.98 -l Administrator -p ***-v -o
> status
> 2021-08-27 14:18:56,815 INFO: Executing: /usr/bin/ipmitool -I lanplus -H
> 192.168.9.98 -p 623 -U Administrator -P [set] -L ADMINISTRATOR chassis
> power status
> 2021-08-27 14:18:56,982 DEBUG: 0 Chassis Power is on
> Status: ON
>
> Error message because of that.
> Health check on Host kvm1 indicates that future attempts to Stop this host
> using Power-Management are expected to fail.
>
> Can anyone help?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/VQVAT254OVIKCFAOC42BB4264FNNVZID/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U6I7IHGJLHSZKMPGVBMN5FDGMYOEET5U/

[ovirt-users] Re: export VM from oVirt engine 3.5

[Alex K]

On Thu, Jul 8, 2021, 20:19  wrote:

> Hello,
> I am trying to export a bunch o VM from  oVirt version 3.5
> The problem is that there is no OVA support for exporting them. I also
> tryed to export VMs into OVA format using ovirtsdk4 which anyway won't work
> on oVirt 3.5.
> I can successfully export to a NFS partition but for each VM there are
> several qcow v2 files which I suppose to be the VM image and its snapshots.
> How to identify the correct file to represent the current VM status ?
>
When exporting you should get only one image file with the current status
of the vm.

If you want to hack with the vm images, you can commit all the chain of the
snapshot files to your own single qcow2 copy using qemu-img commands.

> You can easily get the disk ID of the current active snapshot (vm ->
snapshots) then you can view the full chain with:
qemu-img info --backing-chain $FILENAME
You need to know what you are doing though to avoid any data loss.

If I delete all the snapshots, will I end up with only one valid qcow v2
> image that I can use ?
>
Yes, you should. You can try if the snapshots are not needed.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FCCK7HSIVMXAH2D7F2DWLHR4J2XSSTPP/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4J3HIIWUCVHJBMCL5TP7VR46J42MO2ED/

[ovirt-users] Re: Hosted-Engine vs Standalone Engine

[Alex K]

On Wed, Mar 24, 2021, 23:04 Ian Easter  wrote:

> Hello Folks,
>
> I have had to install a Hosted-Engine a few times in my environment.
> There have been some hardware issues and power issues that left the HE
> unrecoverable.
>
> In this situation, would the Standalone Engine install be more viable and
> less prone to become inoperable due to the previous issues?
>
Usually, having a daily engine backup you are covered even in the rare case
of full engine corruption. In the worst case one can wipe out the
unrecoverable engine, setup a new one and restore its status from the
backup. I had to do this once and it was fine.


> My assumption would be to have a head baremetal server run the Engine to
> control and maintain my blades.
>
> *Thank you,*
> *Ian*
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CFXFE7M7WMXEBQBU3CJE7JFNLADVXRLO/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VWBRKLPUWUWU2PDMDGL4SFYDIO6MSAVF/

[ovirt-users] Re: Hyperconverged engine high availability?

[Alex K]

On Sat, Mar 20, 2021, 22:15 David White via Users  wrote:

> I just finished deploying oVirt 4.4.5 onto a 3-node hyperconverged cluster
> running on Red Hat 8.3 OS.
>
> Over the course of the setup, I noticed that I had to setup the storage
> for the engine separately from the gluster bricks.
>
> It looks like the engine was installed onto /rhev/data-center/ on the
> first host, whereas the gluster bricks for all 3 hosts are on
> /gluster_bricks/.
>
/rhev/data-center is a mountpoint of the gluster volume which may have its
bricks in /gluster_bricks/. You can provide more info on the gluster setup
to clarify this. gluster volume info 


> I fear that I may already know the answer to this, but:
> Is it possible to make the engine highly available?
>
Yes, one uses 3 servers to achieve HA for the guest VMs and the engine, as
long as the hosts meet the requirements of storage, network and compute.

>
> Also, thinking hypothetically here, what would happen to my VMs that are
> physically on the first server, if the first server crashed? The engine is
> what handles the high availability, correct? So what if a VM was running on
> the first host? There would be nothing to automatically "move" it to one of
> the remaining healthy hosts.
>
> Or am I misunderstanding something here?
>
>
> Sent with ProtonMail  Secure Email.
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/L6MMZSMSGIK7BTUSUECU65VZRMS4N33L/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/76OWWM33ZAEUMVKNWPOYPIQETU3DBPFT/

[ovirt-users] Re: snapshot solution: Existing snapshots that were taken after this one will be erased.

[Alex K]

On Sat, Mar 6, 2021, 09:13 Strahil Nikolov via Users 
wrote:

> Commiting a snapshot means that you want to revert to that state, which
> means that all data afterwards is lost.
> Even if you keep the latest snapshot, it won't be usefull.
> For example you got the following:
>
> Install -> snap1 -> some data -> snap2 -> some data -> snap3 -> some data
> -> Current State
>
> If you revert to snap2 you will have the following:
> Install -> snap1 -> some data -> snap2 -> some data -> Current State
>
> (you always have some extra data generated - for example system logs)
>
> As you can see, you can't use snap3 as you got some data after powering up
> the VM after the restore to snap2 and you will loose that.
>
User usually does not care of loosing such data if intentionally switches
from snapshot to snapshot. I was expecting also the same behavior,  to be
able to switch between intermediate snapshots without loosing the latest
ones. I can do this with internal snapshots in plain KVM and this is very
useful when testing different versions/snapshots of an application.

>
> Best Regards,
> Strahil Nikolov
>
> On Fri, Mar 5, 2021 at 8:32, dhanaraj.ramesh--- via Users
>  wrote:
> Hi Team,
>
> when I want to commit the older snapshots I'm getting warning stating "
> Existing snapshots that were taken after this one will be erased.". is
> there any way we can retain the latest snapshots as is in the chain?
>
> I knew cloning and template export options are there to secure that latest
> snapshot data but these are will consume additional space in storage and
> take time.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y5PQGBQXWTJ6O3NI6ZIV2QVEHWML7RVA/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/I47GULR3I5FPMD2NXJ44EI5IRCUXEDPV/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CZR5U7BE7MMEFEPTBBRWIUUN25SRPWXC/

[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

[Alex K]

On Thu, Mar 4, 2021 at 8:59 PM  wrote:

> Hello again,
> I've tried to heal the brick with latest-mtime, but I get the following:
>
> gluster volume heal engine split-brain latest-mtime
> /80f6e393-9718-4738-a14a-64cf43c3d8c2/images/d5de54b6-9f8e-4fba-819b-ebf6780757d2/a48555f4-be23-4467-8a54-400ae7baf9d7
> Healing
> /80f6e393-9718-4738-a14a-64cf43c3d8c2/images/d5de54b6-9f8e-4fba-819b-ebf6780757d2/a48555f4-be23-4467-8a54-400ae7baf9d7
> failed: File not in split-brain.
> Volume heal failed.
>
you can try to run ls at the directory where the file which healing is
pending resides.  This might trigger the healing process of that file.


> Should I try the solution described in this question, where we manually
> remove the conflicting entry, triggering the heal operations?
>
> https://lists.ovirt.org/archives/list/users@ovirt.org/thread/RPYIMSQCBYVQ654HYGBN5NCPRVCGRRYB/#H6EBSPL5XRLBUVZBE7DGSY25YFPIR2KY
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CCRNM7N3FSUYXDHFP2XDMGAMKSHBMJQQ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJO7EVEW2C3P7EYTAIXZVIC7JBSEXM3C/

[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

[Alex K]

On Wed, Mar 3, 2021, 19:13  wrote:

> Hello,
>
> Thank you very much for your reply.
>
> I get the following from the below gluster commands:
>
> [root@ov-no1 ~]# gluster volume heal engine info split-brain
> Brick ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
> Brick ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
> Brick ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Number of entries in split-brain: 0
>
>
> [root@ov-no1 ~]# gluster volume heal engine info summary
> Brick ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
> Brick ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
> Brick ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Status: Connected
> Total Number of entries: 1
> Number of entries in heal pending: 1
> Number of entries in split-brain: 0
> Number of entries possibly healing: 0
>
>
> [root@ov-no1 ~]# gluster volume info
> Volume Name: data
> Type: Replicate
> Volume ID: 6c7bb2e4-ed35-4826-81f6-34fcd2d0a984
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x (2 + 1) = 3
> Transport-type: tcp
> Bricks:
> Brick1:
> ov-no1.ariadne-t.local:/gluster_bricks/data/data
> Brick2:
> ov-no2.ariadne-t.local:/gluster_bricks/data/data
> Brick3:
> ov-no3.ariadne-t.local:/gluster_bricks/data/data (arbiter)
> Options Reconfigured:
> performance.client-io-threads: on
> nfs.disable: on
> transport.address-family: inet
> performance.strict-o-direct: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.low-prio-threads: 32
> network.remote-dio: off
> cluster.eager-lock: enable
> cluster.quorum-type: auto
> cluster.server-quorum-type: server
> cluster.data-self-heal-algorithm: full
> cluster.locking-scheme: granular
> cluster.shd-max-threads: 8
> cluster.shd-wait-qlength: 1
> features.shard: on
> user.cifs: off
> cluster.choose-local: off
> client.event-threads: 4
> server.event-threads: 4
> network.ping-timeout: 30
> storage.owner-uid: 36
> storage.owner-gid: 36
> cluster.granular-entry-heal: enable
>
> Volume Name: engine
> Type: Replicate
> Volume ID: 7173c827-309f-4e84-a0da-6b2b8eb50264
> Status: Started
> Snapshot Count: 0
> Number of Bricks: 1 x 3 = 3
> Transport-type: tcp
> Bricks:
> Brick1:
> ov-no1.ariadne-t.local:/gluster_bricks/engine/engine
> Brick2:
> ov-no2.ariadne-t.local:/gluster_bricks/engine/engine
> Brick3:
> ov-no3.ariadne-t.local:/gluster_bricks/engine/engine
> Options Reconfigured:
> performance.client-io-threads: on
> nfs.disable: on
> transport.address-family: inet
> performance.strict-o-direct: on
> performance.quick-read: off
> performance.read-ahead: off
> performance.io-cache: off
> performance.low-prio-threads: 32
> 

[ovirt-users] Re: Gluster volume engine stuck in healing with 1 unsynched entry & HostedEngine paused

[Alex K]

On Mon, Mar 1, 2021, 15:20  wrote:

> Hello again,
>
> I am back with a brief description of the situation I am in, and questions
> about the recovery.
>
> oVirt environment: 4.3.5.2 Hyperconverged
> GlusterFS: Replica 2 + Arbiter 1
> GlusterFS volumes: data, engine, vmstore
>
> The current situation is the following:
>
> - The Cluster is in Global Maintenance.
>
> - The volume engine is up with comment (in the Web GUI) : Up, unsynched
> entries, needs healing.
>
> - The VM HostedEngine is paused due to a storage I/O error (Web GUI) while
> the output of virsh list --all command shows that the HostedEngine is
> running.
>
> I tried to issue the gluster heal command (gluster volume heal engine) but
> nothing changed.
>
> I have the following questions:
>
> 1. Should I restart the glusterd service? Where from? Is it enough if the
> glusterd is restarted on one host or should it be restarted on the other
> two as well?
>
It sounds as a gluster split brain. I would start from there. Can you check
status by listing split brain entries?

>
> 2. Should the node that was NonResponsive and came back, be rebooted or
> not? It seems alright now and in good health.
>
> 3. Should the HostedEngine be restored with engine-backup or is it not
> necessary?
>
> 4. Could the loss of the DNS server for the oVirt hosts lead to an
> unresponsive host?
> The nsswitch file on the ovirt hosts and engine, has the DNS defined as:
> hosts:  files dns myhostname
>
If you have opted for dns liveliness checks it could be.

>
> 5. How can we recover/rectify the situation above?
>
I would start checking for gluster split brains and ensure that all hosts
have connectivity in the storage domain net (ping, jumbo frames if
enabled). 99% of my similar issues have been caused from gluster split.

The fact that the engine is shown as paused and that you can still access
web ui makes me think you have a split brain issue

>
> Thanks for your help,
> Maria Souvalioti
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GO6S6GXRJWYZN5NZ5IFTNQ6SGNEB75WQ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZNIFUDLRYHU3YTYC35OLXVVHYKAPNJZI/

[ovirt-users] Re: recovering gluster volumes when moving hosts to a new datacenter

[Alex K]

On Fri, Jan 29, 2021, 12:15 Nathanaël Blanchet  wrote:

> Hi,
>
> I moved 3 hosts (for replica 3 volume) from a previous datacenter to a
> new datacenter.
>
> Those hosts had initially been configured in a gluster cluster and
> managed multiple gluster volume created with ovirt UI.
>
> These hosts are now apart of a new gluster cluster and they see each
> others with cli "gluster peer status" as well as the associated volumes
> "gluter volumes list".
>
> But I can't make gluster volumes visible in the usually "volume" tab, so
> ovirt doesn't seem to see them.
>
> Is there a way to import pre existing gluster volume so as to ovirt be
> able to manage them ?
>
Have you enabled gluster under cluster options?

>
> Thanks.
>
> --
> Nathanaël Blanchet
>
> Supervision réseau
> SIRE
> 227 avenue Professeur-Jean-Louis-Viala
> 34193 MONTPELLIER CEDEX 5
> Tél. 33 (0)4 67 54 84 55
> Fax  33 (0)4 67 54 84 14
> blanc...@abes.fr
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OW27PE5P7GXXBWJWAYQGZCFUCERYVVLY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/N45YODHDC7JDZGCIQKMELCI62VFNWGRG/

[ovirt-users] Re: oVirt Engine no longer Starting

[Alex K]

On Sat, Jan 16, 2021, 16:08 penguin pages  wrote:

>
> Thanks for help following below.
>
> 1) Auth to Libvirtd and show VM "hosted engine"  but also now that I
> manually registered "ns01" per above
> [root@medusa ~]# vdsm-client Host getVMList
> [
> {
> "status": "Down",
> "statusTime": "2218288798",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# virsh -c
> qemu:///system?authfile=/etc/ovirt-hosted-engine/virsh_auth.conf
> Welcome to virsh, the virtualization interactive terminal.
>
> Type:  'help' for help with commands
>'quit' to quit
>
> virsh # list --all
>  Id   NameState
> 
>  -HostedEngineshut off
>  -HostedEngineLocal   shut off
>  -ns01shut off
>
> 2) Start VM  but seems network is needed first
> virsh # start HostedEngine
> error: Failed to start domain HostedEngine
> error: Network not found: no network with matching name 'vdsm-ovirtmgmt'
>
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Requested operation is not valid: network 'default' is not active
>
> 3) Start Networks:  This is "next next" HCI+Gluster build so it called it
> "ovirtmgmt"
> virsh # net-list
>  Name  StateAutostart   Persistent
> 
>  ;vdsmdummy;   active   no  no
> virsh # net-autostart --network default
> Network default marked as autostarted
> virsh # net-start default
> Network default started
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Cannot access storage file '/var/tmp/localvmn4khg_ak/seed.iso': No
> such file or directory
>
> <<<>>
>
> virsh # dumpxml HostedEngineLocal
> 
>   HostedEngineLocal
>   bb2006ce-838b-47a3-a049-7e3e5c7bb049
>   
> http://libosinfo.org/xmlns/libvirt/domain/1.0;>
>   http://redhat.com/rhel/8.0"/>
> 
>   
>   16777216
>   16777216
>   4
>   
> hvm
> 
> 
>   
>   
> 
> 
>   
>   
>   
> 
>   
>   destroy
>   restart
>   destroy
>   
> 
> 
>   
>   
> /usr/libexec/qemu-kvm
> 
>   
>file='/var/tmp/localvmn4khg_ak/images/e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645'/>
>   
>function='0x0'/>
> 
> 
>   
>   
>   
>   
>   
> 
> 
> 
>function='0x2'/>
> 
> 
> 
>   
>   
>function='0x0' multifunction='on'/>
> 
> 
>   
>   
>function='0x1'/>
> 
> 
>   
>   
>function='0x2'/>
> 
> 
>   
>   
>function='0x3'/>
> 
> 
>   
>   
>function='0x4'/>
> 
> 
>function='0x0'/>
> 
> 
>   
>   
>   
>function='0x0'/>
> 
> 
>   
> 
>   
> 
> 
>   
> 
> 
>   
>   
> 
> 
> 
> 
>   
> 
> 
>   
>function='0x0'/>
> 
> 
> 
>   /dev/random
>function='0x0'/>
> 
>   
> 
>
> virsh #
>
> ##So not sure what hosted engine needs an ISO image.  Can I remove this?
> virsh # change-media HostedEngineLocal /var/tmp/localvmn4khg_ak/seed.iso
> --eject
> Successfully ejected media.
>
> virsh # start HostedEngineLocal
> error: Failed to start domain HostedEngineLocal
> error: Cannot access storage file
> '/var/tmp/localvmn4khg_ak/images/e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645'
> (as uid:107, gid:107): No such file or directory
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# tree |grep
> e2e4d97c-3430-4880-888e-84c283a80052/0f78b6f7-7755-4fe5-90e3-d41df791a645
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# pwd
> /gluster_bricks/engine/engine/3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> [root@medusa 3afc47ba-afb9-413f-8de5-8d9a2f45ecde]# tree
> .
> ├── dom_md
> │   ├── ids
> │   ├── inbox
> │   ├── leases
> │   ├── metadata
> │   ├── outbox
> │   └── xleases
> ├── ha_agent
> │   ├── hosted-engine.lockspace ->
> /run/vdsm/storage/3afc47ba-afb9-413f-8de5-8d9a2f45ecde/6023f2b1-ea6e-485b-9ac2-8decd5f7820d/b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   └── hosted-engine.metadata ->
> /run/vdsm/storage/3afc47ba-afb9-413f-8de5-8d9a2f45ecde/77082dd8-7cb5-41cc-a69f-0f4c0380db23/38d552c5-689d-47b7-9eea-adb308da8027
> ├── images
> │   ├── 1dc69552-dcc6-484d-8149-86c93ff4b8cc
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480.lease
> │   │   └── e4e26573-09a5-43fa-91ec-37d12de46480.meta
> │   ├── 375d2483-ee83-4cad-b421-a5a70ec06ba6
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a.lease
> │   │   └── f936d4be-15e3-4983-8bf0-9ba5b97e638a.meta
> │   ├── 6023f2b1-ea6e-485b-9ac2-8decd5f7820d
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   │   ├── 

[ovirt-users] Re: oVirt Engine no longer Starting

[Alex K]

On Fri, Jan 15, 2021, 22:04 penguin pages  wrote:

>
> Thanks for replies.
>
> Here is where it is at:
>
> # Two nodes think no VMs exist
> [root@odin ~]# vdsm-client Host getVMList
> []
>
> #One showing one VM but down
> [root@medusa ~]# vdsm-client Host getVMList
> [
> {
> "status": "Down",
> "statusTime": "2153886148",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# vdsm-client Host getAllVmStats
> [
> {
> "exitCode": 1,
> "exitMessage": "VM terminated with error",
> "exitReason": 1,
> "status": "Down",
> "statusTime": "2153916276",
> "vmId": "69ab4f82-1a53-42c8-afca-210a3a2715f1"
> }
> ]
> [root@medusa ~]# vdsm-client VM cont
> vmID="69ab4f82-1a53-42c8-afca-210a3a2715f1"
> vdsm-client: Command VM.cont with args {'vmID':
> '69ab4f82-1a53-42c8-afca-210a3a2715f1'} failed:
> (code=16, message=Unexpected exception)
>
>
> # Assuming that ID represents the hosted-engine I tried to start it
> [root@medusa ~]# hosted-engine --vm-start
> The hosted engine configuration has not been retrieved from shared
> storage. Please ensure that ovirt-ha-agent is running and the storage
> server is reachable.
>
> # Back to ovirt-ha-agent being fubar and stoping things.
>
> I have about 8 or so VMs on the cluster. Two are my IDM nodes which has
> DNS and other core services.. which is what I am really trying to get up ..
> even if manual until I figure out oVirt issue.  I think you are correct.
> "engine" volume is for just the engine.  Data is where the other VMs are
>
> [root@medusa images]# tree
> .
> ├── 335c6b1a-d8a5-4664-9a9c-39744d511af8
> │   ├── 579323ad-bf7b-479b-b682-6e1e234a7908
> │   ├── 579323ad-bf7b-479b-b682-6e1e234a7908.lease
> │   └── 579323ad-bf7b-479b-b682-6e1e234a7908.meta
> ├── d318cb8f-743a-461b-b246-75ffcde6bc5a
> │   ├── c16877d0-eb23-42ef-a06e-a3221ea915fc
> │   ├── c16877d0-eb23-42ef-a06e-a3221ea915fc.lease
> │   └── c16877d0-eb23-42ef-a06e-a3221ea915fc.meta
> └── junk
> ├── 296163f2-846d-4a2c-9a4e-83a58640b907
> │   ├── 376b895f-e0f2-4387-b038-fbef4705fbcc
> │   ├── 376b895f-e0f2-4387-b038-fbef4705fbcc.lease
> │   └── 376b895f-e0f2-4387-b038-fbef4705fbcc.meta
> ├── 45a478d7-4c1b-43e8-b106-7acc75f066fa
> │   ├── b5249e6c-0ba6-4302-8e53-b74d2b919d20
> │   ├── b5249e6c-0ba6-4302-8e53-b74d2b919d20.lease
> │   └── b5249e6c-0ba6-4302-8e53-b74d2b919d20.meta
> ├── d8b708c1-5762-4215-ae1f-0e57444c99ad
> │   ├── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9
> │   ├── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9.lease
> │   └── 2536ca6d-3254-4cdc-bbd8-349ec1b8a0e9.meta
> └── eaf12f3c-301f-4b61-b5a1-0c6d0b0a7f7b
> ├── fbf3bf59-a23a-4c6f-b66e-71369053b406
> ├── fbf3bf59-a23a-4c6f-b66e-71369053b406.lease
> └── fbf3bf59-a23a-4c6f-b66e-71369053b406.meta
>
> 7 directories, 18 files
> [root@medusa images]# cd /media/engine/
> [root@medusa engine]# ls
> 3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> [root@medusa engine]# tree
> .
> └── 3afc47ba-afb9-413f-8de5-8d9a2f45ecde
> ├── dom_md
> │   ├── ids
> │   ├── inbox
> │   ├── leases
> │   ├── metadata
> │   ├── outbox
> │   └── xleases
> ├── ha_agent
> ├── images
> │   ├── 1dc69552-dcc6-484d-8149-86c93ff4b8cc
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480
> │   │   ├── e4e26573-09a5-43fa-91ec-37d12de46480.lease
> │   │   └── e4e26573-09a5-43fa-91ec-37d12de46480.meta
> │   ├── 375d2483-ee83-4cad-b421-a5a70ec06ba6
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a
> │   │   ├── f936d4be-15e3-4983-8bf0-9ba5b97e638a.lease
> │   │   └── f936d4be-15e3-4983-8bf0-9ba5b97e638a.meta
> │   ├── 6023f2b1-ea6e-485b-9ac2-8decd5f7820d
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c
> │   │   ├── b38a5e37-fac4-4c23-a0c4-7359adff619c.lease
> │   │   └── b38a5e37-fac4-4c23-a0c4-7359adff619c.meta
> │   ├── 685309b1-1ae9-45f3-90c3-d719a594482d
> │   │   ├── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0
> │   │   ├── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0.lease
> │   │   └── 9eddcf51-fd15-4de5-a4b6-a83a9082dee0.meta
> │   ├── 74f1b2e7-2483-4e4d-8301-819bcd99129e
> │   │   ├── c1888b6a-c48e-46ce-9677-02e172ef07af
> │   │   ├── c1888b6a-c48e-46ce-9677-02e172ef07af.lease
> │   │   └── c1888b6a-c48e-46ce-9677-02e172ef07af.meta
> │   └── 77082dd8-7cb5-41cc-a69f-0f4c0380db23
> │   ├── 38d552c5-689d-47b7-9eea-adb308da8027
> │   ├── 38d552c5-689d-47b7-9eea-adb308da8027.lease
> │   └── 38d552c5-689d-47b7-9eea-adb308da8027.meta
> └── master
> ├── tasks
> │   ├── 150927c5-bae6-45e4-842c-a7ba229fc3ba
> │   │   └── 150927c5-bae6-45e4-842c-a7ba229fc3ba.job.0
> │   ├── 21bba697-26e6-4fd8-ac7c-76f86b458368.temp
> │   ├── 26c580b8-cdb2-4d21-9bea-96e0788025e6.temp
> │   ├── 2e0e347c-fd01-404f-9459-ef175c82c354.backup
> │   │   └── 

[ovirt-users] Re: oVirt Engine no longer Starting

[Alex K]

On Fri, Jan 15, 2021, 20:20 Strahil Nikolov via Users 
wrote:

>
> >
> > Questions:
> > 1) I have two important VMs that have snapshots that I need to boot
> > up.  Is their a means with an HCI configuration to manually start the
> > VMs without oVirt engine being up?
> What it worked for me was:
> 1) Start a VM via "virsh"
> define a virsh alias:
> alias virsh='virsh -c qemu:///system?authfile=/etc/ovirt-hosted-
> engine/virsh_auth.conf'
> Check the host's vdsm.log ,where the VM was last started - you will
> find the VM's xml inside .
> Copy the whole xml and use virsh to define the VM "virsh define
> myVM.xml && virsh start myVM"
>
If you cannot find the xml file of the vm then you van use virt install as
if you were running in plain KVM.


> 2) vdsm-client most probably can start VMs even when the engine is down
> > 2) Is their a means to debug what is going on with the engine failing
> > to start to repair (I hate reloading as the only fix for systems)
> You can use "hosted-engine" to start the HostedEngine VM in paused mode
> . Then you can connect over spice/vnc and then unpause the VM. Booting
> the HostedEngine VM from DVD is a little bit harder. You will need to
> get the HE's xml and edit it to point to the DVD. Once you got the
> altered HE config , you can define and start.
> > 3) Is their a means to re-deploy HCI setup wizard, but use the
> > "engine" volume and so retain the VMs and templates?
> You are not expected to mix HostedEngine and other VMs on the same
> storage domain (gluster volume).
>
> Best Regards,
> Strahil Nikolov
> >
> >
> >
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KPURBXOULJ7NPFS7LTTXQI3O5QRVHHY3/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/U5ZKGRY63OZSEIQVSZAKTFX4EX4EJOI3/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5DYQCR2SRXIRQELJ6VFMUGG7IRKZ2GE5/

[ovirt-users] Re: potential split-brain after upgrading Gluster version and rebooting one of three storage nodes

[Alex K]

On Mon, Jan 11, 2021, 20:51 Jayme  wrote:

> Correct me if I'm wrong but according to the docs, there might be a more
> elegant way of doing something similar with gluster cli ex: gluster volume
> heal  split-brain latest-mtime  -- although I have never
> tried it myself.
>
This is the usual way I resolve split brains.


> On Mon, Jan 11, 2021 at 1:50 PM Strahil Nikolov via Users 
> wrote:
>
>>
>> > Is this a split brain situation and how can I solve this? I would be
>> > very grateful for any help.
>> I've seen it before. Just check on the nodes which brick contains the
>> newest file (there is a timestamp inside it) and then rsync that file
>> from the node with newest version to the rest.
>> If gluster keeps showing that the file is still needing heal - just
>> "cat" it from the FUSE client (the mountpoint in /rhev/).
>>
>> Best Regards,
>> Strahil Nikolov
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2GLJIZQLFUZFSIVAVFFNG4CJZHNY7HFP/
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DRZ76K554HN24ZVSVR7D2LGCUAICQCLR/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/46S3DOQHR6HEZYHXNKCQDZCFZY3BA6QN/

[ovirt-users] Re: 2021 first ovirt network question

[Alex K]

On Thu, Jan 7, 2021, 16:14  wrote:

> Thanks for advice.
> Here is the iperf3 test results
>
> Connecting to host xyz.example.com, port 6000
> [  4] local XXX.XXX.XXX.XXX port 36140 connected to XYZ.XYZ.XYZ.XYZ port
> 6000
> [ ID] Interval   Transfer Bandwidth   Retr  Cwnd
> [  4]   0.00-1.00   sec  81.9 MBytes   687 Mbits/sec0352 KBytes
>
> [  4]   1.00-2.00   sec  80.5 MBytes   676 Mbits/sec0352 KBytes
>
> [  4]   2.00-3.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   3.00-4.00   sec  79.8 MBytes   669 Mbits/sec0362 KBytes
>
> [  4]   4.00-5.00   sec  80.6 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   5.00-6.00   sec  82.0 MBytes   688 Mbits/sec0362 KBytes
>
> [  4]   6.00-7.00   sec  81.3 MBytes   682 Mbits/sec0362 KBytes
>
> [  4]   7.00-8.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   8.00-9.00   sec  80.5 MBytes   676 Mbits/sec0362 KBytes
>
> [  4]   9.00-10.00  sec  79.8 MBytes   669 Mbits/sec0362 KBytes
>
Assuming xyz.example.com is in the display network you need to find out
what is throttling you at these values.

>
> Actually, what i was trying to ask is is there any reletion between
> "default route" and "display" network on oVirt network.
>
No, they should not be related

Because, if there is, it might be the source of the problem.
> As i wrote above, my "ovirtmanagement" and "default route"  network on the
> 1Gb port
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/TPQXDGMQOVCO2FFBOW2S5G4AVPSIZ2ZB/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/F77JSYHOKXTZCZFFMNN2IZTHLCNHC4HP/

[ovirt-users] Re: CentOS Stream support

[Alex K]

On Fri, Jun 5, 2020, 11:36 Michal Skrivanek 
wrote:

> Hi all,
> we would like to ask about interest in community about oVirt moving to
> CentOS Stream.
> There were some requests before but it’s hard to see how many people would
> really like to see that.
>
> With CentOS releases lagging behind RHEL for months it’s interesting to
> consider moving to CentOS Stream as it is much more up to date and allows
> us to fix bugs faster, with less workarounds and overhead for maintaining
> old code. E.g. our current integration tests do not really pass on CentOS
> 8.1 and we can’t really do much about that other than wait for more up to
> date packages. It would also bring us closer to make oVirt run smoothly on
> RHEL as that is also much closer to Stream than it is to outdated CentOS.
>
> So..would you like us to support CentOS Stream?
>
The answer is yes, though I do not see any other option, if I'm not
mistaken.

We don’t really have capacity to run 3 different platforms, would you still
> want oVirt to support CentOS Stream if it means “less support” for regular
> CentOS?
> There are some concerns about Stream being a bit less stable, do you share
> those concerns?
>
> Thank you for your comments,
> michal
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3B5MJKO7BS2DMQL3XOXPNO4BU3YDL52T/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XRDC2S6RKJ2BW7MJCTMLPD6Z5RSPODPX/

[ovirt-users] Re: fence_xvm for testing

[Alex K]

On Thu, Dec 17, 2020, 14:43 Strahil Nikolov  wrote:

> Sadly no. I have used it on test Clusters with KVM VMs.
>
You mean clusters managed with pacemaker?

>
> If you manage to use oVirt as a nested setup, fencing works quite well
> with ovirt.
>
I have setup nested ovirt 4.3 on top a KVM host running centos 8 stream.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В четвъртък, 17 декември 2020 г., 11:16:47 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi Strahil,
>
> Do you have a working setup with fence_xvm for ovirt 4.3?
>
> On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
> wrote:
> > Fence_xvm requires a key is deployed on both the Host and the VMs in
> order to succeed. What is happening when you use the cli on any of the VMs ?
> > Also, the VMs require an open tcp port to receive the necessary output
> of each request.
> >
> > Best Regards,
> > Strahil Nikolov
> >
> >
> >
> >
> >
> >
> > В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
> >
> >
> >
> >
> >
> > Hi friends,
> >
> > I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
> >
> > I have followed the following steps:
> > https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
> >
> > I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> > From command line all seems fine and I can get the status of the host
> VMs, but I was not able to find what is needed to set this up at engine UI:
> >
> >
> > At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> > I always get an error at GUI while engine logs give:
> >
> >
> > 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> > 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> > 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> > 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> > 2020-12-14 08:53:48,485Z ERROR 
> > [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> > 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> > 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> > 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> > 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> >
> >
> > Any idea?
> >
> > Thanx,
> > Alex
> >
> >
> 

[ovirt-users] Re: fence_xvm for testing

[Alex K]

Hi Strahil,

Do you have a working setup with fence_xvm for ovirt 4.3?

On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
wrote:

> Fence_xvm requires a key is deployed on both the Host and the VMs in order
> to succeed. What is happening when you use the cli on any of the VMs ?
> Also, the VMs require an open tcp port to receive the necessary output of
> each request.
>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi friends,
>
> I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
>
> I have followed the following steps:
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>
> I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> From command line all seems fine and I can get the status of the host VMs,
> but I was not able to find what is needed to set this up at engine UI:
>
>
> At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> I always get an error at GUI while engine logs give:
>
>
> 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> 2020-12-14 08:53:48,485Z ERROR 
> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
>
>
> Any idea?
>
> Thanx,
> Alex
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/B7IHC4MYY5LJFJMEJMLRRFSTMD7IK23I/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2DRBMQPDNN3KJL2CPODXVAJBA5X5OJ4J/

[ovirt-users] Re: fence_xvm for testing

[Alex K]

On Tue, Dec 15, 2020 at 1:43 PM emesika  wrote:

> The problem is that the custom fencing configuration is not defined well
>
> Please follow [1] and retry
>
> [1]
> https://www.ovirt.org/develop/developer-guide/engine/custom-fencing.html
>
Yes, I followed that.
I cannot see what I am missing:

[root@manager ~]# engine-config -g CustomVdsFenceType
CustomVdsFenceType: fence_xvm version: general
[root@manager ~]# engine-config -g CustomFenceAgentMapping
CustomFenceAgentMapping: fence_xvm=xvm version: general
[root@manager ~]# engine-config -g CustomVdsFenceOptionMapping
CustomVdsFenceOptionMapping: fence_xvm: version: general


>
> On Tue, Dec 15, 2020 at 12:56 PM Alex K  wrote:
>
>>
>>
>> On Tue, Dec 15, 2020 at 12:34 PM Martin Perina 
>> wrote:
>>
>>>
>>>
>>> On Tue, Dec 15, 2020 at 11:18 AM Alex K  wrote:
>>>
>>>>
>>>>
>>>> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina 
>>>> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> could you please provide engine.log? And also vdsm.log from a host
>>>>> which was acting as a fence proxy?
>>>>>
>>>>
>>>> At proxy host (kvm1) I see the following vdsm.log:
>>>>
>>>> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer]
>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>>>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>>>
>>>
>>> Isn't there stdout and stderr content of fence_xvm execution a few lines
>>> above, which should reveal the exact error? If not, then could you please
>>> turn on debug logging using below command:
>>>
>>> vdsm-client Host setLogLevel level=DEBUG
>>>
>>> This should be executed on the host which acts as a fence proxy (if you 
>>> have multiple hosts, then you would need to turn on debug on all, because 
>>> the fence proxy is selected randomly).
>>>
>>> Once we will have vdsm.log with fence_xvm execution details, then you can 
>>> change log level to INFO again by running:
>>>
>>> I had to set engine-config -s CustomFenceAgentMapping="fence_xvm=xvm"
>> at engine, as it seems the host prepends fence_.
>> After that I got the following at the proxy host with DEBUG enabled:
>>
>> 2020-12-15 10:51:57,891+ DEBUG (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>> 2020-12-15 10:51:57,892+ DEBUG (jsonrpc/7) [root] /usr/bin/taskset
>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>> 2020-12-15 10:51:57,911+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.02 seconds (__init__:312)
>> 2020-12-15 10:51:58,339+ DEBUG (jsonrpc/5) [jsonrpc.JsonRpcServer]
>> Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
>> u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
>> u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
>> 2020-12-15 10:51:58,340+ DEBUG (jsonrpc/5) [root] /usr/bin/taskset
>> --cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
>> 2020-12-15 10:51:58,356+ INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312
>>
>> while at engine at got:
>> 2020-12-15 10:51:57,873Z INFO
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
>> FENCE_OPERATION_USING_AGENT_AND_PROXY_STARTED(9,020), Executing power
>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>> and Fence Agent xvm:225.0.0.12.
>> 2020-12-15 10:51:57,888Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] START,
>> FenceVdsVDSCommand(HostName = kvm1.lab.local,
>> FenceVdsVDSCommandParameters:{hostId='91c81bbe-5933-4ed0-b9c5-2c8c277e44c7',
>> targetVdsId='b5e8fe3d-cbea-44cb-835a-f88d6d70c163', action='STATUS',
>> agent='FenceAgent:{id='null', hostId='null', order='1', type='xvm',
>> ip='225.0.0.12', port='0', user='root', password='***',
>> encryptOptions='false', options='port=o

[ovirt-users] Re: fence_xvm for testing

[Alex K]

On Tue, Dec 15, 2020 at 12:34 PM Martin Perina  wrote:

>
>
> On Tue, Dec 15, 2020 at 11:18 AM Alex K  wrote:
>
>>
>>
>> On Tue, Dec 15, 2020 at 11:59 AM Martin Perina 
>> wrote:
>>
>>> Hi,
>>>
>>> could you please provide engine.log? And also vdsm.log from a host which
>>> was acting as a fence proxy?
>>>
>>
>> At proxy host (kvm1) I see the following vdsm.log:
>>
>> 2020-12-15 10:13:03,933+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>> 2020-12-15 10:13:04,376+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer]
>> RPC call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312)
>>
>
> Isn't there stdout and stderr content of fence_xvm execution a few lines
> above, which should reveal the exact error? If not, then could you please
> turn on debug logging using below command:
>
> vdsm-client Host setLogLevel level=DEBUG
>
> This should be executed on the host which acts as a fence proxy (if you have 
> multiple hosts, then you would need to turn on debug on all, because the 
> fence proxy is selected randomly).
>
> Once we will have vdsm.log with fence_xvm execution details, then you can 
> change log level to INFO again by running:
>
> I had to set engine-config -s CustomFenceAgentMapping="fence_xvm=xvm" at
engine, as it seems the host prepends fence_.
After that I got the following at the proxy host with DEBUG enabled:

2020-12-15 10:51:57,891+ DEBUG (jsonrpc/7) [jsonrpc.JsonRpcServer]
Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
2020-12-15 10:51:57,892+ DEBUG (jsonrpc/7) [root] /usr/bin/taskset
--cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
2020-12-15 10:51:57,911+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
call Host.fenceNode failed (error 1) in 0.02 seconds (__init__:312)
2020-12-15 10:51:58,339+ DEBUG (jsonrpc/5) [jsonrpc.JsonRpcServer]
Calling 'Host.fenceNode' in bridge with {u'username': u'root', u'addr':
u'225.0.0.12', u'agent': u'xvm', u'options': u'port=ovirt-node0',
u'action': u'status', u'password': '', u'port': u'0'} (__init__:329)
2020-12-15 10:51:58,340+ DEBUG (jsonrpc/5) [root] /usr/bin/taskset
--cpu-list 0-3 /usr/sbin/fence_xvm (cwd None) (commands:198)
2020-12-15 10:51:58,356+ INFO  (jsonrpc/5) [jsonrpc.JsonRpcServer] RPC
call Host.fenceNode failed (error 1) in 0.01 seconds (__init__:312

while at engine at got:
2020-12-15 10:51:57,873Z INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_STARTED(9,020), Executing power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent xvm:225.0.0.12.
2020-12-15 10:51:57,888Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] START,
FenceVdsVDSCommand(HostName = kvm1.lab.local,
FenceVdsVDSCommandParameters:{hostId='91c81bbe-5933-4ed0-b9c5-2c8c277e44c7',
targetVdsId='b5e8fe3d-cbea-44cb-835a-f88d6d70c163', action='STATUS',
agent='FenceAgent:{id='null', hostId='null', order='1', type='xvm',
ip='225.0.0.12', port='0', user='root', password='***',
encryptOptions='false', options='port=ovirt-node0'}', policy='null'}), log
id: e6d3e8c
2020-12-15 10:51:58,008Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-15 10:51:58,008Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: e6d3e8c
2020-12-15 10:51:58,133Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-5) [a4f30921-37a9-45c1-97e5-26152f844d72] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent xvm:225.0.0.12 failed.
2020-12-15 10:51:58,134Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-5)
[a4f30921-37a9-45c1-97e5-26152f844d72] Fence action failed using proxy host
'kvm1.lab.local', trying another proxy
2020-12-15 10:51:58,258Z ERROR
[org.ovirt.engine.core.bll.pm.FenceProxyLocator] (default task-5)
[a4f30921-37a9-45c1-97e5-26152f844d72] Can not run fence action on host
'kvm0.lab.local', no 

[ovirt-users] Re: fence_xvm for testing

[Alex K]

09:57,695Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-13)
[fa61ae72-bc0c-4487-aeec-2b847877b6b5] Failed to find another proxy to
re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
2020-12-15 10:09:57,695Z ERROR
[org.ovirt.engine.core.utils.pm.VdsFenceOptions] (default task-13)
[fa61ae72-bc0c-4487-aeec-2b847877b6b5] Cannot find fence agent named
'fence_xvm' in fence option mapping
2020-12-15 10:09:57,815Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-13) [fa61ae72-bc0c-4487-aeec-2b847877b6b5] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-15 10:09:57,816Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-13) [fa61ae72-bc0c-4487-aeec-2b847877b6b5] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: 4b58ec5e
2020-12-15 10:09:57,895Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-13) [fa61ae72-bc0c-4487-aeec-2b847877b6b5] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent fence_xvm:225.0.0.12 failed.

At engine I had set the fence agent mapping as below (and have restarted
ovirt-engine service):

engine-config -g CustomFenceAgentMapping
CustomFenceAgentMapping: fence_xvm=fence_xvm version: general

Let me know if you need more logs.
I am running ovirt 4.3.10.


> Thanks,
> Martin
>
>
> On Tue, Dec 15, 2020 at 10:23 AM Alex K  wrote:
>
>>
>>
>> On Tue, Dec 15, 2020 at 11:07 AM Alex K  wrote:
>>
>>>
>>>
>>> On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
>>> wrote:
>>>
>>>> Fence_xvm requires a key is deployed on both the Host and the VMs in
>>>> order to succeed. What is happening when you use the cli on any of the VMs 
>>>> ?
>>>> Also, the VMs require an open tcp port to receive the necessary output
>>>> of each request.I
>>>
>>> I deployed keys at the physical host and virtual hosts, as per
>>> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>>> I can get the VM status from the virtual hosts:
>>>
>>> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
>>> /etc/cluster/fence_xvm.key -H ovirt-node0 -o status
>>> Status: ON
>>> You have new mail in /var/spool/mail/root
>>> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
>>> /etc/cluster/fence_xvm.key -H ovirt-node1 -o status
>>> Status: ON
>>>
>>> kvm0 and kvm1 are the hostnames of each virtual host, while ovirt-node0
>>> and ovirt-node1 are the domain names of the same virtual hosts as defined
>>> at virsh.
>>>
>>
>> I am passing also the port/domain option at GUI, but from logs it seems
>> it is being ignored as it is not being logged from engine.
>>
>> [image: image.png]
>> tried also domain=ovirt-node0 with same results.
>>
>>
>>
>>>> Best Regards,
>>>> Strahil Nikolov
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
>>>> rightkickt...@gmail.com> написа:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Hi friends,
>>>>
>>>> I was wondering what is needed to setup fence_xvm in order to use for
>>>> power management in virtual nested environments for testing purposes.
>>>>
>>>> I have followed the following steps:
>>>> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>>>>
>>>> I tried also engine-config -s
>>>> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
>>>> From command line all seems fine and I can get the status of the host
>>>> VMs, but I was not able to find what is needed to set this up at engine UI:
>>>>
>>>>
>>>> At username and pass I just filled dummy values as they should not be
>>>> needed for fence_xvm.
>>>> I always get an error at GUI while engine logs give:
>>>>
>>>>
>>>> 2020-12-14 08:53:48,343Z WARN
>>>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>>>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>>>> VDS_ALERT_FENCE_TEST_FAI

[ovirt-users] Re: fence_xvm for testing

[Alex K]

On Tue, Dec 15, 2020 at 11:07 AM Alex K  wrote:

>
>
> On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
> wrote:
>
>> Fence_xvm requires a key is deployed on both the Host and the VMs in
>> order to succeed. What is happening when you use the cli on any of the VMs ?
>> Also, the VMs require an open tcp port to receive the necessary output of
>> each request.I
>
> I deployed keys at the physical host and virtual hosts, as per
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
> I can get the VM status from the virtual hosts:
>
> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
> /etc/cluster/fence_xvm.key -H ovirt-node0 -o status
> Status: ON
> You have new mail in /var/spool/mail/root
> [root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k
> /etc/cluster/fence_xvm.key -H ovirt-node1 -o status
> Status: ON
>
> kvm0 and kvm1 are the hostnames of each virtual host, while ovirt-node0
> and ovirt-node1 are the domain names of the same virtual hosts as defined
> at virsh.
>

I am passing also the port/domain option at GUI, but from logs it seems it
is being ignored as it is not being logged from engine.

[image: image.png]
tried also domain=ovirt-node0 with same results.



>> Best Regards,
>> Strahil Nikolov
>>
>>
>>
>>
>>
>>
>> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
>> rightkickt...@gmail.com> написа:
>>
>>
>>
>>
>>
>> Hi friends,
>>
>> I was wondering what is needed to setup fence_xvm in order to use for
>> power management in virtual nested environments for testing purposes.
>>
>> I have followed the following steps:
>> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>>
>> I tried also engine-config -s
>> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
>> From command line all seems fine and I can get the status of the host
>> VMs, but I was not able to find what is needed to set this up at engine UI:
>>
>>
>> At username and pass I just filled dummy values as they should not be
>> needed for fence_xvm.
>> I always get an error at GUI while engine logs give:
>>
>>
>> 2020-12-14 08:53:48,343Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
>> kvm0.lab.local.Internal JSON-RPC error
>> 2020-12-14 08:53:48,343Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
>> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
>> message='Internal JSON-RPC error'}, log id: 2437b13c
>> 2020-12-14 08:53:48,400Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
>> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
>> and Fence Agent fence_xvm:225.0.0.12 failed.
>> 2020-12-14 08:53:48,400Z WARN
>>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
>> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
>> 'kvm1.lab.local', trying another proxy
>> 2020-12-14 08:53:48,485Z ERROR 
>> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
>> action on host 'kvm0.lab.local', no suitable proxy host was found.
>> 2020-12-14 08:53:48,486Z WARN
>>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
>> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
>> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
>> 2020-12-14 08:53:48,582Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
>> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
>> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
>> kvm0.lab.local.Internal JSON-RPC error
>> 2020-12-14 08:53:48,582Z INFO
>>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
>> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
>> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
>> message='Internal JSON-RPC error'}, log id: 8607bc9
>> 2020-12-14 08:53:48,637Z WARN
>>  [org.ovirt.engine.core.dal.dbbroker.auditloghan

[ovirt-users] Re: fence_xvm for testing

[Alex K]

On Mon, Dec 14, 2020 at 8:59 PM Strahil Nikolov 
wrote:

> Fence_xvm requires a key is deployed on both the Host and the VMs in order
> to succeed. What is happening when you use the cli on any of the VMs ?
> Also, the VMs require an open tcp port to receive the necessary output of
> each request.I

I deployed keys at the physical host and virtual hosts, as per
https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
I can get the VM status from the virtual hosts:

[root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k /etc/cluster/fence_xvm.key
-H ovirt-node0 -o status
Status: ON
You have new mail in /var/spool/mail/root
[root@kvm1 cluster]# fence_xvm -a 225.0.0.12 -k /etc/cluster/fence_xvm.key
-H ovirt-node1 -o status
Status: ON

kvm0 and kvm1 are the hostnames of each virtual host, while ovirt-node0 and
ovirt-node1 are the domain names of the same virtual hosts as defined at
virsh.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В понеделник, 14 декември 2020 г., 10:57:11 Гринуич+2, Alex K <
> rightkickt...@gmail.com> написа:
>
>
>
>
>
> Hi friends,
>
> I was wondering what is needed to setup fence_xvm in order to use for
> power management in virtual nested environments for testing purposes.
>
> I have followed the following steps:
> https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md
>
> I tried also engine-config -s
> CustomFenceAgentMapping="fence_xvm=_fence_xvm"
> From command line all seems fine and I can get the status of the host VMs,
> but I was not able to find what is needed to set this up at engine UI:
>
>
> At username and pass I just filled dummy values as they should not be
> needed for fence_xvm.
> I always get an error at GUI while engine logs give:
>
>
> 2020-12-14 08:53:48,343Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,343Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 2437b13c
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
> 2020-12-14 08:53:48,400Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
> 'kvm1.lab.local', trying another proxy
> 2020-12-14 08:53:48,485Z ERROR 
> [org.ovirt.engine.core.bll.pm.FenceProxyLocator]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] Can not run fence
> action on host 'kvm0.lab.local', no suitable proxy host was found.
> 2020-12-14 08:53:48,486Z WARN
>  [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
> [07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
> re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
> 2020-12-14 08:53:48,582Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
> kvm0.lab.local.Internal JSON-RPC error
> 2020-12-14 08:53:48,582Z INFO
>  [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
> task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
> return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
> message='Internal JSON-RPC error'}, log id: 8607bc9
> 2020-12-14 08:53:48,637Z WARN
>  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
> FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
> management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
> and Fence Agent fence_xvm:225.0.0.12 failed.
>
>
> Any idea?
>
> Thanx,
> Alex
>
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-gu

[ovirt-users] fence_xvm for testing

[Alex K]

Hi friends,

I was wondering what is needed to setup fence_xvm in order to use for power
management in virtual nested environments for testing purposes.

I have followed the following steps:
https://github.com/rightkick/Notes/blob/master/Ovirt-fence_xmv.md

I tried also

engine-config -s CustomFenceAgentMapping="fence_xvm=_fence_xvm"

>From command line all seems fine and I can get the status of the host VMs,
but I was not able to find what is needed to set this up at engine UI:

[image: image.png]
At username and pass I just filled dummy values as they should not be
needed for fence_xvm.
I always get an error at GUI while engine logs give:


2020-12-14 08:53:48,343Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-14 08:53:48,343Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: 2437b13c
2020-12-14 08:53:48,400Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent fence_xvm:225.0.0.12 failed.
2020-12-14 08:53:48,400Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Fence action failed using proxy host
'kvm1.lab.local', trying another proxy
2020-12-14 08:53:48,485Z ERROR
[org.ovirt.engine.core.bll.pm.FenceProxyLocator] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Can not run fence action on host
'kvm0.lab.local', no suitable proxy host was found.
2020-12-14 08:53:48,486Z WARN
 [org.ovirt.engine.core.bll.pm.FenceAgentExecutor] (default task-4)
[07c1d540-6d8d-419c-affb-181495d75759] Failed to find another proxy to
re-run failed fence action, retrying with the same proxy 'kvm1.lab.local'
2020-12-14 08:53:48,582Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
VDS_ALERT_FENCE_TEST_FAILED(9,001), Power Management test failed for Host
kvm0.lab.local.Internal JSON-RPC error
2020-12-14 08:53:48,582Z INFO
 [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (default
task-4) [07c1d540-6d8d-419c-affb-181495d75759] FINISH, FenceVdsVDSCommand,
return: FenceOperationResult:{status='ERROR', powerStatus='UNKNOWN',
message='Internal JSON-RPC error'}, log id: 8607bc9
2020-12-14 08:53:48,637Z WARN
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-4) [07c1d540-6d8d-419c-affb-181495d75759] EVENT_ID:
FENCE_OPERATION_USING_AGENT_AND_PROXY_FAILED(9,021), Execution of power
management status on Host kvm0.lab.local using Proxy Host kvm1.lab.local
and Fence Agent fence_xvm:225.0.0.12 failed.


Any idea?

Thanx,
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/B7IHC4MYY5LJFJMEJMLRRFSTMD7IK23I/

[ovirt-users] Re: OPNsense / FreeBSD 12.1

[Alex K]

On Sat, Dec 12, 2020, 03:37 Jorge Visentini 
wrote:

> Hi Alex, thank you for your reply.
>
> So ... I didn't see any error messages.
> I attached the log output and some prints to get an idea of what I'm
> talking about.
>
I see you have defined the guest to be of OS type RHEL. can you try to set
it general Linux? I don't remember now if there is a bsd/freebsd type that
you can set at os type for guest.

>
> Thank you again.
>
> Em sex., 11 de dez. de 2020 às 17:19, Alex K 
> escreveu:
>
>>
>>
>> On Fri, Dec 11, 2020, 20:39 Jorge Visentini 
>> wrote:
>>
>>> Hi all.
>>>
>>> I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it was not
>>> possible to detect the NICs.
>>>
>>> I tried both the virtio driver and the e1000. Virtio does not detect and
>>> e1000 crashes at startup.
>>> In pure KVM, it works, so I believe there is some incompatibility with
>>> oVirt 4.4.4.
>>>
>>> Any tips?
>>>
>> Please check/share the error message you observe at vdsm logs when
>> starting the VM.
>>
>>>
>>> --
>>> Att,
>>> Jorge Visentini
>>> +55 55 98432-9868
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/
>>>
>>
>
> --
> Att,
> Jorge Visentini
> +55 55 98432-9868
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BHZA6VJPA3VUUPX732HRPTDSC24WWHVS/

[ovirt-users] Re: OPNsense / FreeBSD 12.1

[Alex K]

On Fri, Dec 11, 2020, 20:39 Jorge Visentini 
wrote:

> Hi all.
>
> I tried to install OPNsense 20.7.6 (FreeBSD 12.1) and it was not possible
> to detect the NICs.
>
> I tried both the virtio driver and the e1000. Virtio does not detect and
> e1000 crashes at startup.
> In pure KVM, it works, so I believe there is some incompatibility with
> oVirt 4.4.4.
>
> Any tips?
>
Please check/share the error message you observe at vdsm logs when starting
the VM.

>
> --
> Att,
> Jorge Visentini
> +55 55 98432-9868
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7EX6TQPUSZ5M6VUJO23W7FTE2XO23Y66/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J5FX4SOV5I5CDYWTR4VOGUK5HT4KIZFB/

[ovirt-users] Re: Can not connect to gluster storage

[Alex K]

On Fri, Nov 27, 2020, 15:02 Stefan Wolf  wrote:

> Hello,
> I ve a host that can not connet to gluster storage.
> It has worked since I ve set up the environment, and today it stoped
> working
>
> this are the error messages in the webui
> The error message for connection kvm380.durchhalten.intern:/data returned
> by VDSM was: Failed to fetch Gluster Volume List
> Failed to connect Host kvm380.durchhalten.intern to the Storage Domains
> data.
> Failed to connect Host kvm380.durchhalten.intern to the Storage Domains
> hosted_storage.
>
>
> and here the vdsm.log
>
> StorageDomainDoesNotExist: Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',)
> 2020-11-27 12:59:07,665+ INFO  (jsonrpc/2) [storage.TaskManager.Task]
> (Task='8bed48b8-0696-4d3f-966a-119219f3b013') aborting: Task is aborted:
> "Storage domain does not exist: (u'36663740-576a-4498-b28e-0a402628c6a7',)"
> - code 358 (task:1181)
> 2020-11-27 12:59:07,665+ ERROR (jsonrpc/2) [storage.Dispatcher] FINISH
> getStorageDomainInfo error=Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',) (dispatcher:83)
> 2020-11-27 12:59:07,666+ INFO  (jsonrpc/2) [jsonrpc.JsonRpcServer] RPC
> call StorageDomain.getInfo failed (error 358) in 0.38 seconds (__init__:312)
> 2020-11-27 12:59:07,698+ INFO  (jsonrpc/7) [vdsm.api] START
> connectStorageServer(domType=7,
> spUUID=u'----', conList=[{u'id':
> u'e29cf818-5ee5-46e1-85c1-8aeefa33e95d', u'vfs_type': u'glusterfs',
> u'connection': u'kvm380.durchhalten.intern:/engine', u'user': u'kvm'}],
> options=None) from=::1,40964, task_id=3a3eeb80-50ef-4710-a4f4-9d35da2ff281
> (api:48)
> 2020-11-27 12:59:07,871+ ERROR (jsonrpc/7) [storage.HSM] Could not
> connect to storageServer (hsm:2420)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/hsm.py", line 2417,
> in connectStorageServer
> conObj.connect()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 167, in connect
> self.validate()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 297, in validate
> if not self.volinfo:
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 284, in volinfo
> self._volinfo = self._get_gluster_volinfo()
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/storageServer.py",
> line 329, in _get_gluster_volinfo
> self._volfileserver)
>   File "/usr/lib/python2.7/site-packages/vdsm/common/supervdsm.py", line
> 56, in __call__
> return callMethod()
>   File "/usr/lib/python2.7/site-packages/vdsm/common/supervdsm.py", line
> 54, in 
> **kwargs)
>   File "", line 2, in glusterVolumeInfo
>   File "/usr/lib64/python2.7/multiprocessing/managers.py", line 773, in
> _callmethod
> raise convert_to_error(kind, result)
> GlusterVolumesListFailedException: Volume list failed: rc=30806 out=()
> err=['Volume does not exist']
> 2020-11-27 12:59:07,871+ INFO  (jsonrpc/7) [vdsm.api] FINISH
> connectStorageServer return={'statuslist': [{'status': 4149, 'id':
> u'e29cf818-5ee5-46e1-85c1-8aeefa33e95d'}]} from=::1,40964,
> task_id=3a3eeb80-50ef-4710-a4f4-9d35da2ff281 (api:54)
> 2020-11-27 12:59:07,871+ INFO  (jsonrpc/7) [jsonrpc.JsonRpcServer] RPC
> call StoragePool.connectStorageServer succeeded in 0.18 seconds
> (__init__:312)
> 2020-11-27 12:59:08,474+ INFO  (Reactor thread)
> [ProtocolDetector.AcceptorImpl] Accepted connection from ::1:40966
> (protocoldetector:61)
> 2020-11-27 12:59:08,484+ INFO  (Reactor thread)
> [ProtocolDetector.Detector] Detected protocol stomp from ::1:40966
> (protocoldetector:125)
> 2020-11-27 12:59:08,484+ INFO  (Reactor thread) [Broker.StompAdapter]
> Processing CONNECT request (stompserver:95)
> 2020-11-27 12:59:08,485+ INFO  (JsonRpc (StompReactor))
> [Broker.StompAdapter] Subscribe command received (stompserver:124)
> 2020-11-27 12:59:08,525+ INFO  (jsonrpc/1) [jsonrpc.JsonRpcServer] RPC
> call Host.ping2 succeeded in 0.00 seconds (__init__:312)
> 2020-11-27 12:59:08,529+ INFO  (jsonrpc/0) [jsonrpc.JsonRpcServer] RPC
> call Host.ping2 succeeded in 0.00 seconds (__init__:312)
> 2020-11-27 12:59:08,533+ INFO  (jsonrpc/6) [vdsm.api] START
> getStorageDomainInfo(sdUUID=u'36663740-576a-4498-b28e-0a402628c6a7',
> options=None) from=::1,40966, task_id=ee3ac98e-6a93-4cb2-a626-5533c8fb78ad
> (api:48)
> 2020-11-27 12:59:08,909+ INFO  (jsonrpc/6) [vdsm.api] FINISH
> getStorageDomainInfo error=Storage domain does not exist:
> (u'36663740-576a-4498-b28e-0a402628c6a7',) from=::1,40966,
> task_id=ee3ac98e-6a93-4cb2-a626-5533c8fb78ad (api:52)
> 2020-11-27 12:59:08,910+ ERROR (jsonrpc/6) [storage.TaskManager.Task]
> (Task='ee3ac98e-6a93-4cb2-a626-5533c8fb78ad') Unexpected error (task:875)
> Traceback (most recent call last):
>   File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882,
> in _run
> return fn(*args, **kargs)
>   

[ovirt-users] Re: Connecting OVN network to physical network

[Alex K]

Seems that this is not supported when the switch type of cluster is "Linux
bridge".
I will need to use a new cluster with OVS type of switch.

Below the paragraph from [1]:
1.2. Physical Networks

It is possible to connect the OVN logical networks to a physical network,
akin to OpenStack’s physnet
<https://ovirt.org/develop/release-management/features/network/provider-physical-network.html>.
The traffic on the physical external network can optionally be VLAN tagged.
Connecting to external networks is *limited* to oVirt clusters configured
to use *Open vSwitch* switch type, which is currently in tech-preview.


[1]:
https://github.com/oVirt/ovirt-provider-ovn/blob/master/docs/provider_api_description.adoc#security

On Wed, Nov 25, 2020 at 9:47 PM Alex K  wrote:

> Hi all,
>
> I have created some logical switches at the OVN network provider (the
> default provider that is configured during engine-setup). This is working
> fine.
>
> I would like though to be able to connect a logical OVN switch to a
> physical network at which the hosts have access, so as to give access to
> guest VMs to this network. When connecting such switch to a physical
> network the guest VMs do not have access to the physical network:
>
> [image: image.png]
> It seems that this should be supported from ovirt. Am I missing something?
>
> P.S. I know I can provide such connectivity through standard networking,
> though was wondering if this can be done with OVN.
>
> Many thanx,
> Alex
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MYM3HZLNJV7O5QU2SPH5IJTBLGWG2MCW/

[ovirt-users] Connecting OVN network to physical network

[Alex K]

Hi all,

I have created some logical switches at the OVN network provider (the
default provider that is configured during engine-setup). This is working
fine.

I would like though to be able to connect a logical OVN switch to a
physical network at which the hosts have access, so as to give access to
guest VMs to this network. When connecting such switch to a physical
network the guest VMs do not have access to the physical network:

[image: image.png]
It seems that this should be supported from ovirt. Am I missing something?

P.S. I know I can provide such connectivity through standard networking,
though was wondering if this can be done with OVN.

Many thanx,
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WGSXE6ALQE3XHLIIVQCYKZFDV4L4DPGL/

[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

[Alex K]

On Wed, Nov 25, 2020 at 8:05 PM <3c.moni...@gruppofilippetti.it> wrote:

> Hi,
> it seems not work...
>
> bash-4.2$ psql
> psql (10.6)
> Type "help" for help.
>
> postgres=# SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM
> vm_images_view where imagestatus = 2);
> ERROR:  relation "vms" does not exist
> LINE 1: SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM...
>
seems you did not connect at engine DB.

At ovirt 4.3, do the following:

1. ssh at engine
2. su - postgres -c 'scl enable rh-postgresql10 -- psql'
3. \c engine
4. SELECT vm_name from vms where vm_guid = (SELECT vm_guid FROM
vm_images_view where imagestatus = 2);
5. SELECT image_guid from vm_images_view where imagestatus=2;
6. update images SET imagestatus=1 where image_guid = {The guid which
returned in the last query}



^
> postgres=#
>
> Thanks a lot anyway.
> M.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/KWGD5PB7ACRAJ7VQRFSYFZE2SQDZTIPY/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GT4NWMLI4M6OYTCQFGDFXGNTLENEMWSR/

[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

[Alex K]

On Tue, Nov 17, 2020, 18:42 <3c.moni...@gruppofilippetti.it> wrote:

> Hi.
> taskcleaner and unlock_entity are just 2 items of reported rhel solution
> I've used , but didn't worked.
> Locked Image still there!
>
I would try also to unlock it at db. Some steps from version 3.x. should be
same for 4.x:


log into the DB and perform the following


SELECT vm_name frim vms where vm_guid = (SELECT vm_guid FROM
vm_images_view where imagestatus = 2);

See if you get the VM which the disk is locked on it.

If so do:
SELECT image_guid from vm_images_view where imagestatus=2;
# Get the guid returned and then
Update images SET imagestatus=1 where image_guid = {The guid which
returned in the last query}


Thanks.
> M.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/74QMVFTM356GHFIHWPUKMIZLIRDOPYHT/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HV2ZJ34JWFGGSGFBH6ULJ46R4FCQICAJ/

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

[Alex K]

On Tue, Nov 24, 2020 at 12:44 PM Facundo Badaracco 
wrote:

> hi alex!
>
> imageio-proxy isnt installed. Only ovirt-imageio service is running.
> (ovirt 4.4 now, i made the update)
>
If I run the following I get:
[root@engine ~]# systemctl | grep image
  ovirt-imageio-proxy.service
Then checking the status of the service I confirm it is up:
  systemctl status ovirt-imageio-proxy.service
If the service is up and ok then you need to check the certificate issue. I
had noticed some times that importing the cert form GUI had not resolved
the issue. You may try to manually get the CA cert from engine
(/etc/pki/ovirt-engine/ca.pem) and import it at your browser. Clean cache
at browser and try again. The browser should indicate the connection is
trusted and secure. Also, you might need to remove the already imported
cert from your browser.


> when i connecto to the web UI, it say the certificate is not valid. with a
> red warning. but, i have already added the certificate to chrome
>
> El mar, 24 de nov. de 2020 a la(s) 07:22, Alex K (rightkickt...@gmail.com)
> escribió:
>
>>
>>
>> On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
>> wrote:
>>
>>> Hi everyone.
>>>
>>> Im trying to upload a ISO to my data domain, the GUI gives me this error
>>> "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine
>>> certificate
>>> <https://192.168.2.27/ovirt-engine/services/pki-resource?resource=ca-certificate=X509-PEM-CA>
>>>  is
>>> registered as a valid CA in the browser.".
>>>
>> is the imageio service running ok?  At engine: systemctl status
>> ovirt-imageio-proxy
>> Also, when connecting at the engine web UI, is the browser happy with the
>> certificate of the UI?
>>
>>>
>>> the image fails whne trying to upload.
>>>
>>> i have added the certificate in chrome, but inst working.
>>>
>>> Some help? any other way to upload?
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KOO32KJSJCCQEQKA2TLFZ5G26C3TO6WC/

[ovirt-users] Re: Fix corrupt self-hosted engine

[Alex K]

On Mon, Nov 23, 2020 at 10:09 AM Yedidyah Bar David  wrote:

> On Mon, Nov 23, 2020 at 9:54 AM Alex K  wrote:
> >
> >
> >
> > On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David 
> wrote:
> >>
> >> On Thu, Nov 19, 2020 at 9:43 PM Alex K  wrote:
> >>>
> >>>
> >>>
> >>> On Thu, Nov 19, 2020 at 5:31 PM Alex K 
> wrote:
> >>>>
> >>>> Hi Didi,
> >>>>
> >>>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
> wrote:
> >>>>>
> >>>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K 
> wrote:
> >>>>>>
> >>>>>> Hi all,
> >>>>>>
> >>>>>> I have a corrupt self-hosted engine (with several file system
> errors, postgres not able to start) and thus it does not give access to the
> web UI. This happened following an unlucky split brain resolution (I am
> running 2 nodes). The two hosts are running VMs also which I would like to
> keep running as they are needed.
> >>>>>>
> >>>>>> When trying to boot into rescue mode (using
> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
> else.
> >>>>>
> >>>>>
> >>>>> This means that more than just the DB is corrupt...
> >>>>>
> >>>>>>
> >>>>>>
> >>>>>> I have backups of engine files with scope all (using the
> engine-backup tool).
> >>>>>> What is the best approach to try and fix the engine or redeploy.
> >>>>>
> >>>>>
> >>>>> If you are careful, and know what you are doing, you can try
> something like the following. I am not giving many details, hopefully you
> can find on the net tutorials about how to use the things I suggest:
> >>>>>
> >>>>> 1. Move to global maintenance
> >>>>>
> >>>>> 2. Stop the current dead vm (if needed)
> >>>>>
> >>>>> 3. Find current vm conf, edit it to boot from a rescue iso image of
> your preference or from net/PXE etc., and start the vm with '--vm-conf'
> pointing to your edited file.
> >>>>>
> >>>>> 4. Connect a console (hosted-engine --console, or 'virsh console',
> or use '--add-console-password' and remote viewer, if needed)
> >>>>>
> >>>>> 5. Clean the disk and install the OS, oVirt, etc.
> >>>>>
> >>>>> 6. Copy your backup into the vm and restore with engine-backup
> >>>>>
> >>>>> 7. Then cleanly stop the machine, exit global maint, and let HA
> start it (or start it yourself with --vm-start).
> >>>>>
> >>>>> At the time, we had a bug [1] to document this. The result is [2].
> It does not detail how to boot/reinstall os/etc., only restore (if e.g. db
> is dead but fs is ok).
> >>>>> For something somewhat similar to what you want, see also [3], which
> uses guestfish. Might be useful, depending on how badly your disk is
> corrupted.
> >>>>
> >>>> I went with the guestfish approach. It has fixed some fs issues and
> now the yum etc seem fine apart from postgres.
> >>>> I had tried previously to uninstall/install packages so I ended
> installing them again with yum install ovirt\*setup\*.
> >>>> Now I think I have to run engine-setup but I get the error:
> >>>>
> >>>>  Failed to execute stage 'Environment setup': Cannot connect to
> Engine database using existing credentials: engine@localhost:5432
> >>>
> >>> Seems that I need to have psql running to be able to run engine-backup
> --mode=restore. Are there any steps how one could manually prepare pgsql
> for ovirt so as to attempt restoration?
> >>
> >>
> >> Replying again, also to conclude this part of your episode: Generally
> speaking, that's not needed. restore --provision-all-databases should do
> that for you.
> >
> > Seems that when pgsql is down nothing can be done. You need at least
> pgsql up and running (e clean state will do) so as to be able to proceed
> with restoration.
>
> Do you still have logs from this? Both engine-backup's (default to
> /var/log/ovirt-engine-backup/something if you do not pass --log) and
> ovirt-engine-provisiondb which it runs (at
> /var/log/ovirt-engine/setup).
>
I was using --provision-all-databases flag when trying to restore. I might
retest to double check. When the pg

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

[Alex K]

On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
wrote:

> Hi everyone.
>
> Im trying to upload a ISO to my data domain, the GUI gives me this error 
> "Connection
> to ovirt-imageio service has failed. Ensure that ovirt-engine certificate
> 
>  is
> registered as a valid CA in the browser.".
>
is the imageio service running ok?  At engine: systemctl status
ovirt-imageio-proxy
Also, when connecting at the engine web UI, is the browser happy with the
certificate of the UI?

>
> the image fails whne trying to upload.
>
> i have added the certificate in chrome, but inst working.
>
> Some help? any other way to upload?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YZGGJMCM76MLESWAQRD6BZDTTQV6BLGZ/

[ovirt-users] Re: bond or different networks for frontend and backend

[Alex K]

On Tue, Nov 24, 2020 at 10:40 AM jb  wrote:

> Hello,
>
> here in the description
> (
> https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
>
> it says that we should have at least 2 interfaces to separate frontend
> and backend traffic.
>
> How is this when I have 4 nics and I make with all one bond interface,
> is this not better in terms of performance? What is your recommendation
> with 4 x 1Gbit nics?
>
In terms of performance and stability, it is better to assign one NIC for
ovirtmgmt (frontend web, management net) + 3 nics in bond for the gluster
storage network. You could also assign the migration network at same bond.
Though I personally prefer to not mix gluster net with migration.

>
> Best regards
>
> Jonathan
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5RHYMKE4JSMZF4U4GK2JWUAIBYYCLM2C/

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

On Mon, Nov 23, 2020 at 4:54 PM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 9:42 AM Alex K  wrote:
>
>>
>>
>> On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler 
>> wrote:
>>
>>>
>>>
>>> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>>>
>>>> Following the above, I was seeing that OVN provider connectivity test
>>>> was failing due to some certificate issue and had to do the following to
>>>> fix it:
>>>>
>>>> names="ovirt-provider-ovn"
>>>>
>>>> subject="$(\
>>>> openssl x509 \
>>>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>>>> -noout \
>>>> -subject | \
>>>> sed \
>>>> 's;subject= \(.*\);\1;'
>>>>   )"
>>>>
>>>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>>>
>>>> for name in $names; do
>>>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>>>> --name="${name}" \
>>>> --password=mypass \
>>>> --subject="${subject}" \
>>>> --keep-key \
>>>> --san=DNS:"${ENGINE_FQDN}"
>>>> done
>>>>
>>>> Having fixed the above, when trying to connect two VMs on some OVN
>>>> logical switches it seems they are not able to reach each other.
>>>> I had previously added such logical switched at engine by running:
>>>>
>>>> ovn-nbctl ls-add ovn-net0
>>>> ovn-nbctl ls-add ovn-net1
>>>> etc
>>>>
>>>>
>>> Not related: Please use ovirt-provider-ovn to create and manage ovn
>>> entities.
>>>
>>>
>>>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>>>> see:
>>>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>>>
>>>>
>>> /var/log/openvswitch/ovn-controller.log might contain the reason.
>>>
>>>
>>>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>>>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>>>> SubjectAltNameWarning:...
>>>>
>>>>
>>> Looks not good, do tou know which connection this warning referes to?
>>>
>>>
>>>> I have restarted at engine both engine and ovn services:
>>>> systemctl restart ovirt-engine
>>>> systemctl status ovirt-provider-ovn.service
>>>>
>>>> I have also restarted the relevant service at each host:
>>>> systemctl restart ovn-controller.service
>>>>
>>>> When running at host the following it stucks and does not give any
>>>> output:
>>>> ovn-sbctl show
>>>>
>>>>
>>> This is expected, the ovn southbound and northbound db exists only on
>>> the ovn-central, which is places on the same machine as oVirt Engine.
>>> Only the ovn-controller, which controls openvswitch, and openvswitch,
>>> which is implementing the data plane, is placed on the ovn-chassis / oVirt
>>> host.
>>>
>>>
>>>> I see that the certificate is imported at key-store as it has the same
>>>> fingerprint with the previous root CA:
>>>>
>>>> keytool -list -alias ovirt-provider-ovn -keystore
>>>> /var/lib/ovirt-engine/external_truststore
>>>>
>>>>
>>> This is only relevant for the connection from oVirt Engine to
>>> ovirt-provider-ovn.
>>>
>>>
>>>> At this same cluster, I had previously changed the domain name of each
>>>> host and engine using the rename tool.
>>>> And now replaced the certificates as per previous described so as to
>>>> fix the imageio cert issue and ovn issue.
>>>>
>>>> It seems that OVN is not happy with the status of certificates.
>>>> When testing connection at engine GUI i get a prompt to trust the cert,
>>>> and when pressing ok i get a green confirmation of successful connection.
>>>>
>>>>
>>> This is only relevant for the connection from oVirt Engine to
>>> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
>>> If you get the green confirmation, oVirt Engine is happy and the
>>> certificate of the REST API of ovirt-provider-ovn is fine.
>>>
>>>
>>>> Is there anything else t

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

On Mon, Nov 23, 2020 at 9:42 AM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler  wrote:
>
>>
>>
>> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>>
>>> Following the above, I was seeing that OVN provider connectivity test
>>> was failing due to some certificate issue and had to do the following to
>>> fix it:
>>>
>>> names="ovirt-provider-ovn"
>>>
>>> subject="$(\
>>> openssl x509 \
>>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>>> -noout \
>>> -subject | \
>>> sed \
>>> 's;subject= \(.*\);\1;'
>>>   )"
>>>
>>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>>
>>> for name in $names; do
>>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>>> --name="${name}" \
>>> --password=mypass \
>>> --subject="${subject}" \
>>> --keep-key \
>>> --san=DNS:"${ENGINE_FQDN}"
>>> done
>>>
>>> Having fixed the above, when trying to connect two VMs on some OVN
>>> logical switches it seems they are not able to reach each other.
>>> I had previously added such logical switched at engine by running:
>>>
>>> ovn-nbctl ls-add ovn-net0
>>> ovn-nbctl ls-add ovn-net1
>>> etc
>>>
>>>
>> Not related: Please use ovirt-provider-ovn to create and manage ovn
>> entities.
>>
>>
>>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>>> see:
>>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>>
>>>
>> /var/log/openvswitch/ovn-controller.log might contain the reason.
>>
>>
>>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>>> SubjectAltNameWarning:...
>>>
>>>
>> Looks not good, do tou know which connection this warning referes to?
>>
>>
>>> I have restarted at engine both engine and ovn services:
>>> systemctl restart ovirt-engine
>>> systemctl status ovirt-provider-ovn.service
>>>
>>> I have also restarted the relevant service at each host:
>>> systemctl restart ovn-controller.service
>>>
>>> When running at host the following it stucks and does not give any
>>> output:
>>> ovn-sbctl show
>>>
>>>
>> This is expected, the ovn southbound and northbound db exists only on the
>> ovn-central, which is places on the same machine as oVirt Engine.
>> Only the ovn-controller, which controls openvswitch, and openvswitch,
>> which is implementing the data plane, is placed on the ovn-chassis / oVirt
>> host.
>>
>>
>>> I see that the certificate is imported at key-store as it has the same
>>> fingerprint with the previous root CA:
>>>
>>> keytool -list -alias ovirt-provider-ovn -keystore
>>> /var/lib/ovirt-engine/external_truststore
>>>
>>>
>> This is only relevant for the connection from oVirt Engine to
>> ovirt-provider-ovn.
>>
>>
>>> At this same cluster, I had previously changed the domain name of each
>>> host and engine using the rename tool.
>>> And now replaced the certificates as per previous described so as to fix
>>> the imageio cert issue and ovn issue.
>>>
>>> It seems that OVN is not happy with the status of certificates.
>>> When testing connection at engine GUI i get a prompt to trust the cert,
>>> and when pressing ok i get a green confirmation of successful connection.
>>>
>>>
>> This is only relevant for the connection from oVirt Engine to
>> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
>> If you get the green confirmation, oVirt Engine is happy and the
>> certificate of the REST API of ovirt-provider-ovn is fine.
>>
>>
>>> Is there anything else that can be done to fix OVN functionality?
>>>
>>
>> Please try to understand what is wrong in the connection between
>> ovn-controller and ovn south bound db.
>> /var/log/openvswitch/ovn-controller.log should be helpful and might
>> contain the reason.
>>
> Will run the steps again to see. Do you think I need to take additional
> steps when fixing the OVN certs issue due to domain change that this
> cluster has undergone?
>
This time was not able to make OVN provide

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler  wrote:

>
>
> On Fri, Nov 20, 2020 at 12:38 PM Alex K  wrote:
>
>> Following the above, I was seeing that OVN provider connectivity test was
>> failing due to some certificate issue and had to do the following to fix
>> it:
>>
>> names="ovirt-provider-ovn"
>>
>> subject="$(\
>> openssl x509 \
>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>> -noout \
>> -subject | \
>> sed \
>> 's;subject= \(.*\);\1;'
>>   )"
>>
>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>
>> for name in $names; do
>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>> --name="${name}" \
>> --password=mypass \
>> --subject="${subject}" \
>> --keep-key \
>> --san=DNS:"${ENGINE_FQDN}"
>> done
>>
>> Having fixed the above, when trying to connect two VMs on some OVN
>> logical switches it seems they are not able to reach each other.
>> I had previously added such logical switched at engine by running:
>>
>> ovn-nbctl ls-add ovn-net0
>> ovn-nbctl ls-add ovn-net1
>> etc
>>
>>
> Not related: Please use ovirt-provider-ovn to create and manage ovn
> entities.
>
>
>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>> see:
>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>
>>
> /var/log/openvswitch/ovn-controller.log might contain the reason.
>
>
>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>> SubjectAltNameWarning:...
>>
>>
> Looks not good, do tou know which connection this warning referes to?
>
>
>> I have restarted at engine both engine and ovn services:
>> systemctl restart ovirt-engine
>> systemctl status ovirt-provider-ovn.service
>>
>> I have also restarted the relevant service at each host:
>> systemctl restart ovn-controller.service
>>
>> When running at host the following it stucks and does not give any output:
>> ovn-sbctl show
>>
>>
> This is expected, the ovn southbound and northbound db exists only on the
> ovn-central, which is places on the same machine as oVirt Engine.
> Only the ovn-controller, which controls openvswitch, and openvswitch,
> which is implementing the data plane, is placed on the ovn-chassis / oVirt
> host.
>
>
>> I see that the certificate is imported at key-store as it has the same
>> fingerprint with the previous root CA:
>>
>> keytool -list -alias ovirt-provider-ovn -keystore
>> /var/lib/ovirt-engine/external_truststore
>>
>>
> This is only relevant for the connection from oVirt Engine to
> ovirt-provider-ovn.
>
>
>> At this same cluster, I had previously changed the domain name of each
>> host and engine using the rename tool.
>> And now replaced the certificates as per previous described so as to fix
>> the imageio cert issue and ovn issue.
>>
>> It seems that OVN is not happy with the status of certificates.
>> When testing connection at engine GUI i get a prompt to trust the cert,
>> and when pressing ok i get a green confirmation of successful connection.
>>
>>
> This is only relevant for the connection from oVirt Engine to
> ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
> If you get the green confirmation, oVirt Engine is happy and the
> certificate of the REST API of ovirt-provider-ovn is fine.
>
>
>> Is there anything else that can be done to fix OVN functionality?
>>
>
> Please try to understand what is wrong in the connection between
> ovn-controller and ovn south bound db.
> /var/log/openvswitch/ovn-controller.log should be helpful and might
> contain the reason.
>
Will run the steps again to see. Do you think I need to take additional
steps when fixing the OVN certs issue due to domain change that this
cluster has undergone?

>
>
>
>> Thanx
>> Alex
>>
>>
>>
>>
>>
>> On Thu, Nov 19, 2020 at 9:00 AM Alex K  wrote:
>>
>>> Seems that all services (imageio, ovn, web socket) are fine after
>>> following the above and importing the new self signed CA certificate.
>>> DId run also engine-setup as I was trying to fix the imageio cert issue,
>>> though seems that that was only fixed after importing the CA cert at
>>> browser and engine-setup might not be needed.
>>>
>>> On Wed, Nov 1

[ovirt-users] Re: Fix corrupt self-hosted engine

[Alex K]

On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David  wrote:

> On Thu, Nov 19, 2020 at 9:43 PM Alex K  wrote:
>
>>
>>
>> On Thu, Nov 19, 2020 at 5:31 PM Alex K  wrote:
>>
>>> Hi Didi,
>>>
>>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
>>> wrote:
>>>
>>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K  wrote:
>>>>
>>>>> Hi all,
>>>>>
>>>>> I have a corrupt self-hosted engine (with several file system errors,
>>>>> postgres not able to start) and thus it does not give access to the web 
>>>>> UI.
>>>>> This happened following an unlucky split brain resolution (I am running 2
>>>>> nodes). The two hosts are running VMs also which I would like to keep
>>>>> running as they are needed.
>>>>>
>>>>> When trying to boot into rescue mode (using
>>>>> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
>>>>> else.
>>>>>
>>>>
>>>> This means that more than just the DB is corrupt...
>>>>
>>>>
>>>>>
>>>>> I have backups of engine files with scope all (using the engine-backup
>>>>> tool).
>>>>> What is the best approach to try and fix the engine or redeploy.
>>>>>
>>>>
>>>> If you are careful, and know what you are doing, you can try something
>>>> like the following. I am not giving many details, hopefully you can find on
>>>> the net tutorials about how to use the things I suggest:
>>>>
>>>> 1. Move to global maintenance
>>>>
>>>> 2. Stop the current dead vm (if needed)
>>>>
>>>> 3. Find current vm conf, edit it to boot from a rescue iso image of
>>>> your preference or from net/PXE etc., and start the vm with '--vm-conf'
>>>> pointing to your edited file.
>>>>
>>>> 4. Connect a console (hosted-engine --console, or 'virsh console', or
>>>> use '--add-console-password' and remote viewer, if needed)
>>>>
>>>> 5. Clean the disk and install the OS, oVirt, etc.
>>>>
>>>> 6. Copy your backup into the vm and restore with engine-backup
>>>>
>>>> 7. Then cleanly stop the machine, exit global maint, and let HA start
>>>> it (or start it yourself with --vm-start).
>>>>
>>>> At the time, we had a bug [1] to document this. The result is [2]. It
>>>> does not detail how to boot/reinstall os/etc., only restore (if e.g. db is
>>>> dead but fs is ok).
>>>> For something somewhat similar to what you want, see also [3], which
>>>> uses guestfish. Might be useful, depending on how badly your disk is
>>>> corrupted.
>>>>
>>> I went with the guestfish approach. It has fixed some fs issues and now
>>> the yum etc seem fine apart from postgres.
>>> I had tried previously to uninstall/install packages so I ended
>>> installing them again with yum install ovirt\*setup\*.
>>> Now I think I have to run engine-setup but I get the error:
>>>
>>>  Failed to execute stage 'Environment setup': Cannot connect to Engine
>>> database using existing credentials: engine@localhost:5432
>>>
>> Seems that I need to have psql running to be able to run engine-backup
>> --mode=restore. Are there any steps how one could manually prepare pgsql
>> for ovirt so as to attempt restoration?
>>
>
> Replying again, also to conclude this part of your episode: Generally
> speaking, that's not needed. restore --provision-all-databases should do
> that for you.
>
Seems that when pgsql is down nothing can be done. You need at least pgsql
up and running (e clean state will do) so as to be able to proceed with
restoration.

>
> I replied to all your interim emails in private, since you replied in
> private.
>
Did not notice I was replying in private :)

>
> Thanks for the final message to the list.
>
> It would be nice if you send another summary of the main obstacles you ran
> into, what worked and didn't work, and especially what ideas you can think
> of to improve the code/doc for the next time something similar happens
> (also to you :-) ).
>
> If you feel like that, and have time, it sounds like a nice opportunity
> for a blog post :-) (I know I (almost?) never wrote any myself, sorry, but
> I like reading them - and they are much more approachable and useful, over
> the long run, compared to just posting to the list)

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

On Sun, Nov 22, 2020 at 9:11 AM Yedidyah Bar David  wrote:

> On Fri, Nov 20, 2020 at 1:37 PM Alex K  wrote:
>
>> Following the above, I was seeing that OVN provider connectivity test was
>> failing due to some certificate issue and had to do the following to fix
>> it:
>>
>
> Is this on the same systems of "[ovirt-users] Fix corrupt self-hosted
> engine", or unrelated?
>
Yes, it is the same one.

>
>
>>
>> names="ovirt-provider-ovn"
>>
>> subject="$(\
>> openssl x509 \
>> -in /etc/pki/ovirt-engine/certs/apache.cer \
>> -noout \
>> -subject | \
>> sed \
>> 's;subject= \(.*\);\1;'
>>   )"
>>
>> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>>
>> for name in $names; do
>> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
>> --name="${name}" \
>> --password=mypass \
>> --subject="${subject}" \
>> --keep-key \
>> --san=DNS:"${ENGINE_FQDN}"
>> done
>>
>> Having fixed the above, when trying to connect two VMs on some OVN
>> logical switches it seems they are not able to reach each other.
>> I had previously added such logical switched at engine by running:
>>
>> ovn-nbctl ls-add ovn-net0
>> ovn-nbctl ls-add ovn-net1
>> etc
>>
>> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
>> see:
>> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>>
>> Also systemctl status ovirt-provider-ovn.service at engine shows:
>> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
>> SubjectAltNameWarning:...
>>
>> I have restarted at engine both engine and ovn services:
>> systemctl restart ovirt-engine
>> systemctl status ovirt-provider-ovn.service
>>
>> I have also restarted the relevant service at each host:
>> systemctl restart ovn-controller.service
>>
>> When running at host the following it stucks and does not give any output:
>> ovn-sbctl show
>>
>> I see that the certificate is imported at key-store as it has the same
>> fingerprint with the previous root CA:
>>
>> keytool -list -alias ovirt-provider-ovn -keystore
>> /var/lib/ovirt-engine/external_truststore
>>
>> At this same cluster, I had previously changed the domain name of each
>> host and engine using the rename tool.
>>
>
> After that, did ovn still work well?
>
No. When clicking at the "test" button, I am prompted to accept self signed
cert and then I receive a green check confirmation that all is good but
when attaching two guest net ports on same OVN logicat switch the VMs are
not able to communicate and was observing some SSL issues at  OVN logs
referring to subjAltName issues.

>
>
>> And now replaced the certificates as per previous described so as to fix
>> the imageio cert issue and ovn issue.
>>
>> It seems that OVN is not happy with the status of certificates.
>> When testing connection at engine GUI i get a prompt to trust the cert,
>> and when pressing ok i get a green confirmation of successful connection.
>>
>> Is there anything else that can be done to fix OVN functionality?
>>
>
> No idea, adding Dominik.
>
The cluster I am trying to fix was renamed at a previous point. I had to
change the domain where the hosts and the engine belonged. Did that, with
few hurdles (using the rename tool available at 4.3). That procedure left
out the omageio and OVN certs which I want to resolve now as I need OVN to
be able to setup test environment.

I checked also https://bugzilla.redhat.com/show_bug.cgi?id=1501798, and
proceeded to generate new certs for ovn-ndb and ovn-sdb. Following this,
and after running engine-setup I observed that the host had to be
re-installed as per web UI prompt. I tried to, but host installation was
not being completed due to "General SSLEngine problem". Tried also to renew
the vdsm certs at the host, using same vdsm key and the new CA cert, but
without luck. At that point I was receiving "Get Host Capabilities failed:
Received fatal alert: unknown_ca" and the other host also became
no-responsive. Generally I tried several things (even renewing at engine
the engine.cer cert using the engine_id_rsa key at engine) but the host was
refusing to install. So it seems that when a domain change is involved in
the scenario, I have to include some additional steps to make the setup
happy.

I had to roll-back the pki at its previous state so as to recover one host
and re-install the other, as the site is production.

I have read that this the engine rename tool at 

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

Following the above, I was seeing that OVN provider connectivity test was
failing due to some certificate issue and had to do the following to fix
it:

names="ovirt-provider-ovn"

subject="$(\
openssl x509 \
-in /etc/pki/ovirt-engine/certs/apache.cer \
-noout \
-subject | \
sed \
's;subject= \(.*\);\1;'
  )"

. /usr/share/ovirt-engine/bin/engine-prolog.sh

for name in $names; do
/usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
--name="${name}" \
--password=mypass \
--subject="${subject}" \
--keep-key \
--san=DNS:"${ENGINE_FQDN}"
done

Having fixed the above, when trying to connect two VMs on some OVN logical
switches it seems they are not able to reach each other.
I had previously added such logical switched at engine by running:

ovn-nbctl ls-add ovn-net0
ovn-nbctl ls-add ovn-net1
etc

Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I see:
reconnect|WARN|unix#45: connection dropped (Connection reset by peer)

Also systemctl status ovirt-provider-ovn.service at engine shows:
/usr/lib/python2.7/site-packages/urllib3/connection.py:344:
SubjectAltNameWarning:...

I have restarted at engine both engine and ovn services:
systemctl restart ovirt-engine
systemctl status ovirt-provider-ovn.service

I have also restarted the relevant service at each host:
systemctl restart ovn-controller.service

When running at host the following it stucks and does not give any output:
ovn-sbctl show

I see that the certificate is imported at key-store as it has the same
fingerprint with the previous root CA:

keytool -list -alias ovirt-provider-ovn -keystore
/var/lib/ovirt-engine/external_truststore

At this same cluster, I had previously changed the domain name of each host
and engine using the rename tool.
And now replaced the certificates as per previous described so as to fix
the imageio cert issue and ovn issue.

It seems that OVN is not happy with the status of certificates.
When testing connection at engine GUI i get a prompt to trust the cert, and
when pressing ok i get a green confirmation of successful connection.

Is there anything else that can be done to fix OVN functionality?
Thanx
Alex





On Thu, Nov 19, 2020 at 9:00 AM Alex K  wrote:

> Seems that all services (imageio, ovn, web socket) are fine after
> following the above and importing the new self signed CA certificate.
> DId run also engine-setup as I was trying to fix the imageio cert issue,
> though seems that that was only fixed after importing the CA cert at
> browser and engine-setup might not be needed.
>
> On Wed, Nov 18, 2020 at 3:07 PM Alex K  wrote:
>
>> Seems I had a typo at
>> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
>> I will repeat the test to verify that all services are functional
>> following this process.
>>
>> On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:
>>
>>> Hi all,
>>>
>>> I am trying to replace the ovirt certificate at ovirt 4.3 following
>>> this:
>>>
>>>
>>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>>>
>>> I am doing the following:
>>> I have engine FQDN: manager.lab.local
>>>
>>> 1. Create root CA private key:
>>> openssl genrsa -des3 -out root.key 2048
>>>
>>> 2. Generate root certificate: (enter passphrase of root key)
>>> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
>>> root.pem
>>> cp root.pem /tmp
>>>
>>> 3. Create key and CSR for engine:
>>> openssl genrsa -out manager.lab.local.key 2048
>>> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>>>
>>> 4. Generate a certificate for engine and sign with the root CA key:
>>>
>>> openssl x509 -req -in manager.lab.local.csr \
>>> -CA root.pem \
>>> -CAkey root.key \
>>> -CAcreateserial \
>>> -out manager.lab.local.crt \
>>> -days 3650 \
>>> -sha256 \
>>> -extensions v3_req
>>>
>>> 5. Verify the trust chain and check the certificate details:
>>> openssl verify -CAfile root.pem manager.lab.local.crt
>>> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>>>
>>> 6. Generate a P12 container: (with empty password)
>>> openssl pkcs12 -export -out /tmp/apache.p12 \
>>> -inkey manager.lab.local.key \
>>> -in manager.lab.local.crt
>>>
>>> 8. Export key and cert:
>>> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
>>> openssl pkcs12 -in apache.p12 -nokeys > /tmp/apach

[ovirt-users] Re: Fix corrupt self-hosted engine

[Alex K]

For the records,

After having fixed the major fs issues with guestfish and since the DB was
not starting up, I removed everything from DB data dir and recreated it as
below:

rm -rf /var/opt/rh/rh-postgresql10/lib/pgsql/data/*
/opt/rh/rh-postgresql10/root/usr/bin/postgresql-setup --initdb
systemctl restart rh-postgresql10-postgresql.service

Then proceeded with the restoration, where I requested to provision all
missing databases:
engine-backup --mode=restore --file=engine-backup.gz
--provision-all-databases \
--log=restore.log --restore-permissions

Following this, ran engine-setup, as instructed from the restore operation.
Gained engine web access and saw the same running VMs were shown as up
without issues.
I only observed one VM not able to start due to illegal volume, but that's
another story.


On Thu, Nov 19, 2020 at 9:42 PM Alex K  wrote:

>
>
> On Thu, Nov 19, 2020 at 5:31 PM Alex K  wrote:
>
>> Hi Didi,
>>
>> On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
>> wrote:
>>
>>> On Thu, Nov 19, 2020 at 4:37 PM Alex K  wrote:
>>>
>>>> Hi all,
>>>>
>>>> I have a corrupt self-hosted engine (with several file system errors,
>>>> postgres not able to start) and thus it does not give access to the web UI.
>>>> This happened following an unlucky split brain resolution (I am running 2
>>>> nodes). The two hosts are running VMs also which I would like to keep
>>>> running as they are needed.
>>>>
>>>> When trying to boot into rescue mode (using
>>>> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
>>>> else.
>>>>
>>>
>>> This means that more than just the DB is corrupt...
>>>
>>>
>>>>
>>>> I have backups of engine files with scope all (using the engine-backup
>>>> tool).
>>>> What is the best approach to try and fix the engine or redeploy.
>>>>
>>>
>>> If you are careful, and know what you are doing, you can try something
>>> like the following. I am not giving many details, hopefully you can find on
>>> the net tutorials about how to use the things I suggest:
>>>
>>> 1. Move to global maintenance
>>>
>>> 2. Stop the current dead vm (if needed)
>>>
>>> 3. Find current vm conf, edit it to boot from a rescue iso image of your
>>> preference or from net/PXE etc., and start the vm with '--vm-conf' pointing
>>> to your edited file.
>>>
>>> 4. Connect a console (hosted-engine --console, or 'virsh console', or
>>> use '--add-console-password' and remote viewer, if needed)
>>>
>>> 5. Clean the disk and install the OS, oVirt, etc.
>>>
>>> 6. Copy your backup into the vm and restore with engine-backup
>>>
>>> 7. Then cleanly stop the machine, exit global maint, and let HA start it
>>> (or start it yourself with --vm-start).
>>>
>>> At the time, we had a bug [1] to document this. The result is [2]. It
>>> does not detail how to boot/reinstall os/etc., only restore (if e.g. db is
>>> dead but fs is ok).
>>> For something somewhat similar to what you want, see also [3], which
>>> uses guestfish. Might be useful, depending on how badly your disk is
>>> corrupted.
>>>
>> I went with the guestfish approach. It has fixed some fs issues and now
>> the yum etc seem fine apart from postgres.
>> I had tried previously to uninstall/install packages so I ended
>> installing them again with yum install ovirt\*setup\*.
>> Now I think I have to run engine-setup but I get the error:
>>
>>  Failed to execute stage 'Environment setup': Cannot connect to Engine
>> database using existing credentials: engine@localhost:5432
>>
> Seems that I need to have psql running to be able to run engine-backup
> --mode=restore. Are there any steps how one could manually prepare pgsql
> for ovirt so as to attempt restoration?
>
>>
>> So I guess I need to follow [2]. What do you think?
>>
>>
>>> How did you run into a split brain? There is a lock on the shared
>>> storage that should prevent this.
>>>
>>> Good luck and best regards,
>>>
>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1482710
>>> [2]
>>> https://www.ovirt.org/documentation/administration_guide/#Overwriting_a_Self-Hosted_Engine
>>> [3] https://bugzilla.redhat.com/show_bug.cgi?id=1569827#c4
>>> --
>>> Didi
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SU6V565Y5GAZ67FF5MUDGFLEJ2L2LZV7/

[ovirt-users] Fix corrupt self-hosted engine

[Alex K]

Hi all,

I have a corrupt self-hosted engine (with several file system errors,
postgres not able to start) and thus it does not give access to the web UI.
This happened following an unlucky split brain resolution (I am running 2
nodes). The two hosts are running VMs also which I would like to keep
running as they are needed.

When trying to boot into rescue mode (using systemd.unit=emergency.target
boot parameter) I get a cursor and nothing else.

I have backups of engine files with scope all (using the engine-backup
tool).
What is the best approach to try and fix the engine or redeploy.

Thanks for any help.
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/76ZY4BMBKGA5HFLLNDKACFD2EIBI3WVZ/

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

Seems that all services (imageio, ovn, web socket) are fine after following
the above and importing the new self signed CA certificate.
DId run also engine-setup as I was trying to fix the imageio cert issue,
though seems that that was only fixed after importing the CA cert at
browser and engine-setup might not be needed.

On Wed, Nov 18, 2020 at 3:07 PM Alex K  wrote:

> Seems I had a typo at
> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
> I will repeat the test to verify that all services are functional
> following this process.
>
> On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:
>
>> Hi all,
>>
>> I am trying to replace the ovirt certificate at ovirt 4.3 following this:
>>
>>
>> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>>
>> I am doing the following:
>> I have engine FQDN: manager.lab.local
>>
>> 1. Create root CA private key:
>> openssl genrsa -des3 -out root.key 2048
>>
>> 2. Generate root certificate: (enter passphrase of root key)
>> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
>> root.pem
>> cp root.pem /tmp
>>
>> 3. Create key and CSR for engine:
>> openssl genrsa -out manager.lab.local.key 2048
>> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>>
>> 4. Generate a certificate for engine and sign with the root CA key:
>>
>> openssl x509 -req -in manager.lab.local.csr \
>> -CA root.pem \
>> -CAkey root.key \
>> -CAcreateserial \
>> -out manager.lab.local.crt \
>> -days 3650 \
>> -sha256 \
>> -extensions v3_req
>>
>> 5. Verify the trust chain and check the certificate details:
>> openssl verify -CAfile root.pem manager.lab.local.crt
>> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>>
>> 6. Generate a P12 container: (with empty password)
>> openssl pkcs12 -export -out /tmp/apache.p12 \
>> -inkey manager.lab.local.key \
>> -in manager.lab.local.crt
>>
>> 8. Export key and cert:
>> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
>> openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer
>>
>> From the above steps we should have the following:
>>
>> /tmp/root.pem
>> /tmp/apache.p12
>> /tmp/apache.key
>> /tmp/apache.cer
>>
>> 9. Place the certificates:
>> hosted-engine --set-maintenance --mode=global
>> cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
>> cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
>> cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
>> update-ca-trust
>> rm /etc/pki/ovirt-engine/apache-ca.pem
>> cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem
>>
>> Backup existing key and cert:
>> cp /etc/pki/ovirt-engine/keys/apache.key.nopass
>> /etc/pki/ovirt-engine/keys/apache.key.nopass.bck
>> cp /etc/pki/ovirt-engine/certs/apache.cer
>> /etc/pki/ovirt-engine/certs/apache.cer.bck
>> cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
>> cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
>> chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
>> chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
>> systemctl restart httpd.service
>>
>> 10. Create a new trust store configuration file:
>> vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
>>
>> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
>> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
>>
>> 11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
>> vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
>>
>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
>>
>> 12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
>> vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf
>>
>> # Key file for SSL connections
>> ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
>> # Certificate file for SSL connections
>> ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer
>>
>> 13. Import the certificate at system-wide  java trust store
>>
>> update-ca-trust extract
>> keytool -list -alias ovirt -keystore /etc/pki/java/cacerts
>>
>> 14. Restart services:
>> systemctl restart httpd.service
>> systemctl restart ovirt-provider-ovn.service
>> systemctl restart ovirt-imageio-proxy
>> systemctl restart ovirt-webs

[ovirt-users] Re: How to create a backup in event of hardware failure of a single hosted engine?

[Alex K]

On Wed, Nov 18, 2020 at 1:40 PM  wrote:

> Hello Alex,
> How do i prepare the gluster volume as the gluster volume is also hosted
> on the 1st baremetal, can you elaborate this setup?
> just reading the docs of gluster must consists of 3 node either 3 gluster
> nodes or 2 gluster nodes + 1 arbiter on a replica set
>
Indeed, for production use, you need replica 3 gluster setup (either
replica 3 or 2 + 1 arbiter). In your case, you may go temporarily with a
replica 2 (two hosts) setup. In this case, it is best practise to dedicate
a separate network for the gluster traffic. Lets assume gluster0 and
gluster1 are the hostnames of each host at the gluster storage network and
the bricks are at /gluster/engine/brick. Then you need to run from gluster0
host:

gluster peer probe gluster1

gluster volume add-brick engine replica 2 gluster1:/gluster/engine/brick

In that case though you need to adjust quorum:

gluster volume set engine cluster.server-quorum-type none
gluster volume set engine cluster.quorum-type fixed
gluster volume set engine cluster.quorum-count 1

Repeat for each volume and wait for heal (sync to complete).
Check heal status of each volume:

gluster volume heal  info

I do not include all details here. I assume the existing gluster volumes
are already configured with the appropriate settings. As soon as you have
the replica 2 setup in place, you then can proceed with a replica 3 setup
with the same approach. Remember to enable quorum at each volume.
Hope that helps.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/MV2H6DNLD5JAKIEBFRQ4VROUYRHI2DMZ/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/OK7GRCKTT6T7XKJ5YGEIVBERYR5KZAAW/

[ovirt-users] Re: Replacing ovirt certificates issue

[Alex K]

Seems I had a typo at
/etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf.
I will repeat the test to verify that all services are functional following
this process.

On Wed, Nov 18, 2020 at 10:24 AM Alex K  wrote:

> Hi all,
>
> I am trying to replace the ovirt certificate at ovirt 4.3 following this:
>
>
> https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl
>
> I am doing the following:
> I have engine FQDN: manager.lab.local
>
> 1. Create root CA private key:
> openssl genrsa -des3 -out root.key 2048
>
> 2. Generate root certificate: (enter passphrase of root key)
> openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out
> root.pem
> cp root.pem /tmp
>
> 3. Create key and CSR for engine:
> openssl genrsa -out manager.lab.local.key 2048
> openssl req -new -out manager.lab.local.csr -key manager.lab.local.key
>
> 4. Generate a certificate for engine and sign with the root CA key:
>
> openssl x509 -req -in manager.lab.local.csr \
> -CA root.pem \
> -CAkey root.key \
> -CAcreateserial \
> -out manager.lab.local.crt \
> -days 3650 \
> -sha256 \
> -extensions v3_req
>
> 5. Verify the trust chain and check the certificate details:
> openssl verify -CAfile root.pem manager.lab.local.crt
> openssl x509 -text -noout -in  manager.lab.local.crt  | head -15
>
> 6. Generate a P12 container: (with empty password)
> openssl pkcs12 -export -out /tmp/apache.p12 \
> -inkey manager.lab.local.key \
> -in manager.lab.local.crt
>
> 8. Export key and cert:
> openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
> openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer
>
> From the above steps we should have the following:
>
> /tmp/root.pem
> /tmp/apache.p12
> /tmp/apache.key
> /tmp/apache.cer
>
> 9. Place the certificates:
> hosted-engine --set-maintenance --mode=global
> cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
> cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
> cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
> update-ca-trust
> rm /etc/pki/ovirt-engine/apache-ca.pem
> cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem
>
> Backup existing key and cert:
> cp /etc/pki/ovirt-engine/keys/apache.key.nopass
> /etc/pki/ovirt-engine/keys/apache.key.nopass.bck
> cp /etc/pki/ovirt-engine/certs/apache.cer
> /etc/pki/ovirt-engine/certs/apache.cer.bck
> cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
> cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
> chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
> chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
> systemctl restart httpd.service
>
> 10. Create a new trust store configuration file:
> vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf
>
> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""
>
> 11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
> vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
>
> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
>
> 12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
> vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf
>
> # Key file for SSL connections
> ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
> # Certificate file for SSL connections
> ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer
>
> 13. Import the certificate at system-wide  java trust store
>
> update-ca-trust extract
> keytool -list -alias ovirt -keystore /etc/pki/java/cacerts
>
> 14. Restart services:
> systemctl restart httpd.service
> systemctl restart ovirt-provider-ovn.service
> systemctl restart ovirt-imageio-proxy
> systemctl restart ovirt-websocket-proxy
> systemctl restart ovirt-engine.service
>
> Following the above I get at engine GUI:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
>
> I have tried also to run engine-setup in case it could fix anything (it
> renewed the cert due to missing subjectAltName), and the above error still
> persists.
> I have tried several other suggestions from similar issues reported at
> this list without any luck.
> I have run out of ideas. Am I missing anything?
> Thanx for any suggestions.
> Alex
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NADGNIZR53ETECWMNTYN33DQJMOENHS7/

[ovirt-users] Replacing ovirt certificates issue

[Alex K]

Hi all,

I am trying to replace the ovirt certificate at ovirt 4.3 following this:

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl

I am doing the following:
I have engine FQDN: manager.lab.local

1. Create root CA private key:
openssl genrsa -des3 -out root.key 2048

2. Generate root certificate: (enter passphrase of root key)
openssl req -x509 -new -nodes -key root.key -sha256 -days 3650 -out root.pem
cp root.pem /tmp

3. Create key and CSR for engine:
openssl genrsa -out manager.lab.local.key 2048
openssl req -new -out manager.lab.local.csr -key manager.lab.local.key

4. Generate a certificate for engine and sign with the root CA key:

openssl x509 -req -in manager.lab.local.csr \
-CA root.pem \
-CAkey root.key \
-CAcreateserial \
-out manager.lab.local.crt \
-days 3650 \
-sha256 \
-extensions v3_req

5. Verify the trust chain and check the certificate details:
openssl verify -CAfile root.pem manager.lab.local.crt
openssl x509 -text -noout -in  manager.lab.local.crt  | head -15

6. Generate a P12 container: (with empty password)
openssl pkcs12 -export -out /tmp/apache.p12 \
-inkey manager.lab.local.key \
-in manager.lab.local.crt

8. Export key and cert:
openssl pkcs12 -in apache.p12 -nocerts -nodes > /tmp/apache.key
openssl pkcs12 -in apache.p12 -nokeys > /tmp/apache.cer

>From the above steps we should have the following:

/tmp/root.pem
/tmp/apache.p12
/tmp/apache.key
/tmp/apache.cer

9. Place the certificates:
hosted-engine --set-maintenance --mode=global
cp -p /etc/pki/ovirt-engine/keys/apache.p12 /tmp/apache.p12.bck
cp /tmp/apache.p12 /etc/pki/ovirt-engine/keys/apache.p12
cp /tmp/root.pem /etc/pki/ca-trust/source/anchors
update-ca-trust
rm /etc/pki/ovirt-engine/apache-ca.pem
cp /tmp/root.pem /etc/pki/ovirt-engine/apache-ca.pem

Backup existing key and cert:
cp /etc/pki/ovirt-engine/keys/apache.key.nopass
/etc/pki/ovirt-engine/keys/apache.key.nopass.bck
cp /etc/pki/ovirt-engine/certs/apache.cer
/etc/pki/ovirt-engine/certs/apache.cer.bck
cp /tmp/apache.key /etc/pki/ovirt-engine/keys/apache.key.nopass
cp /tmp/apache.cer /etc/pki/ovirt-engine/certs/apache.cer
chown root:ovirt /etc/pki/ovirt-engine/keys/apache.key.nopass
chmod 640 /etc/pki/ovirt-engine/keys/apache.key.nopass
systemctl restart httpd.service

10. Create a new trust store configuration file:
vi /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf

ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts"
ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD=""

11. Edit /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf :
vi /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass

12. Edit /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf:
vi /etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf

# Key file for SSL connections
ssl_key_file = /etc/pki/ovirt-engine/keys/apache.key.nopass
# Certificate file for SSL connections
ssl_cert_file = /etc/pki/ovirt-engine/certs/apache.cer

13. Import the certificate at system-wide  java trust store

update-ca-trust extract
keytool -list -alias ovirt -keystore /etc/pki/java/cacerts

14. Restart services:
systemctl restart httpd.service
systemctl restart ovirt-provider-ovn.service
systemctl restart ovirt-imageio-proxy
systemctl restart ovirt-websocket-proxy
systemctl restart ovirt-engine.service

Following the above I get at engine GUI:

sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target

I have tried also to run engine-setup in case it could fix anything (it
renewed the cert due to missing subjectAltName), and the above error still
persists.
I have tried several other suggestions from similar issues reported at this
list without any luck.
I have run out of ideas. Am I missing anything?
Thanx for any suggestions.
Alex
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FSIKZJWMW6KKBLCHGZWWXVGQYLPMW7PJ/

[ovirt-users] Re: How to create a backup in event of hardware failure of a single hosted engine?

[Alex K]

On Tue, Nov 17, 2020, 11:08  wrote:

> Hello everyone,
> Currently we have a single bare metal that hosts oVirt and glusterFS which
> later on to be converted to a 3 nodes for HCI, currently another bare metal
> is coming this week and was planning to  initially create it as a backup.
>
> is it possible to deploy a new hosted engine then create a gluster volume
> for 1st one as a backup domain then attach it to the new one if hardware
> failure occurred, or there is another kind of setup that can be done?
>
I would add the new server as an additional host, first preparing the
gluster volumes under the hood. In this way you achieve HA for engine and
guest VMs. When third server arrives, repeat and have a proper 3 node
replica self hosted engine setup.

> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EYOW4WNUACRCTWLG2IRXEGISYFKBWAU7/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KZ5L3E6UXPHY56WGERVGNEGFGTLQB7RS/

[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

[Alex K]

On Tue, Nov 17, 2020, 16:12 <3c.moni...@gruppofilippetti.it> wrote:

> Hi all.
> I've deployed a VM from a corrupted template (it's disk is missing, but
> I've checked it later...).
> My Software Version is:4.3
> Now, I have an unmanaged VM in inventory and unable to remove it too.
> It's reference is "locked image".
> I've restarted ovirt-engine many times on self-hosted engine and hosts
> too, but no benefits.
> So, what's now?
> I've also consulted: https://access.redhat.com/solutions/396753
> but still no results.
> No tasks or items results to be "locked"...
> Any other ideas?
>
You might try using some of the tools mentioned at
https://www.ovirt.org/develop/developer-guide/db-issues/helperutilities.html
There is an unlock tool.

> Thanks a lot.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7IK2IAJTEMNR7IM4FJYVHJRJQTQZD537/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LNT3SXR62FVCBAW4FKC273BA23HO74PV/

[ovirt-users] Re: Upgrade OVIRT from 3.6 to 4.3

[Alex K]

On Wed, Nov 11, 2020, 17:03 Miguel Angel Costas 
wrote:

> Hi Guys!
>
> I need to upgrade from 3.6 to 4.3 and I have a doubt.
> Do I need to restard VMs for each upgrade (DC Compatibilty 1° 4.0  - 2°
> 4.1 - 3° 4.2 and 4° 4.3) or can modify the compatibilty  from 3.6 to 4.2
> and restart the vms in this only step.
>
I would restart to complete each step at a time.

>
> Best regards
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DAXCGYEQM4BM3KWMRAY4HMGE2YAHDB2H/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/J573QMSFII62CBPC47CJJ73AITZETWMI/

[ovirt-users] Re: VM's gone to unknown state

[Alex K]

Hi Hariharan,

On Tue, Nov 10, 2020 at 11:36 AM  wrote:

> Dear Alex,
>
> Thanks for your kind response! So its mandatory to enable power
> management? Is that a good way to enable power management in running hosts
> or already installed hosts in Ovirt? If possible, let me know the benifits
> of using power management;

Yes, you need power management and it can be configured at any time. It is
needed so as the highly available VMs to be restarted at another host, when
one host fails and avoid having zombie VMs in unresponsive state as you
faced. Power management is means for the hosts to ensure the state of each
other and is a must for high availability.

>
> Thanks in advance!
>
> Best Regards,
> Hariharan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NRM5JY5TAPGFYNYYP7OQ372X27FA56F7/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LSEJBQAUVPUFLI5J7VI7URH6IGLM7W5R/

[ovirt-users] Re: VM with illegal snapshots

[Alex K]

On Fri, Oct 9, 2020, 12:59 Giorgio Biacchi  wrote:

> Hi,
> due to a bug in our Ovirt integrated backup system now we have some VMs
> with snapshots in illegal state.
>
> It seems that there's an inconsistency between the db and the real
> status of images on disk.
>
> Let me show an example:
>
> engine=# select
>
> image_guid,parentid,imagestatus,vm_snapshot_id,volume_type,volume_format,active
> from images where image_group_id='e34f77cb-54d5-40d0-b539-e0a5fd512d2d';
>   image_guid  |   parentid  |
> imagestatus |vm_snapshot_id| volume_type |
> volume_format | active
>
> --+--+-+--+-+---+
>  a107b6c4-842e-4b40-9215-c965431a0c0f |
> ---- |   4 |
> d19d6ca3-1989-4c67-8ee7-c0c43b3e6d74 |   2 | 4 | f
>  a4c86a68-9123-454c-b417-1b15038a4bf2 |
> a107b6c4-842e-4b40-9215-c965431a0c0f |   1 |
> e7a405ee-8fd4-4733-ae9c-5252bf07c9d3 |   2 | 4 | f
>  f6a61f2e-26bd-4b63-97c6-d66913ce48c5 |
> a4c86a68-9123-454c-b417-1b15038a4bf2 |   1 |
> 9d0958b9-4995-4e11-a027-a32d4bac52e4 |   2 | 4 | t
> (3 rows)
>
>
> [root@host02 ~]#  lvs -o+lv_tags |grep
> e34f77cb-54d5-40d0-b539-e0a5fd512d2d
>   a107b6c4-842e-4b40-9215-c965431a0c0f
> 459011cf-ebb6-46ff-831d-8ccfafd82c8a -wi---  149.50g
>
> IU_e34f77cb-54d5-40d0-b539-e0a5fd512d2d,MD_68,PU_----
>   f6a61f2e-26bd-4b63-97c6-d66913ce48c5
> 459011cf-ebb6-46ff-831d-8ccfafd82c8a -wi---   10.00g
>
> IU_e34f77cb-54d5-40d0-b539-e0a5fd512d2d,MD_348,PU_a107b6c4-842e-4b40-9215-c965431a0c0f
>
> so image guid a4c86a68-9123-454c-b417-1b15038a4bf2 is not present on
> disk, i think that the image was correctly merged but not removed from
> the database.
>
> Any suggestion on how to fix the database to reflect the real situation
> on disk??
>
In those cases I delete the entry from engine DB to reflect the status of
the image chain.

>
> TIA
> --
> gb
>
> PGP Key: http://pgp.mit.edu/
> Primary key fingerprint: C510 0765 943E EBED A4F2 69D3 16CC DC90 B9CB 0F34
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/OF4NTAC6BPGRP4YJZRWBXQCNBWLERL72/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VVQNIERW6XFUEA5NIPQJQHEHCQEIK6QY/

[ovirt-users] Re: VM's gone to unknown state

[Alex K]

On Mon, Nov 9, 2020, 19:12  wrote:

> Dear Strahil Nikolov,
>
> Thank you so much for your kind response and immediate help! The issue got
> resolved and now the hosts got up and running. There was a multiple
> problems in Hosts and again and again I got same issue. Then finally I
> rebooted the hosts thrice and also in Ovirt, I confirmed the reboot option.
> Then it was working fine.
>
This indicates that perhaps you have not configured power management. You
need to have that to avoid these issues.

>
> Nikolov, I ping you back for last issue regarding gluster storage space
> issue in Ovirt4.4. cause that issue still not get resolved.
>
> Thanks once again!
>
>
> Best Regards,
> Hariharan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/NLIMYZJYENSM7B5YZ2QNKMOWMBCSLUPG/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CVP3PSBQQEYDRABNVWSHE6R6XCL2RJGW/

[ovirt-users] Re: Fence Agent in Virtual Environment

[Alex K]

On Thu, Nov 5, 2020, 18:20 Strahil Nikolov via Users 
wrote:

> This is just a guess , but you might be able to install fence_xvm on all
> Virtualized Hosts .
>
Did not know fence_xvm. Interesting to check it.

>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В четвъртък, 5 ноември 2020 г., 16:00:40 Гринуич+2, jb 
> написа:
>
>
>
>
>
> Hello,
>
> I would like to build a hyperconverged gluster with hosted engine in a
> virtual environment, on Fedora 33 with KVM.
>
> The setup is for testing purposes, specially for test upgrades before
> running them on the real physical Servers. But I want to have the setup
> as close as possible to the real environment, so the only thing is
> missing is a fence agent.
>
> Is there a way to simulate power management in a virtual environment?
>
>
> Jonathan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5SHGKNLTK24DQ3G7ZX6AGKIHLNCFS2J/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZY2RQ2F7FIC2Y2JCBPBPOJZTMQQ25WA5/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BPKZBINJF7HX4P7AXXCWXZF7UHMW2WHW/

[ovirt-users] Re: Fence Agent in Virtual Environment

[Alex K]

On Thu, Nov 5, 2020, 16:00 jb  wrote:

> Hello,
>
> I would like to build a hyperconverged gluster with hosted engine in a
> virtual environment, on Fedora 33 with KVM.
>
> The setup is for testing purposes, specially for test upgrades before
> running them on the real physical Servers. But I want to have the setup
> as close as possible to the real environment, so the only thing is
> missing is a fence agent.
>
> Is there a way to simulate power management in a virtual environment?
>

I had successfully used the following approach not much time ago:

# Setup power management for VMs:
at hardware host install:
```
yum install python-pip -y
yum install -y zeromq-devel
yum install -y gcc python-devel libvirt-devel
firewall-cmd --permanent --zone=public --add-port=623-624/udp
firewall-cmd --reload
vbmc add CentOS7-ovirt0 --username root --password yourpass --port 623
vbmc add CentOS7-ovirt1 --username root --password yourpass --port 624
[root@baremetal ~]# vbmc list
+++-+--+
| Domain name | Status | Address | Port |
+++-+--+
| CentOS7-ovirt0 | down | :: | 623 |
| CentOS7-ovirt1 | down | :: | 624 |
+++-+--+
[root@v2 ~]# vbmc start CentOS7-ovirt0
2019-10-16 18:44:57,397.397 26596 INFO VirtualBMC [-] Started vBMC instance
for domain CentOS7-ovirt0
[root@v2 ~]# vbmc start CentOS7-ovirt1
2019-10-16 18:45:38,056.056 26596 INFO VirtualBMC [-] Started vBMC instance
for domain CentOS7-ovirt1
[root@v2 ~]# vbmc list
++-+-+--+
| Domain name | Status | Address | Port |
++-+-+--+
| CentOS7-ovirt0 | running | :: | 623 |
| CentOS7-ovirt1 | running | :: | 624 |
++-+-+--+
at node0 host (VM) check:
ipmitool -I lanplus -U root -P yourpass -H  power status
(default port is 623)
ipmitool -I lanplus -U root -P yourpass -H  power status
-p 624
at ovirt GUI you need lanplus=1,-p623 and lanplus=1,-p624 options for each
host.
```

>
>
> Jonathan
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/V5SHGKNLTK24DQ3G7ZX6AGKIHLNCFS2J/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UI2X2GGWNJGXVKW3GKGY43ZC6DU5HXSU/

[ovirt-users] Re: Question about OVN MTU

[Alex K]

On Tue, Oct 27, 2020, 02:49 Strahil Nikolov via Users 
wrote:

> Hello All,
>
> I would like to learn more about OVN and especially the maximum MTU that I
> can use in my environment.
>
> Current Setup 4.3.10
> Network was created via UI -> MTU Custom -> 8976 -> Create on External
> Provider -> Connect to Physical Network
>
> So my physical connection is MTU 9000 and I have read that Geneve uses 24
> bits (maybe that's wrong ?) , thus I have reduced the MTU to 8976.
>
>From the internet draft it seems that the tunnel header + reserved bits
comprise 64 bits. A common practice for Geneve implementations  is to use
8900 mtu for VMs when having 9000 mtu physical network.

The draft:
https://tools.ietf.org/html/draft-ietf-nvo3-geneve-08

>
> I did some testing on the VMs and ping with payload of '8914' was the
> maximum I could pass without fragmenting and thus the MTU on the VMs was
> set to 8942.
>
> Did I correctly configure the test network's MTU and am I understanding it
> correctly that we need extra 34 bits inside the network for encapsulation ?
>
> I have checked
> https://www.ovirt.org/develop/release-management/features/network/managed_mtu_for_vm_networks.html
> but I don't see any refference how to calculate the max MTU.
>
>
> Best Regards,
> Strahil Nikolov
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CKNS5T5KE2W5EIXBTGQDU3URKHQDVAM4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/VIDP3MLYHWG2WXQ6JB6EHK66J5WBOMVT/

[ovirt-users] Re: Storage Domain Data (Master)

[Alex K]

On Fri, Oct 23, 2020, 19:33  wrote:

> When data (Master) is down the others Domains data are down too?
>
> What is the best practice when a problem ocurres to the Data Master?
>
You try to avoid problems with master data store by adding high
availability at the design. At HCI approach with glusterfs you have enough
nodes (at least 3, in replica 3) to provide the shared storage domain.

>
> Thansk
>
> --
> --
> Jose Ferradeira
> http://www.logicworks.pt
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/2SKXORAPJV4X2MCHSCFIE6EVUJNHKIZL/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RJVWJMW6S226THU6IBO5JEQYU3YOXZYD/

[ovirt-users] Re: Question on "Memory" column/field in Virtual Machines list/table in ovirt GUI

[KISHOR K]

Hello,

Sorry,  yes i meant a bug in ovirt with SLES, not in SLES :). 
Now, I understand all the details. Thanks a lot !
I will then open a bug as suggested, never did it before but hope it will be 
easy :)

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/52I6NYG5CJQ6MNTTXUHAGP2MJHOAZLOO/

[ovirt-users] Re: Question on "Memory" column/field in Virtual Machines list/table in ovirt GUI

[KISHOR K]

Ok, May I know why you think it's only a bug in SLES?.
As I said before, ovirt is behaving the same way even for CentOS7 VMs. I am 
attaching the details again here below.

One of running CentOS VM memory details are as below. 

[centos@centos-vm1 ~]$ free -m
total  used   free  shared 
buff/cache   available
Mem:   78161257 176 386  6383   
 5874
Swap: 00   0

Here, out of total allocated memory of 7816 MB, we can see that total actual 
available memory is 5874 MB and the actual used memory is just 1257 MB, 
excluding buff/cache.

But in ovirt GUI, memory usage field/column for above VM (Compute -> Virtual 
Machines and then Select VM and Check Memory field/Column) shows usage as 98%. 
That means that, it says only 2% memory (considering 176 MB) is free and 98% is 
used (considering used + buff/cache i.e. 1257 MB + 6383 MB). 
My question is why ovirt is treating buff/cache memory as used memory and why 
is not reporting memory usage just based on actual used memory?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/G7GTDFRI36RGFL3OKXRL35MP5N4LHUQ7/

[ovirt-users] Re: Question on "Memory" column/field in Virtual Machines list/table in ovirt GUI

[KISHOR K]

Hi,

I think I already checked that.
What I meant (since beginning) was that ovirt is reporting memory usage in GUI 
same way regardless of CentOS or SLES in our case.
My main question is why ovirt is reporting memory usage percentage based on 
"free" memory but not actually based on "available memory", which is basically 
sum of "free" and "buff/cache". 
Buffer/Cache is a temporary memory and that's anyhow gets released for new 
processes and applications. 
That means that, ovirt should actually consider the actual available memory 
left and report usage accordingly in GUI but what we see now is different 
behavior.
I was very worried when I saw the memory usage as 98% and highlighted in red 
for many of VMs in GUI. But, when I checked the actual used memory by VM, it's 
always below 50%.

Could you clarify how can this behavior from ovirt be OS specific?

I hope I explained the issue clearly or let me know if it is still unclear.
Thanks in advance.

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HAJ6TT74U33FAFIJTXTYZHVHYKKSWMN7/

[ovirt-users] Re: Question on "Memory" column/field in Virtual Machines list/table in ovirt GUI

[KISHOR K]

Hi,

Most of our VMs are SLES SP15 and also few are CentOS 7. But the problem looks 
to be same for any type of VM.
Today, I tried to clear the "buff/cache" memory manually for one of the VM 
using "sync; echo 3 > /proc/sys/vm/drop_caches" linux command and then I 
noticed in ovirt GUI that VM's memory usage dropped to 54% from 98%.
So, it is clear that ovirt is not considering the actual "available" memory but 
is considering "free" + "buff/cache" and is reporting the same in ovirt GUI as 
memory usage %.

Isn't this a bug?


/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HNVAIK4ABU72MAIJDSIASUI4K6DR43G2/

[ovirt-users] Question on "Memory" column/field in Virtual Machines list/table in ovirt GUI

[KISHOR K]

Hi,

Memory field/column for few of VMs in our ovirt (Compute -> Virtual Machines -> 
Memory column) shows more than 90%.  
But, when I checked (from free and also other commands) the actual "used" 
memory by those VMs, it is less than 60%.  What I see (from free -h) is that 
ovirt seems to be considering both "used" + "buff/cache" memory and is 
reporting the same in GUI.
Isn't it the "available" memory that should be considered, because that is the 
actual memory available and cache memory is something that is adjusted every 
time?

:~> free -h
totalusedfree  shared  buff/cache   
available
Mem:   15Gi   6.8Gi   724Mi   310Mi   8.1Gi   9.2Gi
Swap:0B  0B  0B


Can someone help to answer. Thanks !

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PAGYQZLHQJIDBXIPAWPO4MRIO4KJETJC/

[ovirt-users] Re: Failed to create a new VM in ovirt due to "The host did not satisfy internal filter Memory" error

[KISHOR K]

Hi,

Yes, I checked that link already to make sure we have correct version.
Our Ovirt version is 4.3.10.4-1.el7.

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DD7HMXUHRKINBABE4JOMHDPWUJSOW6FT/

[ovirt-users] Re: Failed to create a new VM in ovirt due to "The host did not satisfy internal filter Memory" error

[KISHOR K]

Hello,

Thanks for the explanation. Appreciated.
I will check that.

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QAMD4XEFCJMCIZZYBAMA2E6CD52PFSRM/

[ovirt-users] Re: Failed to create a new VM in ovirt due to "The host did not satisfy internal filter Memory" error

[KISHOR K]

Could anyone help to answer this. Thanks !
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HCYXA33RSWJ565LIPIJKBPAU7NJYONIT/

[ovirt-users] Re: Failed to create a new VM in ovirt due to "The host did not satisfy internal filter Memory" error

[KISHOR K]

Hello,

No, we have not made any such change.
Where is that done in ovirt ?

/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DCPHPOYCCDNKMB2MWOIICR4F7X5FYBHW/

[ovirt-users] Failed to create a new VM in ovirt due to "The host did not satisfy internal filter Memory" error

[KISHOR K]

Hi All,

I'm new to Ovirt and not having a perfect experience with Ovirt yet.
I ran into a strange issue today when I tried to create a new VM with 32GB in 
ovirt. VM creation basically due to an error, pasted below. 

Cannot run VM. There is no host that satisfies current scheduling constraints. 
See below for details:, The host host-01 did not satisfy internal filter 
Memory., The host host-01 did not satisfy internal filter Memory.

After some troubleshooting, I found that there was enough available memory 
(around 120 GB free ) in the host to host new VM and there were around 10 VMs 
already running on this host.
But, I noticed that ovirt is actually scheduling and creating VM based on "Max 
free Memory for scheduling new VMs" value, which seems to be set/updated based 
on total allocated memory for all VMs running on the host and it's not really 
the then consumed memory by running VMs.

Can anyone help to explain if it is some kind of bug in ovirt or it expected 
behavior?
If it is expected behavior, is there any possibility to change it to make sure 
VM is created based on actual free memory?

Thanks a lot in advance for your support.

/Kishore
 


/Kishore
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EZVZI225KR5YBOGI5HXPTYIX3Z3QDYHV/

[ovirt-users] Re: Cannot access Engine VM

[Alex K]

On Tue, Aug 18, 2020, 09:14 Steven Bach via Users  wrote:

> Hello All,
>
> I installed Ovirt node 4.4.1.5 from the ovirt ISO, IP 192.168.1.53/24
> I setup the self hosted engine by logging into the web interface,
> configured it for 192.168.1.55/24 IP on the default generated bridge
> interface and setup a FQDN that is resolvable via DNS.
>
> Setup NFS storage, and all seems good.
>
> The Engine VM is running, but I cannot access it at all outside the node.
> SSH'd in the node I can ping the engine, anything else on that same subnet
> cannot SSH or even ping it (Again, DNS is resolving correctly to the IP
> Address). I am able to SSH into the engine from the node.
>
Sounds like networking or firewall issue. Do a packet trace. If they pass
through the node then check firewall. I would try also forwarding through
ssh to confirm engine health.

>
> While SSH'd into the Engine from the node, I can only ping the Node and
> nothing beyond that, not able to install ovirt repo, nothing.
>
> Any ideas are greatly appreciated, thank you,
>
> --
> Steven Bach
> sb...@bachnetworks.com
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PDMV3R6ODIAPHRRU6E4RUCU6QOKMRD4T/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XL76ABWNPGDD6QNPN5QHMY4BEE7GLK73/

[ovirt-users] Re: Help needed - Not able to find Windows Guest agent in 4.4.1.10-1.el8 Hosted Engine

[Alex K]

On Fri, Aug 14, 2020, 06:12 dhanaraj.ramesh--- via Users 
wrote:

> Hi Team,
>
> unable to locate Windows guest agant iso in 4.4.1.10-1.el8 Hosted Engine
> version. please share us where can i get the iso?
>
Usually I grab them from here: https://resources.ovirt.org/pub/
I was not able to find a 4.4 version, but 4.3 will do just fine.

>
> there is no /usr/share/oVirt-guest-tools-iso/oVirt-tools-setup.iso
> available in 4.4.1 HE
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BAHAWSDM5BRMJGUFIM337PP7NL5WPGX3/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U57AMBSVXWFOKFHGTQMWX72Y76HOIG6R/

[ovirt-users] Re: Migration not working

[Alex K]

On Fri, Aug 14, 2020, 16:16 Juan Pablo Lorier  wrote:

> Hi,
>
> I'm having issues with migration to some hosts. I have a 4 node cluster
> and I tried updating to see if it fixes but it's still failing. The reason
> is nos clear in the engine log.
>
>
> 2020-08-14 09:45:32,322-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [364e] EVENT_ID: VM_MIGRATION_START_SYSTEM_INITIAT
> ED(67), Migration initiated by system (VM: medialist2-videoteca, Source:
> virt2.tnu.com.uy, Destination: virt3.tnu.com.uy, Reason: ).
> 2020-08-14 09:45:32,336-03 INFO
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-429)
> [535a8bdb] Lock Acquired to object 'EngineLock:{exclusiveLocks='[aac7468
> 5-c969-4761-923f-043400176edf=VM]', sharedLocks=''}'
> 2020-08-14 09:45:32,355-03 INFO
> [org.ovirt.engine.core.bll.MigrateVmToServerCommand] (default task-429)
> [535a8bdb] Running command: MigrateVmToServerCommand internal: true. Ent
> ities affected :  ID: aac74685-c969-4761-923f-043400176edf Type: VMAction
> group MIGRATE_VM with role type USER
> 2020-08-14 09:45:32,383-03 INFO
> [org.ovirt.engine.core.vdsbroker.MigrateVDSCommand] (default task-429)
> [535a8bdb] START, MigrateVDSCommand( MigrateVDSCommandParameters:{hostId=
> '634f3f64-8945-470c-b31c-b8d4c73109e6',
> vmId='aac74685-c969-4761-923f-043400176edf', srcHost='virt2.tnu.com.uy',
> dstVdsId='f9e441a0-a4e6-4548-8c6f-83a958120f02', dstHost='virt4.
> tnu.com.uy:54321', migrationMethod='ONLINE', tunnelMigration='false',
> migrationDowntime='0', autoConverge='true', migrateCompressed='false',
> consoleAddress='null', maxBandwidth=
> '125', enableGuestEvents='true', maxIncomingMigrations='2',
> maxOutgoingMigrations='2', convergenceSchedule='[init=[{name=setDowntime,
> params=[100]}], stalling=[{limit=1, action=
> {name=setDowntime, params=[150]}}, {limit=2, action={name=setDowntime,
> params=[200]}}, {limit=3, action={name=setDowntime, params=[300]}},
> {limit=4, action={name=setDowntime, pa
> rams=[400]}}, {limit=6, action={name=setDowntime, params=[500]}},
> {limit=-1, action={name=abort, params=[]}}]]', dstQemu='172.16.100.45'}),
> log id: 1db80717
> 2020-08-14 09:45:32,385-03 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateBrokerVDSCommand]
> (default task-429) [535a8bdb] START, MigrateBrokerVDSCommand(HostName = virt
> 2.tnu.com.uy,
> MigrateVDSCommandParameters:{hostId='634f3f64-8945-470c-b31c-b8d4c73109e6',
> vmId='aac74685-c969-4761-923f-043400176edf', srcHost='virt2.tnu.com.uy',
> dstVdsId='f9e4
> 41a0-a4e6-4548-8c6f-83a958120f02', dstHost='virt4.tnu.com.uy:54321',
> migrationMethod='ONLINE', tunnelMigration='false', migrationDowntime='0',
> autoConverge='true', migrateCompre
> ssed='false', consoleAddress='null', maxBandwidth='125',
> enableGuestEvents='true', maxIncomingMigrations='2',
> maxOutgoingMigrations='2', convergenceSchedule='[init=[{name=setDow
> ntime, params=[100]}], stalling=[{limit=1, action={name=setDowntime,
> params=[150]}}, {limit=2, action={name=setDowntime, params=[200]}},
> {limit=3, action={name=setDowntime, para
> ms=[300]}}, {limit=4, action={name=setDowntime, params=[400]}}, {limit=6,
> action={name=setDowntime, params=[500]}}, {limit=-1, action={name=abort,
> params=[]}}]]', dstQemu='172.1
> 6.100.45'}), log id: 4085b503
> 2020-08-14 09:45:32,433-03 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.MigrateBrokerVDSCommand]
> (default task-429) [535a8bdb] FINISH, MigrateBrokerVDSCommand, return: , log
>  id: 4085b503
> 2020-08-14 09:45:32,437-03 INFO
> [org.ovirt.engine.core.vdsbroker.MigrateVDSCommand] (default task-429)
> [535a8bdb] FINISH, MigrateVDSCommand, return: MigratingFrom, log id: 1db8
> 0717
> 2020-08-14 09:45:32,446-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [535a8bdb] EVENT_ID: VM_MIGRATION_START_SYSTEM_INITIAT
> ED(67), Migration initiated by system (VM: reverse_proxy, Source:
> virt2.tnu.com.uy, Destination: virt4.tnu.com.uy, Reason: ).
> 2020-08-14 09:45:32,462-03 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (default task-429) [535a8bdb] EVENT_ID:
> USER_VDS_MAINTENANCE_WITHOUT_REASON(620), Host virt2.tnu.com.uy was
> switched to Maintenance mode by jplor...@tnu.com.uy.
> 2020-08-14 09:45:32,681-03 INFO
> [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback]
> (EE-ManagedThreadFactory-engineScheduled-Thread-14)
> [7667d149-886e-406b-9cd6-9b7472fa9944] Command 'MaintenanceNumberOfVdss'
> id: 'db97a747-115b-4f01-aa3d-6277080e6a44' child commands '[]' executions
> were completed, status 'SUCCEEDED'
> 2020-08-14 09:45:33,024-03 INFO
> [org.ovirt.engine.core.vdsbroker.VdsManager]
> (EE-ManagedThreadFactory-engineScheduled-Thread-62) [] Received first
> domain report for host virt2.tnu.com.uy
> 2020-08-14 09:45:33,686-03 INFO
> [org.ovirt.engine.core.bll.MaintenanceNumberOfVdssCommand]
> (EE-ManagedThreadFactory-engineScheduled-Thread-88)
> 

[ovirt-users] Re: Re-creating ISO Storage Domain after Manager Rebuild

[Alex K]

On Fri, Aug 14, 2020, 16:50 Bob Franzke via Users  wrote:

> OK thanks for the reply. As you can perhaps tell I am a complete noob with
> Ovirt. The fact its working now at all is a complete miracle.
>
> >>> I see 2 approaches on fixing the broken storage domain:
> >>> - log to engine, switch to postgresql and start searching in the DB
> for the uuid.
>
> I am not sure what is meant here by 'switch to postgresql'. Can you
> clarify?
>
> >>> Then create the share, create the dir inside and then oVirt should be
> happy.
> >>> Yet it will start complaining for the ISOs that are also missing (and
> also unique uuids)
> >>> - Another approach is to try to remove the ISO domain. Have you tried
> to set the domain in maintenance first and then to remove it ?
>
> I am not sure how this is done. I don’t seem to have any options in the
> Ovirt admin portal to do anything other than destroy the domain. I don’t
> see a maintenance mode option in the Admin UI.
>
>  Check your VMs , if any has an ISO attached to it.
>
> We have templates that were created by someone else. All the VMs seem to
> be built off of those templates, which I assume were built initially  by
> booting off DVD ISOs and installing the OS's for the template VMs. Maybe I
> am missing how VMs get OS's on them in Ovirt. I think the only thing the
> iso domain did was allow us to use the virtio drivers for booting off of
> ISO images. I am not sure if that’s accurate or makes sense here. I
> understood that when the ISO domain is created that those VirtIO drivers
> for CD booting are created as part of the ISO domain creation.

When an iso domain is created it is empty. The virtio iso images are not
automatically created, need to be uploaded.

> This would then give you an option of attaching an uploaded ISO as a
> CD-ROM which you can use to boot a VM off of. I have a CentOS VM which has
> a corrupted XFS filesystem that I would like to boot off of a Rescue CD to
> repair the FS. The only way I know this can be done is by having the rescue
> disk ISO uploaded to an ISO domain. Perhaps there is a different way to do
> that. In any case, it would be good to get the ISO domain working. Right
> now when I try and attach a CD to a VM for booting, there are no options to
> choose and I am assuming its because the VirtIO drivers needed to do such a
> thing are missing because the ISO domain is broken. Sound right?
>
>  Also,  you can upload  an ISO to a data domain and use that to
> install VMs.
>
> Can this be used to boot off a CD in a situation where I need to boot off
> a CD ISO like you would need to do to boot off a CentOS rescue CD?
>
Yes

>
> Thanks very much for the help. This was a system I inherited from someone
> else and I have really no idea what I am doing with it (I am not a
> virtualization expert and have a Network Engineering background).
>
Since you lost the isos, I would destroy the domain and either upload isos
directly at the data storage domain or recreate the iso domain from
scratch.

>
> -Original Message-
> From: hunter86...@yahoo.com (Strahil Nikolov) 
> Sent: Friday, August 14, 2020 4:25 AM
> To: bob.fran...@mdaemon.com; users@ovirt.org
> Subject: Re: [ovirt-users] Re-creating ISO Storage Domain after Manager
> Rebuild
>
> When oVirt creates a storage domain , it assigns an unique id (in the
> engine DB) and a single directory, named as the uuid , is created there.
>
> As you lost the dir, your storage domain is gone but as it's an iso domain
> - it shouldn't be critical.
>
> I see 2 approaches on fixing the broken storage domain:
> - log to engine, switch to postgresql and start searching in the DB for
> the uuid.
> Then create the share, create the dir inside and then oVirt should be
> happy.
> Yet it will start complaining for the ISOs that are also missing (and also
> unique uuids)
> - Another approach is to try to remove the ISO domain. Have you tried to
> set the domain in maintenance first and then to remove it ?
>
> Check your VMs , if any has an ISO attached to it.
>
> Also,  you can upload  an ISO to a data domain and use that to install VMs.
>
> Best  Regards,
> Strahil Nikolov
>
> На 13 август 2020 г. 22:21:10 GMT+03:00, "bob.franzke--- via Users" <
> users@ovirt.org> написа:
> >Hi All,
> >
> >Late last year I had a disk issue with my Ovirt Manager Server that
> >required I rebuild it and restored from backups. While this worked
> >mostly, one thing that did not get put back correctly was the physical
> >storage location of an ISO domain on the manager server. I believe this
> >was previously set up as an NFS share being hosted on the Manager
> >Server itself. The physical disk path and filesystem were not
> >re-created on the manager server's local disk. So after the restore,
> >the ISO domain shows up in the Ovirt Admin portal but shows the as
> >down, and inactive. If I go into the domain, the 'Manage Domain' and
> >'Remove' buttons are not available. The only option I have for this is
> >'Destroy'.