Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*
# yum install iproute Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.awanti.com * elrepo: dfw.mirror.rackspace.com * epel: epel.besthosting.ua * extras: centos-mirror.rbc.ru * ovirt-4.0: ftp.nluug.nl * ovirt-4.0-epel: epel.besthosting.ua * updates: centos-mirror.rbc.ru Package iproute-3.10.0-54.el7_2.1.x86_64 already installed and latest version Nothing to do # ls -la /etc/yum.repos.d/ total 76 drwxr-xr-x. 2 root root 4096 Jul 26 14:08 . drwxr-xr-x. 102 root root 12288 Sep 12 11:00 .. -rw-r--r--. 1 root root 1664 Dec 9 2015 CentOS-Base.repo -rw-r--r--. 1 root root 1309 Dec 9 2015 CentOS-CR.repo -rw-r--r--. 1 root root 649 Dec 9 2015 CentOS-Debuginfo.repo -rw-r--r--. 1 root root 290 Dec 9 2015 CentOS-fasttrack.repo -rw-r--r--. 1 root root 630 Dec 9 2015 CentOS-Media.repo -rw-r--r--. 1 root root 1331 Dec 9 2015 CentOS-Sources.repo -rw-r--r--. 1 root root 1952 Dec 9 2015 CentOS-Vault.repo -rw-r--r--. 1 root root 2150 May 21 2014 elrepo.repo -rw-r--r--. 1 root root 957 Jun 3 16:52 epel.repo -rw-r--r--. 1 root root 1056 Jun 3 16:52 epel-testing.repo -rw-r--r--. 1 root root 383 Jul 21 10:44 HP-MCP.repo -rw-r--r--. 1 root root 446 Jul 21 10:45 HP-SPP-2014-06.repo -rw-r--r--. 1 root root 417 Jul 21 10:44 HP-SPP-Current.repo -rw-r--r--. 1 root root 1678 Jul 26 14:08 ovirt-4.0-dependencies.repo -rw-r--r--. 1 root root 289 Jul 26 14:08 ovirt-4.0.repo Which repo file you are interested in? 12.09.2016, 11:14, "Yedidyah Bar David": > On Mon, Sep 12, 2016 at 10:59 AM, wrote: >> Hi, Martin. >> >> The command is executed successfully: >> >> Updated: >> vdsm.x86_64 0:4.18.12-1.el7 vdsm-cli.noarch 0:4.18.12-1.el7 >> Dependency Updated: >> vdsm-api.noarch 0:4.18.12-1.el7 vdsm-hook-vmfex-dev.noarch >> 0:4.18.12-1.el7 vdsm-infra.noarch 0:4.18.12-1.el7 >> vdsm-jsonrpc.noarch 0:4.18.12-1.el7 vdsm-python.noarch 0:4.18.12-1.el7 >> vdsm-xmlrpc.noarch 0:4.18.12-1.el7 >> vdsm-yajsonrpc.noarch 0:4.18.12-1.el7 >> Complete! >> >> 12.09.2016, 10:47, "Martin Perina" : >>> Hi Aleksey, >>> >>> the error message is raised by Host upgrade manager (more info at [1]) >>> which checks for available package upgrades on the host. >>> >>> It seems that you have somehow corrupted repository configuration of the >>> host 'kom-ad01-vm31.holding.com': >>> >>> 2016-09-12 02:00:13,300 ERROR >>> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum >>> Cannot queue package iproute: Cannot find a valid baseurl for repo: >>> base/7/x86_64 >>> 2016-09-12 02:00:13,304 ERROR >>> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Failed >>> to execute stage 'Environment packages setup': Cannot find a valid baseurl >>> for repo: base/7/x86_64 >>> >>> Could you please verify that you are able to successfully execute >>> following commands on the host? >>> >>> yum check-update >>> yum update vdsm vdsm-cli > > Can you please try also: > > yum install iproute > > And also share your /etc/yum.repos.d/* ? > > Thanks. > >>> Thanks >>> >>> Martin Perina >>> >>> [1] >>> http://www.ovirt.org/develop/release-management/features/engine/upgrademanager/ >>> >>> On Mon, Sep 12, 2016 at 9:20 AM, wrote: Hello oVirt guru`s! oVirt Engine Version: 4.0.1.1-1.el7.centos Every day there is a message in web UI for one of my two hosts: "Failed to check for available updates on host KOM-AD01-VM31 with message 'Command returned failure code 1 during SSH session 'root@ kom-ad01-vm31.holding.com''. In /var/log/ovirt-engine/engine.log at this time: ... 2016-09-12 01:59:45,045 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Initializing 2016-09-12 01:59:45,055 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Environment setup 2016-09-12 01:59:45,070 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Environment packages setup 2016-09-12 02:00:13,300 ERROR [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 2016-09-12 02:00:13,304 ERROR [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Failed to execute stage 'Environment packages setup': Cannot find a valid baseurl for repo: base/7/x86_64 2016-09-12 02:00:13,304 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum Performing yum transaction rollback 2016-09-12 02:00:13,368 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Pre-termination 2016-09-12 02:00:13,388
Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*
Hi, Martin. The command is executed successfully: Updated: vdsm.x86_64 0:4.18.12-1.el7 vdsm-cli.noarch 0:4.18.12-1.el7 Dependency Updated: vdsm-api.noarch 0:4.18.12-1.el7 vdsm-hook-vmfex-dev.noarch 0:4.18.12-1.el7 vdsm-infra.noarch 0:4.18.12-1.el7 vdsm-jsonrpc.noarch 0:4.18.12-1.el7 vdsm-python.noarch 0:4.18.12-1.el7 vdsm-xmlrpc.noarch 0:4.18.12-1.el7 vdsm-yajsonrpc.noarch 0:4.18.12-1.el7 Complete! 12.09.2016, 10:47, "Martin Perina": > Hi Aleksey, > > the error message is raised by Host upgrade manager (more info at [1]) which > checks for available package upgrades on the host. > > It seems that you have somehow corrupted repository configuration of the host > 'kom-ad01-vm31.holding.com': > > 2016-09-12 02:00:13,300 ERROR > [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum > Cannot queue package iproute: Cannot find a valid baseurl for repo: > base/7/x86_64 > 2016-09-12 02:00:13,304 ERROR > [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Failed to > execute stage 'Environment packages setup': Cannot find a valid baseurl for > repo: base/7/x86_64 > > Could you please verify that you are able to successfully execute following > commands on the host? > > yum check-update > yum update vdsm vdsm-cli > > Thanks > > Martin Perina > > [1] > http://www.ovirt.org/develop/release-management/features/engine/upgrademanager/ > > On Mon, Sep 12, 2016 at 9:20 AM, wrote: >> Hello oVirt guru`s! >> >> oVirt Engine Version: 4.0.1.1-1.el7.centos >> >> Every day there is a message in web UI for one of my two hosts: >> >> "Failed to check for available updates on host KOM-AD01-VM31 with message >> 'Command returned failure code 1 during SSH session 'root@ >> >> kom-ad01-vm31.holding.com''. >> >> In /var/log/ovirt-engine/engine.log at this time: >> >> ... >> 2016-09-12 01:59:45,045 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: >> Initializing >> 2016-09-12 01:59:45,055 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: >> Environment setup >> 2016-09-12 01:59:45,070 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: >> Environment packages setup >> >> 2016-09-12 02:00:13,300 ERROR >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum >> Cannot queue package iproute: Cannot find a valid baseurl for repo: >> base/7/x86_64 >> 2016-09-12 02:00:13,304 ERROR >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Failed >> to execute stage 'Environment packages setup': Cannot find a valid baseurl >> for repo: base/7/x86_64 >> 2016-09-12 02:00:13,304 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum >> Performing yum transaction rollback >> 2016-09-12 02:00:13,368 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: >> Pre-termination >> 2016-09-12 02:00:13,388 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] >> Retrieving installation logs to: >> '/var/log/ovirt-engine/host-deploy/ovirt-host-mgmt-20160912020013-kom-ad01-vm31.holding.com-null.l$ >> 2016-09-12 02:00:13,459 INFO >> [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: >> Termination >> 2016-09-12 02:00:13,506 ERROR [org.ovirt.engine.core.uutils.ssh.SSHDialog] >> (DefaultQuartzScheduler5) [] SSH error running command >> r...@kom-ad01-vm31.holding.com:'umask 0077; >> MYTMP="$(TMPDIR="${OVIRT_TMPDIR}" mktemp -d -t ovirt-XX)"; trap >> "chmod -R u+rwX \"${MYTMP}\" > /dev/null 2>&1; rm -fr \"${MYTMP}\" > >> /dev/null 2>&1" 0; tar --warning=no-timestamp -C "${MYTMP}" -x && >> "${MYTMP}"/ovirt-host-mgmt DIALOG/dialect=str:machine >> DIALOG/customization=bool:True': Command returned failure code 1 during SSH >> session 'r...@kom-ad01-vm31.holding.com' >> >> 2016-09-12 02:00:13,506 ERROR [org.ovirt.engine.core.uutils.ssh.SSHDialog] >> (DefaultQuartzScheduler5) [] Exception: java.io.IOException: Command >> returned failure code 1 during SSH session 'r...@kom-ad01-vm31.holding.com' >> at >> org.ovirt.engine.core.uutils.ssh.SSHClient.executeCommand(SSHClient.java:526) >> [uutils.jar:] >> at >> org.ovirt.engine.core.uutils.ssh.SSHDialog.executeCommand(SSHDialog.java:317) >> [uutils.jar:] >> at >> org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase.execute(VdsDeployBase.java:563) >> [bll.jar:] >> at >> org.ovirt.engine.core.bll.host.HostUpgradeManager.isUpdateAvailable(HostUpgradeManager.java:44) >> [bll.jar:] >> at >> org.ovirt.engine.core.bll.host.AvailableUpdatesFinder.isUpdateAvailable(AvailableUpdatesFinder.java:26) >> [bll.jar:] >> at >> org.ovirt.engine.core.bll.VdsEventListener.isUpdateAvailable(VdsEventListener.java:553) >> [bll.jar:] >>
[ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*
Hello oVirt guru`s! oVirt Engine Version: 4.0.1.1-1.el7.centos Every day there is a message in web UI for one of my two hosts: "Failed to check for available updates on host KOM-AD01-VM31 with message 'Command returned failure code 1 during SSH session 'r...@kom-ad01-vm31.holding.com''. In /var/log/ovirt-engine/engine.log at this time: ... 2016-09-12 01:59:45,045 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Initializing 2016-09-12 01:59:45,055 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Environment setup 2016-09-12 01:59:45,070 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Environment packages setup 2016-09-12 02:00:13,300 ERROR [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 2016-09-12 02:00:13,304 ERROR [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Failed to execute stage 'Environment packages setup': Cannot find a valid baseurl for repo: base/7/x86_64 2016-09-12 02:00:13,304 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Yum Performing yum transaction rollback 2016-09-12 02:00:13,368 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Pre-termination 2016-09-12 02:00:13,388 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Retrieving installation logs to: '/var/log/ovirt-engine/host-deploy/ovirt-host-mgmt-20160912020013-kom-ad01-vm31.holding.com-null.l$ 2016-09-12 02:00:13,459 INFO [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (VdsDeploy) [] Stage: Termination 2016-09-12 02:00:13,506 ERROR [org.ovirt.engine.core.uutils.ssh.SSHDialog] (DefaultQuartzScheduler5) [] SSH error running command r...@kom-ad01-vm31.holding.com:'umask 0077; MYTMP="$(TMPDIR="${OVIRT_TMPDIR}" mktemp -d -t ovirt-XX)"; trap "chmod -R u+rwX \"${MYTMP}\" > /dev/null 2>&1; rm -fr \"${MYTMP}\" > /dev/null 2>&1" 0; tar --warning=no-timestamp -C "${MYTMP}" -x && "${MYTMP}"/ovirt-host-mgmt DIALOG/dialect=str:machine DIALOG/customization=bool:True': Command returned failure code 1 during SSH session 'r...@kom-ad01-vm31.holding.com' 2016-09-12 02:00:13,506 ERROR [org.ovirt.engine.core.uutils.ssh.SSHDialog] (DefaultQuartzScheduler5) [] Exception: java.io.IOException: Command returned failure code 1 during SSH session 'r...@kom-ad01-vm31.holding.com' at org.ovirt.engine.core.uutils.ssh.SSHClient.executeCommand(SSHClient.java:526) [uutils.jar:] at org.ovirt.engine.core.uutils.ssh.SSHDialog.executeCommand(SSHDialog.java:317) [uutils.jar:] at org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase.execute(VdsDeployBase.java:563) [bll.jar:] at org.ovirt.engine.core.bll.host.HostUpgradeManager.isUpdateAvailable(HostUpgradeManager.java:44) [bll.jar:] at org.ovirt.engine.core.bll.host.AvailableUpdatesFinder.isUpdateAvailable(AvailableUpdatesFinder.java:26) [bll.jar:] at org.ovirt.engine.core.bll.VdsEventListener.isUpdateAvailable(VdsEventListener.java:553) [bll.jar:] at org.ovirt.engine.core.vdsbroker.ResourceManager.isUpdateAvailable(ResourceManager.java:510) [vdsbroker.jar:] at org.ovirt.engine.core.vdsbroker.VdsManager.availableUpdates(VdsManager.java:306) [vdsbroker.jar:] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_101] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [rt.jar:1.8.0_101] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_101] at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_101] at org.ovirt.engine.core.utils.timer.JobWrapper.invokeMethod(JobWrapper.java:77) [scheduler.jar:] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:51) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [rt.jar:1.8.0_101] at java.util.concurrent.FutureTask.run(FutureTask.java:266) [rt.jar:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [rt.jar:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_101] 2016-09-12 02:00:13,507 ERROR [org.ovirt.engine.core.bll.hostdeploy.VdsDeployBase] (DefaultQuartzScheduler5) [] Error during host kom-ad01-vm31.holding.com install: java.io.IOException: Command returned failure code 1 during SSH session 'r...@kom-ad01-vm31.holding.com' at org.ovirt.engine.core.uutils.ssh.SSHClient.executeCommand(SSHClient.java:526) [uutils.jar:] at
Re: [ovirt-users] oVirt 4 Hosted Engine Full Backup Workflow in single script
Thanks for explanation, Simone. 02.09.2016, 10:38, "Simone Tiraboschi": On Fri, Sep 2, 2016 at 8:20 AM, wrote:Hello oVirt guru`s !As described in https://www.ovirt.org/documentation/admin-guide/hosted-engine-backup-and-restore/the backup process consists of three phases:1) On some oVirt Host:# hosted-engine --set-maintenance --mode=global2) On oVirt Hosted Engine VM:# service ovirt-engine stop# engine-backup --mode=backup --scope=all --file=/mnt/nfsshare/backup.tar --log=/mnt/nfsshare/backup.log# service ovirt-engine start3) On some oVirt Host:# hosted-engine --set-maintenance --mode=noneAs I understand it, the first and the third phase are performed on any oVirt Host.The second phase runs inside oVirt Hosted Engine VM.Because hosted-engine command not provided on Hosted Engine VM :(I have a few questions.1) For what stop is executed for ovirt-engine service before engine-backup?I found an interesting script http://learnlinuxchennai.blogspot.ru/2015/08/ovirt-manager-backup-script.htmlBut the script is not specified stop ovirt-engine service before engine-backup. The backup of the engine DB is a single transaction by itself but we are, optionally, saving a backup of DWH and reports DB with different commands and so having it down is safer.On the other side, this require the global maintenance mode since otherwise, if the engine downtime due to backup creation is too long, the ha-agent will reboot the engine VM to ensure HA. 2) Is it possible within a single script to organize all oVirt HE Backup Workflow (phase 1, then phase 2, then phase 3)Perhaps there is an example of such a script? You should be able to require the global maintenance mode from the engine also via REST API. ___Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt 4 Hosted Engine Full Backup Workflow in single script
Hello oVirt guru`s ! As described in https://www.ovirt.org/documentation/admin-guide/hosted-engine-backup-and-restore/ the backup process consists of three phases: 1) On some oVirt Host: # hosted-engine --set-maintenance --mode=global 2) On oVirt Hosted Engine VM: # service ovirt-engine stop # engine-backup --mode=backup --scope=all --file=/mnt/nfsshare/backup.tar --log=/mnt/nfsshare/backup.log # service ovirt-engine start 3) On some oVirt Host: # hosted-engine --set-maintenance --mode=none As I understand it, the first and the third phase are performed on any oVirt Host. The second phase runs inside oVirt Hosted Engine VM. Because hosted-engine command not provided on Hosted Engine VM :( I have a few questions. 1) For what stop is executed for ovirt-engine service before engine-backup? I found an interesting script http://learnlinuxchennai.blogspot.ru/2015/08/ovirt-manager-backup-script.html But the script is not specified stop ovirt-engine service before engine-backup. 2) Is it possible within a single script to organize all oVirt HE Backup Workflow (phase 1, then phase 2, then phase 3) Perhaps there is an example of such a script? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
Oh yeah :) I mistakenly used a root certificate from a local CA for /etc/pki/ovirt-engine/apache-ca.pem. Now I understood, and it works. Thanks again. 16.08.2016, 16:15, "Jiri Belka" <jbe...@redhat.com>: > IMO you "owe" explanation what was wrong, so other users > could learn from your mistakes and this mailing-list archive > would thus be beneficial for them when searching for help ;) > > Anyway, that's great news! > > j. > > - Original Message - > From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> > To: "Jiri Belka" <jbe...@redhat.com> > Cc: "users" <users@ovirt.org> > Sent: Tuesday, August 16, 2016 2:59:21 PM > Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE > HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/ > > Thank you, Jiri ! > I did everything step by step and SPICE HTML5 browser client now works. > > 16.08.2016, 10:46, "Jiri Belka" <jbe...@redhat.com>: >> So, >> >> I used this for my own ca test: >> >> OWN CA AND OWN ENGINE KEY/CRT >> = >> >> 0> CA >> >> # awk '/my-/ || $1 ~ /^[^#]*_default/' /etc/pki/tls/openssl.cnf >> certificate = $dir/my-ca.crt # The CA certificate >> crl = $dir/my-ca.crl # The current CRL >> private_key = $dir/private/my-ca.key # The private key >> countryName_default = CZ >> stateOrProvinceName_default = Jihomoravsky kraj >> localityName_default = Brno >> 0.organizationName_default = Shoot them in the head, s. r. o. >> >> touch /etc/pki/CA/index.txt >> echo 01 > /etc/pki/CA/serial >> cd /etc/pki/CA >> (umask 077 ; openssl genrsa -out private/my-ca.key -des3 2048 ) >> openssl req -new -x509 -key private/my-ca.key -days 365 > my-ca.crt >> >> 0> engine cert >> >> openssl genrsa -out my-engine.key 4096 >> openssl req -new -out my-engine.csr -key my-engine.key >> openssl ca -in my-engine.csr -out my-engine.crt >> # use 'mypass' for p12 bundle export !!! >> openssl pkcs12 -export -out my-engine.p12 -inkey my-engine.key -in >> my-engine.crt -chain -CAfile /etc/pki/CA/my-ca.crt >> >> 0> existing engine keys/certs/p12 replacement >> >> (follow >> $engine_url/ovirt-engine/docs/manual/en_US/html/Administration_Guide/appe-Red_Hat_Enterprise_Virtualization_and_SSL.html) >> >> rm -f /etc/pki/ovirt-engine/apache-ca.pem >> cp my-engine.crt /etc/pki/ovirt-engine/apache-ca.pem >> cp my-engine.p12 /etc/pki/ovirt-engine/keys/apache.p12 >> openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nocerts -nodes > >> /etc/pki/ovirt-engine/keys/apache.key.nopass >> openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nokeys > >> /etc/pki/ovirt-engine/certs/apache.cer >> install -o ovirt -g ovirt -m 600 /dev/null >> /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf >> # 'changeit' is default java truststore pass on EL >> cat > /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf << EOF >> ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts" >> ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD="changeit" >> EOF >> >> 0> add custom CA into system truststore after backup >> >> cp /etc/pki/CA/my-ca.crt /etc/pki/ca-trust/source/anchors/CA.crt >> update-ca-trust >> >> 0> check if system truststore knows about custom CA >> >> openssl x509 -in /etc/pki/ca-trust/source/anchors/CA.crt -fingerprint -sha1 >> -noout >> # 'changeit' is default java truststore pass on EL >> keytool -list -keystore /etc/pki/java/cacerts -storepass changeit | grep >> "$( openssl x509 -in /etc/pki/ca-trust/source/anchors/CA.crt -fingerprint >> -sha1 -noout | sed -e '/SHA1/s/.*=//;' )" >> grep -IR "$(sed -n '2p' /etc/pki/ca-trust/source/anchors/CA.crt)" >> /etc/pki/ca-trust/extracted/ >> >> 0> engine-setup pki configuration check >> >> engine-setup # see if 'PKI CONFIGURATION' section passed without errors >> >> (doctext here https://bugzilla.redhat.com/show_bug.cgi?id=1336838) >> >> And this for websocket proxy: >> >> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >> PROXY_PORT=6100 >> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >> SSL_ONLY=True >> >>
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
Thank you, Jiri ! I did everything step by step and SPICE HTML5 browser client now works. 16.08.2016, 10:46, "Jiri Belka" <jbe...@redhat.com>: > So, > > I used this for my own ca test: > > OWN CA AND OWN ENGINE KEY/CRT > = > > 0> CA > > # awk '/my-/ || $1 ~ /^[^#]*_default/' /etc/pki/tls/openssl.cnf > certificate = $dir/my-ca.crt # The CA certificate > crl = $dir/my-ca.crl # The current CRL > private_key = $dir/private/my-ca.key # The private key > countryName_default = CZ > stateOrProvinceName_default = Jihomoravsky kraj > localityName_default = Brno > 0.organizationName_default = Shoot them in the head, s. r. o. > > touch /etc/pki/CA/index.txt > echo 01 > /etc/pki/CA/serial > cd /etc/pki/CA > (umask 077 ; openssl genrsa -out private/my-ca.key -des3 2048 ) > openssl req -new -x509 -key private/my-ca.key -days 365 > my-ca.crt > > 0> engine cert > > openssl genrsa -out my-engine.key 4096 > openssl req -new -out my-engine.csr -key my-engine.key > openssl ca -in my-engine.csr -out my-engine.crt > # use 'mypass' for p12 bundle export !!! > openssl pkcs12 -export -out my-engine.p12 -inkey my-engine.key -in > my-engine.crt -chain -CAfile /etc/pki/CA/my-ca.crt > > 0> existing engine keys/certs/p12 replacement > > (follow > $engine_url/ovirt-engine/docs/manual/en_US/html/Administration_Guide/appe-Red_Hat_Enterprise_Virtualization_and_SSL.html) > > rm -f /etc/pki/ovirt-engine/apache-ca.pem > cp my-engine.crt /etc/pki/ovirt-engine/apache-ca.pem > cp my-engine.p12 /etc/pki/ovirt-engine/keys/apache.p12 > openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nocerts -nodes > > /etc/pki/ovirt-engine/keys/apache.key.nopass > openssl pkcs12 -in /etc/pki/ovirt-engine/keys/apache.p12 -nokeys > > /etc/pki/ovirt-engine/certs/apache.cer > install -o ovirt -g ovirt -m 600 /dev/null > /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf > # 'changeit' is default java truststore pass on EL > cat > /etc/ovirt-engine/engine.conf.d/99-custom-truststore.conf << EOF > ENGINE_HTTPS_PKI_TRUST_STORE="/etc/pki/java/cacerts" > ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD="changeit" > EOF > > 0> add custom CA into system truststore after backup > > cp /etc/pki/CA/my-ca.crt /etc/pki/ca-trust/source/anchors/CA.crt > update-ca-trust > > 0> check if system truststore knows about custom CA > > openssl x509 -in /etc/pki/ca-trust/source/anchors/CA.crt -fingerprint -sha1 > -noout > # 'changeit' is default java truststore pass on EL > keytool -list -keystore /etc/pki/java/cacerts -storepass changeit | grep "$( > openssl x509 -in /etc/pki/ca-trust/source/anchors/CA.crt -fingerprint -sha1 > -noout | sed -e '/SHA1/s/.*=//;' )" > grep -IR "$(sed -n '2p' /etc/pki/ca-trust/source/anchors/CA.crt)" > /etc/pki/ca-trust/extracted/ > > 0> engine-setup pki configuration check > > engine-setup # see if 'PKI CONFIGURATION' section passed without errors > > (doctext here https://bugzilla.redhat.com/show_bug.cgi?id=1336838) > > And this for websocket proxy: > > # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf > PROXY_PORT=6100 > SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem > SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass > CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer > SSL_ONLY=True > > You can start manually websocket proxy: > > /usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py > --help > Usage: ovirt-websocket-proxy.py [options] start > > Options: > -h, --help show this help message and exit > -d, --debug debug mode > --pidfile=FILE pid file to use > --background Go into the background > --systemd=SYSTEMD Systemd type simple|notify > --redirect-output Redirect output of daemon > > It is also handy to do: > > openssl s_client -connect $websocketproxy_host:6100 > > j. > > - Original Message - > From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> > To: "Jiri Belka" <jbe...@redhat.com> > Cc: "users" <users@ovirt.org> > Sent: Tuesday, August 16, 2016 9:33:54 AM > Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE > HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/ > > Jiri, I did not hide information. Tell me what the log file should show and I > will show > > 16.08.2016, 10:29, "Jiri Belka" <jbe...@redhat.com>: >> It does have logs, filenames "hide" real data. >> >> You should reveal logs and what ea
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
Jiri, I did not hide information. Tell me what the log file should show and I will show 16.08.2016, 10:29, "Jiri Belka" <jbe...@redhat.com>: > It does have logs, filenames "hide" real data. > > You should reveal logs and what each file is and > which exact commands you were executing. > > Vague statements won't help much. It does work for me, > there much be something strange in your setup but we > cannot know what without details. > > j. > > - Original Message - > From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> > To: "Jiri Belka" <jbe...@redhat.com> > Cc: "users" <users@ovirt.org> > Sent: Monday, August 15, 2016 6:18:48 PM > Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE > HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/ > > I tried a version of Nicolás. > No success :(( > > 1) I create full bundle cert file: > > # cat /etc/pki/ovirt-engine/certs/apache.cer > /etc/pki/ovirt-engine/apache-ca.pem > > /etc/pki/ovirt-engine/certs/apache-with-ca.cer > # openssl verify /etc/pki/ovirt-engine/certs/apache-with-ca.cer > > /etc/pki/ovirt-engine/certs/apache-with-ca.cer: OK > > 2) I changed config file: > > # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf > > PROXY_PORT=6100 > SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache-with-ca.cer > SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass > SSL_ONLY=True > FORCE_DATA_VERIFICATION=False > > 3) I restarted the service > > # service ovirt-websocket-proxy restart > > Problem still exists :( > Any ideas how to trablshut problem? > > 14.08.2016, 08:59, "aleksey.maksi...@it-kb.ru" <aleksey.maksi...@it-kb.ru>: >> Hi Jiri. >> But your variant does not work, too >> >> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >> PROXY_PORT=6100 >> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >> SSL_ONLY=True >> >> Some error: >> WebSocket error: Can't connect to websocket on URL: >> wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] >> >> any ideas how to trablshut problem? >> >> 14.08.2016, 01:53, "Jiri Belka" <jbe...@redhat.com>: >>> I have different files for those variables, maybe this is the case? >>> >>> Review again. >>> >>> j. >>> >>> - Original Message - >>> From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> >>> To: "Jiri Belka" <jbe...@redhat.com> >>> Cc: "users" <users@ovirt.org> >>> Sent: Saturday, August 13, 2016 4:57:45 PM >>> Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE >>> HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: >>> wss://ovirt.engine.fqdn:6100/ >>> >>> I changed my file >>> /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: >>> >>> PROXY_PORT=6100 >>> #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer >>> #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass >>> #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer >>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >>> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem >>> SSL_ONLY=True >>> >>> ...and restart HostedEngine VM. >>> Problem still exists. >>> >>> 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" >>> <aleksey.maksi...@it-kb.ru>: >>>> It does not work for me. any ideas? >>>> >>>> 02.08.2016, 17:22, "Jiri Belka" <jbe...@redhat.com>: >>>>> This works for me: >>>>> >>>>> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >>>>> PROXY_PORT=6100 >>>>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >>>>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >>>>> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >>>>> SSL_ONLY=True >>>>> >>>>> - Original Message - >>>>> From: &q
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
I tried a version of Nicolás. No success :(( 1) I create full bundle cert file: # cat /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/apache-ca.pem > /etc/pki/ovirt-engine/certs/apache-with-ca.cer # openssl verify /etc/pki/ovirt-engine/certs/apache-with-ca.cer /etc/pki/ovirt-engine/certs/apache-with-ca.cer: OK 2) I changed config file: # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache-with-ca.cer SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass SSL_ONLY=True FORCE_DATA_VERIFICATION=False 3) I restarted the service # service ovirt-websocket-proxy restart Problem still exists :( Any ideas how to trablshut problem? 14.08.2016, 08:59, "aleksey.maksi...@it-kb.ru" <aleksey.maksi...@it-kb.ru>: > Hi Jiri. > But your variant does not work, too > > # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf > PROXY_PORT=6100 > SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem > SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass > CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer > SSL_ONLY=True > > Some error: > WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] > > any ideas how to trablshut problem? > > 14.08.2016, 01:53, "Jiri Belka" <jbe...@redhat.com>: >> I have different files for those variables, maybe this is the case? >> >> Review again. >> >> j. >> >> - Original Message - >> From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> >> To: "Jiri Belka" <jbe...@redhat.com> >> Cc: "users" <users@ovirt.org> >> Sent: Saturday, August 13, 2016 4:57:45 PM >> Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE >> HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: >> wss://ovirt.engine.fqdn:6100/ >> >> I changed my file >> /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: >> >> PROXY_PORT=6100 >> #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer >> #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass >> #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >> SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer >> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem >> SSL_ONLY=True >> >> ...and restart HostedEngine VM. >> Problem still exists. >> >> 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" <aleksey.maksi...@it-kb.ru>: >>> It does not work for me. any ideas? >>> >>> 02.08.2016, 17:22, "Jiri Belka" <jbe...@redhat.com>: >>>> This works for me: >>>> >>>> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >>>> PROXY_PORT=6100 >>>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >>>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >>>> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >>>> SSL_ONLY=True >>>> >>>> - Original Message - >>>> From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> >>>> To: "users" <users@ovirt.org> >>>> Sent: Monday, August 1, 2016 12:13:38 PM >>>> Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE >>>> HTML5 browser client -> WebSocket error: Can't connect to websocket on >>>> URL: wss://ovirt.engine.fqdn:6100/ >>>> >>>> Hello oVirt guru`s ! >>>> >>>> I have successfully replaced the oVirt 4 site SSL-certificate according >>>> to the instructions from "Replacing oVirt SSL Certificate" >>>> section in "oVirt Administration Guide" >>>> http://www.ovirt.org/documentation/admin-guide/administration-guide/ >>>> >>>> 3 files have been replaced: >>>> >>>> /etc/pki/ovirt-engine/certs/apache.cer >>>> /etc/pki/ovirt-engine/keys/apache.key.nopass >>>> /etc/pki/ovirt-engine/apache-ca.pem >>>> >>>> Now the oVirt site using my certificate and everything works fine, but >>>> when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a >>>> gray screen and message under the button "Toggle messages output": >>>> >>>> WebSocket error: Can't connect to websocket on URL: >>>> wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] >>>> >>>> Before replacing certificates SPICE HTML5 browser client works. >>>> Native SPICE client works fine. >>>> >>>> Tell me what to do with SPICE HTML5 browser client? >>>> ___ >>>> Users mailing list >>>> Users@ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
Hi Jiri. But your variant does not work, too # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf PROXY_PORT=6100 SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True Some error: WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] any ideas how to trablshut problem? 14.08.2016, 01:53, "Jiri Belka" <jbe...@redhat.com>: > I have different files for those variables, maybe this is the case? > > Review again. > > j. > > - Original Message - > From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> > To: "Jiri Belka" <jbe...@redhat.com> > Cc: "users" <users@ovirt.org> > Sent: Saturday, August 13, 2016 4:57:45 PM > Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE > HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/ > > I changed my file > /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: > > PROXY_PORT=6100 > #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer > #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass > #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer > SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer > SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass > CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem > SSL_ONLY=True > > ...and restart HostedEngine VM. > Problem still exists. > > 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" <aleksey.maksi...@it-kb.ru>: >> It does not work for me. any ideas? >> >> 02.08.2016, 17:22, "Jiri Belka" <jbe...@redhat.com>: >>> This works for me: >>> >>> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >>> PROXY_PORT=6100 >>> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >>> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >>> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >>> SSL_ONLY=True >>> >>> - Original Message - >>> From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> >>> To: "users" <users@ovirt.org> >>> Sent: Monday, August 1, 2016 12:13:38 PM >>> Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE >>> HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: >>> wss://ovirt.engine.fqdn:6100/ >>> >>> Hello oVirt guru`s ! >>> >>> I have successfully replaced the oVirt 4 site SSL-certificate according >>> to the instructions from "Replacing oVirt SSL Certificate" >>> section in "oVirt Administration Guide" >>> http://www.ovirt.org/documentation/admin-guide/administration-guide/ >>> >>> 3 files have been replaced: >>> >>> /etc/pki/ovirt-engine/certs/apache.cer >>> /etc/pki/ovirt-engine/keys/apache.key.nopass >>> /etc/pki/ovirt-engine/apache-ca.pem >>> >>> Now the oVirt site using my certificate and everything works fine, but >>> when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a >>> gray screen and message under the button "Toggle messages output": >>> >>> WebSocket error: Can't connect to websocket on URL: >>> wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] >>> >>> Before replacing certificates SPICE HTML5 browser client works. >>> Native SPICE client works fine. >>> >>> Tell me what to do with SPICE HTML5 browser client? >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
I changed my file /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to: PROXY_PORT=6100 #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem SSL_ONLY=True ...and restart HostedEngine VM. Problem still exists. 13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" <aleksey.maksi...@it-kb.ru>: > It does not work for me. any ideas? > > 02.08.2016, 17:22, "Jiri Belka" <jbe...@redhat.com>: >> This works for me: >> >> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf >> PROXY_PORT=6100 >> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem >> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass >> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer >> SSL_ONLY=True >> >> - Original Message - >> From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> >> To: "users" <users@ovirt.org> >> Sent: Monday, August 1, 2016 12:13:38 PM >> Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 >> browser client -> WebSocket error: Can't connect to websocket on URL: >> wss://ovirt.engine.fqdn:6100/ >> >> Hello oVirt guru`s ! >> >> I have successfully replaced the oVirt 4 site SSL-certificate according to >> the instructions from "Replacing oVirt SSL Certificate" >> section in "oVirt Administration Guide" >> http://www.ovirt.org/documentation/admin-guide/administration-guide/ >> >> 3 files have been replaced: >> >> /etc/pki/ovirt-engine/certs/apache.cer >> /etc/pki/ovirt-engine/keys/apache.key.nopass >> /etc/pki/ovirt-engine/apache-ca.pem >> >> Now the oVirt site using my certificate and everything works fine, but when >> I try to use SPICE HTML5 browser client in Firefox or Chrome I see a gray >> screen and message under the button "Toggle messages output": >> >> WebSocket error: Can't connect to websocket on URL: >> wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] >> >> Before replacing certificates SPICE HTML5 browser client works. >> Native SPICE client works fine. >> >> Tell me what to do with SPICE HTML5 browser client? >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
It does not work for me. any ideas? 02.08.2016, 17:22, "Jiri Belka" <jbe...@redhat.com>: > This works for me: > > # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf > PROXY_PORT=6100 > SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem > SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass > CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer > SSL_ONLY=True > > - Original Message - > From: "aleksey maksimov" <aleksey.maksi...@it-kb.ru> > To: "users" <users@ovirt.org> > Sent: Monday, August 1, 2016 12:13:38 PM > Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 > browser client -> WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/ > > Hello oVirt guru`s ! > > I have successfully replaced the oVirt 4 site SSL-certificate according to > the instructions from "Replacing oVirt SSL Certificate" > section in "oVirt Administration Guide" > http://www.ovirt.org/documentation/admin-guide/administration-guide/ > > 3 files have been replaced: > > /etc/pki/ovirt-engine/certs/apache.cer > /etc/pki/ovirt-engine/keys/apache.key.nopass > /etc/pki/ovirt-engine/apache-ca.pem > > Now the oVirt site using my certificate and everything works fine, but when I > try to use SPICE HTML5 browser client in Firefox or Chrome I see a gray > screen and message under the button "Toggle messages output": > > WebSocket error: Can't connect to websocket on URL: > wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] > > Before replacing certificates SPICE HTML5 browser client works. > Native SPICE client works fine. > > Tell me what to do with SPICE HTML5 browser client? > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/
Hello oVirt guru`s ! I have successfully replaced the oVirt 4 site SSL-certificate according to the instructions from "Replacing oVirt SSL Certificate" section in "oVirt Administration Guide" http://www.ovirt.org/documentation/admin-guide/administration-guide/ 3 files have been replaced: /etc/pki/ovirt-engine/certs/apache.cer /etc/pki/ovirt-engine/keys/apache.key.nopass /etc/pki/ovirt-engine/apache-ca.pem Now the oVirt site using my certificate and everything works fine, but when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a gray screen and message under the button "Toggle messages output": WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event] Before replacing certificates SPICE HTML5 browser client works. Native SPICE client works fine. Tell me what to do with SPICE HTML5 browser client? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
telnet kom-ad01-vm31.holding.com 54321 = success connection telnet ::1 54321 Trying ::1... telnet: connect to address ::1: Network is unreachable (ipv6 on my server disabled) 25.07.2016, 15:35, "Simone Tiraboschi": > On Mon, Jul 25, 2016 at 2:15 PM, wrote: >> # ss -plutn >> >> Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port >> >> udp UNCONN 0 0 *:111 *:* users:(("rpcbind",pid=827,fd=6)) >> udp UNCONN 0 0 *:161 *:* users:(("snmpd",pid=1609,fd=6)) >> udp UNCONN 0 0 127.0.0.1:323 *:* users:(("chronyd",pid=795,fd=1)) >> udp UNCONN 0 0 *:959 *:* users:(("rpcbind",pid=827,fd=7)) >> udp UNCONN 0 0 127.0.0.1:25375 *:* users:(("snmpd",pid=1609,fd=8)) >> udp UNCONN 0 0 127.0.0.1:25376 *:* users:(("cmapeerd",pid=2056,fd=5)) >> udp UNCONN 0 0 127.0.0.1:25393 *:* users:(("cmanicd",pid=2278,fd=3)) >> udp UNCONN 0 0 :::111 :::* users:(("rpcbind",pid=827,fd=9)) >> udp UNCONN 0 0 :::959 :::* users:(("rpcbind",pid=827,fd=10)) >> tcp LISTEN 0 128 *:2381 *:* >> users:(("hpsmhd",pid=3903,fd=4),("hpsmhd",pid=3901,fd=4),("hpsmhd",pid=3900,fd=4),("hpsmhd",pid=3899,fd=4),("hpsmhd",pid=3898,fd=4),("hpsmhd",pid=3893,fd=4)) >> tcp LISTEN 0 128 *:111 *:* users:(("rpcbind",pid=827,fd=8)) >> tcp LISTEN 0 5 *:54322 *:* users:(("ovirt-imageio-d",pid=753,fd=3)) >> tcp LISTEN 0 128 *:22 *:* users:(("sshd",pid=1606,fd=3)) >> tcp LISTEN 0 100 127.0.0.1:25 *:* users:(("master",pid=1948,fd=13)) >> tcp LISTEN 0 128 *:2301 *:* >> users:(("hpsmhd",pid=3903,fd=3),("hpsmhd",pid=3901,fd=3),("hpsmhd",pid=3900,fd=3),("hpsmhd",pid=3899,fd=3),("hpsmhd",pid=3898,fd=3),("hpsmhd",pid=3893,fd=3)) >> tcp LISTEN 0 30 *:16514 *:* users:(("libvirtd",pid=10688,fd=13)) >> tcp LISTEN 0 128 127.0.0.1:199 *:* users:(("snmpd",pid=1609,fd=9)) >> tcp LISTEN 0 128 :::111 :::* users:(("rpcbind",pid=827,fd=11)) >> tcp LISTEN 0 5 :::54321 :::* users:(("vdsm",pid=11077,fd=23)) > > vdsm is properly bind over ipv6. > > Can you please check if you can connect to vdsm with: > telnet kom-ad01-vm31.holding.com 54321 > and with > telnet ::1 54321 > ? > >> tcp LISTEN 0 30 :::16514 :::* users:(("libvirtd",pid=10688,fd=14)) >> >> 25.07.2016, 15:11, "Simone Tiraboschi" : >>> On Mon, Jul 25, 2016 at 2:03 PM, wrote: Yes. # ping $(python -c 'import socket; print(socket.gethostname())') PING KOM-AD01-VM31.holding.com (10.1.0.231) 56(84) bytes of data. 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=1 ttl=64 time=0.030 ms 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=2 ttl=64 time=0.015 ms 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=3 ttl=64 time=0.011 ms ^C --- KOM-AD01-VM31.holding.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 0.011/0.018/0.030/0.009 ms but... >>> >>> and the output of >>> ss -plutn >>> # vdsClient -s 0 getVdsCaps Traceback (most recent call last): File "/usr/share/vdsm/vdsClient.py", line 2980, in code, message = commands[command][0](commandArgs) File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap return self.ExecAndExit(self.s.getVdsCapabilities()) File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ return self.__send(self.__name, args) File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request verbose=self.__verbose File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request return self.single_request(host, handler, request_body, verbose) File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request self.send_content(h, request_body) File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content connection.endheaders(request_body) File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders self._send_output(message_body) File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output self.send(msg) File "/usr/lib64/python2.7/httplib.py", line 797, in send self.connect() File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in connect sock = socket.create_connection((self.host, self.port), self.timeout) File "/usr/lib64/python2.7/socket.py", line 571, in create_connection raise err error: [Errno 101] Network is unreachable 25.07.2016, 14:58, "aleksey.maksi...@it-kb.ru" : > Ok. > > 1) I stopped and disabled the service NetworkManager > # systemctl stop NetworkManager > # systemctl disable NetworkManager > > 2) I filled /etc/resolv.conf and remove DNS1,DNS2 and add PEERDNS=no in >
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
# ss -plutn Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port udp UNCONN 0 0 *:111 *:* users:(("rpcbind",pid=827,fd=6)) udp UNCONN 0 0 *:161 *:* users:(("snmpd",pid=1609,fd=6)) udp UNCONN 0 0 127.0.0.1:323 *:* users:(("chronyd",pid=795,fd=1)) udp UNCONN 0 0 *:959 *:* users:(("rpcbind",pid=827,fd=7)) udp UNCONN 0 0 127.0.0.1:25375 *:* users:(("snmpd",pid=1609,fd=8)) udp UNCONN 0 0 127.0.0.1:25376 *:* users:(("cmapeerd",pid=2056,fd=5)) udp UNCONN 0 0 127.0.0.1:25393 *:* users:(("cmanicd",pid=2278,fd=3)) udp UNCONN 0 0 :::111 :::* users:(("rpcbind",pid=827,fd=9)) udp UNCONN 0 0 :::959 :::* users:(("rpcbind",pid=827,fd=10)) tcp LISTEN 0 128 *:2381 *:* users:(("hpsmhd",pid=3903,fd=4),("hpsmhd",pid=3901,fd=4),("hpsmhd",pid=3900,fd=4),("hpsmhd",pid=3899,fd=4),("hpsmhd",pid=3898,fd=4),("hpsmhd",pid=3893,fd=4)) tcp LISTEN 0 128 *:111 *:* users:(("rpcbind",pid=827,fd=8)) tcp LISTEN 0 5 *:54322 *:* users:(("ovirt-imageio-d",pid=753,fd=3)) tcp LISTEN 0 128 *:22 *:* users:(("sshd",pid=1606,fd=3)) tcp LISTEN 0 100 127.0.0.1:25 *:* users:(("master",pid=1948,fd=13)) tcp LISTEN 0 128 *:2301 *:* users:(("hpsmhd",pid=3903,fd=3),("hpsmhd",pid=3901,fd=3),("hpsmhd",pid=3900,fd=3),("hpsmhd",pid=3899,fd=3),("hpsmhd",pid=3898,fd=3),("hpsmhd",pid=3893,fd=3)) tcp LISTEN 0 30 *:16514 *:* users:(("libvirtd",pid=10688,fd=13)) tcp LISTEN 0 128 127.0.0.1:199
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Yes. # ping $(python -c 'import socket; print(socket.gethostname())') PING KOM-AD01-VM31.holding.com (10.1.0.231) 56(84) bytes of data. 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=1 ttl=64 time=0.030 ms 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=2 ttl=64 time=0.015 ms 64 bytes from kom-ad01-vm31.holding.com (10.1.0.231): icmp_seq=3 ttl=64 time=0.011 ms ^C --- KOM-AD01-VM31.holding.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2001ms rtt min/avg/max/mdev = 0.011/0.018/0.030/0.009 ms but... # vdsClient -s 0 getVdsCaps Traceback (most recent call last): File "/usr/share/vdsm/vdsClient.py", line 2980, in code, message = commands[command][0](commandArgs) File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap return self.ExecAndExit(self.s.getVdsCapabilities()) File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ return self.__send(self.__name, args) File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request verbose=self.__verbose File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request return self.single_request(host, handler, request_body, verbose) File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request self.send_content(h, request_body) File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content connection.endheaders(request_body) File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders self._send_output(message_body) File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output self.send(msg) File "/usr/lib64/python2.7/httplib.py", line 797, in send self.connect() File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in connect sock = socket.create_connection((self.host, self.port), self.timeout) File "/usr/lib64/python2.7/socket.py", line 571, in create_connection raise err error: [Errno 101] Network is unreachable 25.07.2016, 14:58, "aleksey.maksi...@it-kb.ru": > Ok. > > 1) I stopped and disabled the service NetworkManager > # systemctl stop NetworkManager > # systemctl disable NetworkManager > > 2) I filled /etc/resolv.conf and remove DNS1,DNS2 and add PEERDNS=no in > ifcfg-* file. > > 3) Reboot server > > 4) Try deploy oVirt HE 4 and I get the same error > > [ INFO ] Creating Volume Group > [ INFO ] Creating Storage Domain > [ INFO ] Creating Storage Pool > [ INFO ] Connecting Storage Pool > [ INFO ] Verifying sanlock lockspace initialization > [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network > is unreachable > [ INFO ] Stage: Clean up > [ INFO ] Generating answer file > '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160725143420.conf' > [ INFO ] Stage: Pre-termination > [ INFO ] Stage: Termination > [ ERROR ] Hosted Engine deployment failed: this system is not reliable, > please check the issue, fix and redeploy > Log file is located at > /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160725142534-t81kwf.log > > What ideas further? > > 25.07.2016, 13:06, "Simone Tiraboschi" : >> On Mon, Jul 25, 2016 at 11:54 AM, wrote: >>> What am I supposed to do for successfully deploy ovirt 4 ? >>> Any ideas ? >> >> Can you please try to explicitly configure your DNS with nameserver >> under /etc/resolv.conf and remove DNS1 and DNS2 and set PEERDNS=no for >> the interface you are going to use? >> >>> 25.07.2016, 12:47, "aleksey.maksi...@it-kb.ru" >>> : "Aleksey, was your DNS configured with DNS1 and DNS2 just on the interface you used to create the management bridge on?" Yes. Of course 25.07.2016, 12:27, "Simone Tiraboschi" : > On Mon, Jul 25, 2016 at 10:56 AM, Piotr Kliczewski > wrote: >> This could be the issue here as well as for BZ #1358530 >> >> On Mon, Jul 25, 2016 at 10:53 AM, wrote: >>> Could this be due to the fact that the ovirt installer has changed >>> network configuration files (ifcfg-*, resolv.conf) ? >>> After the error in ovirt installation process I see from >>> resolv.conf disappeared on my DNS servers entry and now the server is >>> unable to resolve names. > > So it could be related to > https://bugzilla.redhat.com/show_bug.cgi?id=1160423 > > Aleksey, was your DNS configured with DNS1 and DNS2 just on the > interface you used to create the management bridge on? > Can you please try the workaround described here > https://bugzilla.redhat.com/show_bug.cgi?id=1160423#c25 ? > >>> 25.07.2016, 11:26, "Simone Tiraboschi" : On Mon, Jul 25, 2016 at 10:22 AM, wrote: > #
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
What am I supposed to do for successfully deploy ovirt 4 ? Any ideas ? 25.07.2016, 12:47, "aleksey.maksi...@it-kb.ru": > "Aleksey, was your DNS configured with DNS1 and DNS2 just on the interface > you used to create the management bridge on?" > > Yes. Of course > > 25.07.2016, 12:27, "Simone Tiraboschi" : >> On Mon, Jul 25, 2016 at 10:56 AM, Piotr Kliczewski >> wrote: >>> This could be the issue here as well as for BZ #1358530 >>> >>> On Mon, Jul 25, 2016 at 10:53 AM, wrote: Could this be due to the fact that the ovirt installer has changed network configuration files (ifcfg-*, resolv.conf) ? After the error in ovirt installation process I see from resolv.conf disappeared on my DNS servers entry and now the server is unable to resolve names. >> >> So it could be related to >> https://bugzilla.redhat.com/show_bug.cgi?id=1160423 >> >> Aleksey, was your DNS configured with DNS1 and DNS2 just on the >> interface you used to create the management bridge on? >> Can you please try the workaround described here >> https://bugzilla.redhat.com/show_bug.cgi?id=1160423#c25 ? >> 25.07.2016, 11:26, "Simone Tiraboschi" : > On Mon, Jul 25, 2016 at 10:22 AM, wrote: >> # vdsClient -s 0 getVdsCaps >> >> Traceback (most recent call last): >> File "/usr/share/vdsm/vdsClient.py", line 2980, in >> code, message = commands[command][0](commandArgs) >> File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap >> return self.ExecAndExit(self.s.getVdsCapabilities()) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ >> return self.__send(self.__name, args) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request >> verbose=self.__verbose >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request >> return self.single_request(host, handler, request_body, verbose) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in >> single_request >> self.send_content(h, request_body) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content >> connection.endheaders(request_body) >> File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders >> self._send_output(message_body) >> File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output >> self.send(msg) >> File "/usr/lib64/python2.7/httplib.py", line 797, in send >> self.connect() >> File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, >> in connect >> sock = socket.create_connection((self.host, self.port), >> self.timeout) >> File "/usr/lib64/python2.7/socket.py", line 571, in >> create_connection >> raise err >> error: [Errno 101] Network is unreachable > > Yaniv, can you please take also a look to this one? > it's exactly the opposite of https://bugzilla.redhat.com/1358530 > Here the jsonrpcclient works but not the xmlrpc one. > >> 25.07.2016, 11:17, "Simone Tiraboschi" : >>> On Mon, Jul 25, 2016 at 7:51 AM, wrote: Simone, there is something interesting in the vdsm.log? >>> >>> For what I saw the issue is not related to the storage but to the >>> network. >>> ovirt-hosted-engine-setup uses the jsonrpc client, instead the code >>> from ovirt-hosted-engine-ha still uses the xmlrpc client somewhere >>> and >>> this happens also when the setup asks to create the lockspace volume. >>> It seams that in your case the xmlrpc client could not connect vdsm >>> on >>> the localhost. >>> It could be somehow related to: >>> https://bugzilla.redhat.com/1358530 >>> >>> Can you please try executing >>> sudo vdsClient -s 0 getVdsCaps >>> on that host? >>> 22.07.2016, 19:36, "aleksey.maksi...@it-kb.ru" : > Simone, thanks for link. > vdsm.log attached > > 22.07.2016, 19:28, "Simone Tiraboschi" : >> On Fri, Jul 22, 2016 at 5:59 PM, >> wrote: >>> Thank you for your response, Simone. >>> >>> Log attached. >> >> It seams it comes from VDSM, can you please attach also >> vdsm.log? >> >>> I don't use ovirt-engine-appliance because I have not found >>> "how-to" for ovirt-engine-appliance deployment in hosted engine >>> configuration. >> >> yum install
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
"Aleksey, was your DNS configured with DNS1 and DNS2 just on the interface you used to create the management bridge on?" Yes. Of course 25.07.2016, 12:27, "Simone Tiraboschi": > On Mon, Jul 25, 2016 at 10:56 AM, Piotr Kliczewski > wrote: >> This could be the issue here as well as for BZ #1358530 >> >> On Mon, Jul 25, 2016 at 10:53 AM, wrote: >>> Could this be due to the fact that the ovirt installer has changed network >>> configuration files (ifcfg-*, resolv.conf) ? >>> After the error in ovirt installation process I see from resolv.conf >>> disappeared on my DNS servers entry and now the server is unable to resolve >>> names. > > So it could be related to https://bugzilla.redhat.com/show_bug.cgi?id=1160423 > > Aleksey, was your DNS configured with DNS1 and DNS2 just on the > interface you used to create the management bridge on? > Can you please try the workaround described here > https://bugzilla.redhat.com/show_bug.cgi?id=1160423#c25 ? > >>> 25.07.2016, 11:26, "Simone Tiraboschi" : On Mon, Jul 25, 2016 at 10:22 AM, wrote: > # vdsClient -s 0 getVdsCaps > > Traceback (most recent call last): > File "/usr/share/vdsm/vdsClient.py", line 2980, in > code, message = commands[command][0](commandArgs) > File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap > return self.ExecAndExit(self.s.getVdsCapabilities()) > File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ > return self.__send(self.__name, args) > File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request > verbose=self.__verbose > File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request > return self.single_request(host, handler, request_body, verbose) > File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request > self.send_content(h, request_body) > File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content > connection.endheaders(request_body) > File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders > self._send_output(message_body) > File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output > self.send(msg) > File "/usr/lib64/python2.7/httplib.py", line 797, in send > self.connect() > File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, > in connect > sock = socket.create_connection((self.host, self.port), > self.timeout) > File "/usr/lib64/python2.7/socket.py", line 571, in create_connection > raise err > error: [Errno 101] Network is unreachable Yaniv, can you please take also a look to this one? it's exactly the opposite of https://bugzilla.redhat.com/1358530 Here the jsonrpcclient works but not the xmlrpc one. > 25.07.2016, 11:17, "Simone Tiraboschi" : >> On Mon, Jul 25, 2016 at 7:51 AM, wrote: >>> Simone, there is something interesting in the vdsm.log? >> >> For what I saw the issue is not related to the storage but to the >> network. >> ovirt-hosted-engine-setup uses the jsonrpc client, instead the code >> from ovirt-hosted-engine-ha still uses the xmlrpc client somewhere and >> this happens also when the setup asks to create the lockspace volume. >> It seams that in your case the xmlrpc client could not connect vdsm on >> the localhost. >> It could be somehow related to: >> https://bugzilla.redhat.com/1358530 >> >> Can you please try executing >> sudo vdsClient -s 0 getVdsCaps >> on that host? >> >>> 22.07.2016, 19:36, "aleksey.maksi...@it-kb.ru" >>> : Simone, thanks for link. vdsm.log attached 22.07.2016, 19:28, "Simone Tiraboschi" : > On Fri, Jul 22, 2016 at 5:59 PM, > wrote: >> Thank you for your response, Simone. >> >> Log attached. > > It seams it comes from VDSM, can you please attach also vdsm.log? > >> I don't use ovirt-engine-appliance because I have not found >> "how-to" for ovirt-engine-appliance deployment in hosted engine >> configuration. > > yum install ovirt-engine-appliance > > Then follow the instruction here: > > http://www.ovirt.org/develop/release-management/features/heapplianceflow/ > >> 22.07.2016, 17:09, "Simone Tiraboschi" : >>> Hi Aleksey, >>> Can you please attach hosted-engine-setup logs?
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Could this be due to the fact that the ovirt installer has changed network configuration files (ifcfg-*, resolv.conf) ? After the error in ovirt installation process I see from resolv.conf disappeared on my DNS servers entry and now the server is unable to resolve names. 25.07.2016, 11:26, "Simone Tiraboschi": > On Mon, Jul 25, 2016 at 10:22 AM, wrote: >> # vdsClient -s 0 getVdsCaps >> >> Traceback (most recent call last): >> File "/usr/share/vdsm/vdsClient.py", line 2980, in >> code, message = commands[command][0](commandArgs) >> File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap >> return self.ExecAndExit(self.s.getVdsCapabilities()) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ >> return self.__send(self.__name, args) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request >> verbose=self.__verbose >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request >> return self.single_request(host, handler, request_body, verbose) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request >> self.send_content(h, request_body) >> File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content >> connection.endheaders(request_body) >> File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders >> self._send_output(message_body) >> File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output >> self.send(msg) >> File "/usr/lib64/python2.7/httplib.py", line 797, in send >> self.connect() >> File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in >> connect >> sock = socket.create_connection((self.host, self.port), self.timeout) >> File "/usr/lib64/python2.7/socket.py", line 571, in create_connection >> raise err >> error: [Errno 101] Network is unreachable > > Yaniv, can you please take also a look to this one? > it's exactly the opposite of https://bugzilla.redhat.com/1358530 > Here the jsonrpcclient works but not the xmlrpc one. > >> 25.07.2016, 11:17, "Simone Tiraboschi" : >>> On Mon, Jul 25, 2016 at 7:51 AM, wrote: Simone, there is something interesting in the vdsm.log? >>> >>> For what I saw the issue is not related to the storage but to the network. >>> ovirt-hosted-engine-setup uses the jsonrpc client, instead the code >>> from ovirt-hosted-engine-ha still uses the xmlrpc client somewhere and >>> this happens also when the setup asks to create the lockspace volume. >>> It seams that in your case the xmlrpc client could not connect vdsm on >>> the localhost. >>> It could be somehow related to: >>> https://bugzilla.redhat.com/1358530 >>> >>> Can you please try executing >>> sudo vdsClient -s 0 getVdsCaps >>> on that host? >>> 22.07.2016, 19:36, "aleksey.maksi...@it-kb.ru" : > Simone, thanks for link. > vdsm.log attached > > 22.07.2016, 19:28, "Simone Tiraboschi" : >> On Fri, Jul 22, 2016 at 5:59 PM, wrote: >>> Thank you for your response, Simone. >>> >>> Log attached. >> >> It seams it comes from VDSM, can you please attach also vdsm.log? >> >>> I don't use ovirt-engine-appliance because I have not found >>> "how-to" for ovirt-engine-appliance deployment in hosted engine >>> configuration. >> >> yum install ovirt-engine-appliance >> >> Then follow the instruction here: >> >> http://www.ovirt.org/develop/release-management/features/heapplianceflow/ >> >>> 22.07.2016, 17:09, "Simone Tiraboschi" : Hi Aleksey, Can you please attach hosted-engine-setup logs? On Fri, Jul 22, 2016 at 3:46 PM, wrote: > Hello oVirt guru`s ! > > I have problem with initial deploy of ovirt 4.0 hosted engine. > > My environment : > > * Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected > (with > multipathd) to storage HP 3PAR 7200 > * On each server installed CentOS 7.2 Linux > (3.10.0-327.22.2.el7.x86_64) > * On 3PAR storage I created 2 LUNs for oVirt. > - First LUN for oVirt Hosted Engine VM (60GB) > - Second LUN for all other VMs (2TB) > > # multipath -ll > > 3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VV > size=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw > `-+- policy='round-robin 0' prio=50 status=active > |- 2:0:1:1 sdd 8:48 active ready running > |- 3:0:0:1 sdf 8:80 active
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
# vdsClient -s 0 getVdsCaps Traceback (most recent call last): File "/usr/share/vdsm/vdsClient.py", line 2980, in code, message = commands[command][0](commandArgs) File "/usr/share/vdsm/vdsClient.py", line 543, in do_getCap return self.ExecAndExit(self.s.getVdsCapabilities()) File "/usr/lib64/python2.7/xmlrpclib.py", line 1233, in __call__ return self.__send(self.__name, args) File "/usr/lib64/python2.7/xmlrpclib.py", line 1587, in __request verbose=self.__verbose File "/usr/lib64/python2.7/xmlrpclib.py", line 1273, in request return self.single_request(host, handler, request_body, verbose) File "/usr/lib64/python2.7/xmlrpclib.py", line 1301, in single_request self.send_content(h, request_body) File "/usr/lib64/python2.7/xmlrpclib.py", line 1448, in send_content connection.endheaders(request_body) File "/usr/lib64/python2.7/httplib.py", line 975, in endheaders self._send_output(message_body) File "/usr/lib64/python2.7/httplib.py", line 835, in _send_output self.send(msg) File "/usr/lib64/python2.7/httplib.py", line 797, in send self.connect() File "/usr/lib/python2.7/site-packages/vdsm/m2cutils.py", line 203, in connect sock = socket.create_connection((self.host, self.port), self.timeout) File "/usr/lib64/python2.7/socket.py", line 571, in create_connection raise err error: [Errno 101] Network is unreachable 25.07.2016, 11:17, "Simone Tiraboschi": > On Mon, Jul 25, 2016 at 7:51 AM, wrote: >> Simone, there is something interesting in the vdsm.log? > > For what I saw the issue is not related to the storage but to the network. > ovirt-hosted-engine-setup uses the jsonrpc client, instead the code > from ovirt-hosted-engine-ha still uses the xmlrpc client somewhere and > this happens also when the setup asks to create the lockspace volume. > It seams that in your case the xmlrpc client could not connect vdsm on > the localhost. > It could be somehow related to: > https://bugzilla.redhat.com/1358530 > > Can you please try executing > sudo vdsClient -s 0 getVdsCaps > on that host? > >> 22.07.2016, 19:36, "aleksey.maksi...@it-kb.ru" : >>> Simone, thanks for link. >>> vdsm.log attached >>> >>> 22.07.2016, 19:28, "Simone Tiraboschi" : On Fri, Jul 22, 2016 at 5:59 PM, wrote: > Thank you for your response, Simone. > > Log attached. It seams it comes from VDSM, can you please attach also vdsm.log? > I don't use ovirt-engine-appliance because I have not found "how-to" > for ovirt-engine-appliance deployment in hosted engine configuration. yum install ovirt-engine-appliance Then follow the instruction here: http://www.ovirt.org/develop/release-management/features/heapplianceflow/ > 22.07.2016, 17:09, "Simone Tiraboschi" : >> Hi Aleksey, >> Can you please attach hosted-engine-setup logs? >> >> On Fri, Jul 22, 2016 at 3:46 PM, wrote: >> >>> Hello oVirt guru`s ! >>> >>> I have problem with initial deploy of ovirt 4.0 hosted engine. >>> >>> My environment : >>> >>> * Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected >>> (with >>> multipathd) to storage HP 3PAR 7200 >>> * On each server installed CentOS 7.2 Linux >>> (3.10.0-327.22.2.el7.x86_64) >>> * On 3PAR storage I created 2 LUNs for oVirt. >>> - First LUN for oVirt Hosted Engine VM (60GB) >>> - Second LUN for all other VMs (2TB) >>> >>> # multipath -ll >>> >>> 3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VV >>> size=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw >>> `-+- policy='round-robin 0' prio=50 status=active >>> |- 2:0:1:1 sdd 8:48 active ready running >>> |- 3:0:0:1 sdf 8:80 active ready running >>> |- 2:0:0:1 sdb 8:16 active ready running >>> `- 3:0:1:1 sdh 8:112 active ready running >>> >>> 3par-vv2 (360002ac00016cec9) dm-1 3PARdata,VV >>> size=2.0T features='1 queue_if_no_path' hwhandler='1 alua' wp=rw >>> `-+- policy='round-robin 0' prio=50 status=active >>> |- 2:0:0:0 sda 8:0 active ready running >>> |- 3:0:0:0 sde 8:64 active ready running >>> |- 2:0:1:0 sdc 8:32 active ready running >>> `- 3:0:1:0 sdg 8:96 active ready running >>> >>> My steps on first server (initial deploy of ovirt 4.0 hosted >>> engine): >>> >>> >>> # systemctl stop NetworkManager >>> # systemctl disable NetworkManager >>> # yum -y install >>>
Re: [ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Simone, there is something interesting in the vdsm.log? 22.07.2016, 19:36, "aleksey.maksi...@it-kb.ru": > Simone, thanks for link. > vdsm.log attached > > 22.07.2016, 19:28, "Simone Tiraboschi" : >> On Fri, Jul 22, 2016 at 5:59 PM, wrote: >>> Thank you for your response, Simone. >>> >>> Log attached. >> >> It seams it comes from VDSM, can you please attach also vdsm.log? >> >>> I don't use ovirt-engine-appliance because I have not found "how-to" for >>> ovirt-engine-appliance deployment in hosted engine configuration. >> >> yum install ovirt-engine-appliance >> >> Then follow the instruction here: >> http://www.ovirt.org/develop/release-management/features/heapplianceflow/ >> >>> 22.07.2016, 17:09, "Simone Tiraboschi" : Hi Aleksey, Can you please attach hosted-engine-setup logs? On Fri, Jul 22, 2016 at 3:46 PM, wrote: > Hello oVirt guru`s ! > > I have problem with initial deploy of ovirt 4.0 hosted engine. > > My environment : > > * Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected (with > multipathd) to storage HP 3PAR 7200 > * On each server installed CentOS 7.2 Linux > (3.10.0-327.22.2.el7.x86_64) > * On 3PAR storage I created 2 LUNs for oVirt. > - First LUN for oVirt Hosted Engine VM (60GB) > - Second LUN for all other VMs (2TB) > > # multipath -ll > > 3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VV > size=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw > `-+- policy='round-robin 0' prio=50 status=active > |- 2:0:1:1 sdd 8:48 active ready running > |- 3:0:0:1 sdf 8:80 active ready running > |- 2:0:0:1 sdb 8:16 active ready running > `- 3:0:1:1 sdh 8:112 active ready running > > 3par-vv2 (360002ac00016cec9) dm-1 3PARdata,VV > size=2.0T features='1 queue_if_no_path' hwhandler='1 alua' wp=rw > `-+- policy='round-robin 0' prio=50 status=active > |- 2:0:0:0 sda 8:0 active ready running > |- 3:0:0:0 sde 8:64 active ready running > |- 2:0:1:0 sdc 8:32 active ready running > `- 3:0:1:0 sdg 8:96 active ready running > > My steps on first server (initial deploy of ovirt 4.0 hosted engine): > > > # systemctl stop NetworkManager > # systemctl disable NetworkManager > # yum -y install > http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm > # yum -y install epel-release > # wget > > http://mirror.yandex.ru/centos/7/isos/x86_64/CentOS-7-x86_64-NetInstall-1511.iso > -P /tmp/ > # yum install ovirt-hosted-engine-setup > # yum install screen > # screen -RD > > ...in screen session : > > # hosted-engine --deploy > > ... > in configuration process I chose "fc" as storage type for oVirt hosted > engine vm and select 60GB LUN... > ... > > --== CONFIGURATION PREVIEW ==-- > > ... > Firewall manager : iptables > Gateway address : 10.1.0.1 > Host name for web application : KOM-AD01-OVIRT1 > Storage Domain type : fc > Host ID : 1 > LUN ID : > 360002ac0001bcec9 > Image size GB : 40 > Console type : vnc > Memory size MB : 4096 > MAC address : 00:16:3e:77:1d:07 > Boot type : cdrom > Number of CPUs : 2 > ISO image (cdrom boot/cloud-init) : > /tmp/CentOS-7-x86_64-NetInstall-1511.iso Can I ask why you prefer/need to manually create a VM installing from a CD instead of using the ready-to-use ovirt-engine-appliance? Using the appliance makes the setup process a lot shorted and more comfortable. > CPU Type : model_Penryn > ... > and get error after step "Verifying sanlock lockspace initialization" > ... > > [ INFO ] Verifying sanlock lockspace initialization > [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] > Network > is unreachable > [ INFO ] Stage: Clean up > [ INFO ] Generating answer file > > '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160722124133.conf' > [ INFO ] Stage: Pre-termination > [ INFO ] Stage: Termination > [ ERROR ] Hosted Engine deployment failed: this system is not reliable, > please check the issue, fix and redeploy > Log file is located at > >
[ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Hello oVirt guru`s !I have problem with initial deploy of ovirt 4.0 hosted engine.My environment :* Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected (with multipathd) to storage HP 3PAR 7200* On each server installed CentOS 7.2 Linux (3.10.0-327.22.2.el7.x86_64)* On 3PAR storage I created 2 LUNs for oVirt.- First LUN for oVirt Hosted Engine VM (60GB)- Second LUN for all other VMs (2TB)# multipath -ll3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VVsize=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:1:1 sdd 8:48 active ready running |- 3:0:0:1 sdf 8:80 active ready running |- 2:0:0:1 sdb 8:16 active ready running `- 3:0:1:1 sdh 8:112 active ready running3par-vv2 (360002ac00016cec9) dm-1 3PARdata,VVsize=2.0T features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:0:0 sda 8:0 active ready running |- 3:0:0:0 sde 8:64 active ready running |- 2:0:1:0 sdc 8:32 active ready running `- 3:0:1:0 sdg 8:96 active ready running My steps on first server (initial deploy of ovirt 4.0 hosted engine):# systemctl stop NetworkManager# systemctl disable NetworkManager# yum -y install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm# yum -y install epel-release# wget http://mirror.yandex.ru/centos/7/isos/x86_64/CentOS-7-x86_64-NetInstall-1511.iso -P /tmp/# yum install ovirt-hosted-engine-setup# yum install screen# screen -RD...in screen session :# hosted-engine --deploy...in configuration process I chose "fc" as storage type for oVirt hosted engine vm and select 60GB LUN..--== CONFIGURATION PREVIEW ==--... Firewall manager : iptables Gateway address : 10.1.0.1 Host name for web application : KOM-AD01-OVIRT1 Storage Domain type : fc Host ID : 1 LUN ID : 360002ac0001bcec9 Image size GB : 40 Console type : vnc Memory size MB : 4096 MAC address : 00:16:3e:77:1d:07 Boot type : cdrom Number of CPUs : 2 ISO image (cdrom boot/cloud-init) : /tmp/CentOS-7-x86_64-NetInstall-1511.iso CPU Type : model_Penryn...and get error after step "Verifying sanlock lockspace initialization"...[ INFO ] Verifying sanlock lockspace initialization[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable[ INFO ] Stage: Clean up[ INFO ] Generating answer file '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160722124133.conf'[ INFO ] Stage: Pre-termination[ INFO ] Stage: Termination[ ERROR ] Hosted Engine deployment failed: this system is not reliable, please check the issue, fix and redeploy Log file is located at /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160722123404-t26vw0.logInterestinglyIf I try to deploy hosted-engine v3.6, everything goes well in the same configuration !! :[ INFO ] Stage: Transaction setup[ INFO ] Stage: Misc configuration[ INFO ] Stage: Package installation[ INFO ] Stage: Misc configuration[ INFO ] Configuring libvirt[ INFO ] Configuring VDSM[ INFO ] Starting vdsmd[ INFO ] Waiting for VDSM hardware info[ INFO ] Configuring the management bridge[ INFO ] Creating Volume Group[ INFO ] Creating Storage Domain[ INFO ] Creating Storage Pool[ INFO ] Connecting Storage Pool[ INFO ] Verifying sanlock lockspace initialization[ INFO ] Creating Image for 'hosted-engine.lockspace' ...[ INFO ] Image for 'hosted-engine.lockspace' created successfully[ INFO ] Creating Image for 'hosted-engine.metadata' ...[ INFO ] Image for 'hosted-engine.metadata' created successfully[ INFO ] Creating VM Image[ INFO ] Destroying Storage Pool[ INFO ] Start monitoring domain[ INFO ] Configuring VM[ INFO ] Updating hosted-engine configuration[ INFO ] Stage: Transaction commit[ INFO ] Stage: Closing up[ INFO ] Creating VM You can now connect to the VM with the following command: /bin/remote-viewer vnc://localhost:5900...What could be the problem?___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Hello oVirt guru`s ! I have problem with initial deploy of ovirt 4.0 hosted engine. My environment :* Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected (with multipathd) to storage HP 3PAR 7200* On each server installed CentOS 7.2 Linux (3.10.0-327.22.2.el7.x86_64)* On 3PAR storage I created 2 LUNs for oVirt.- First LUN for oVirt Hosted Engine VM (60GB)- Second LUN for all other VMs (2TB) # multipath -ll 3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VVsize=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:1:1 sdd 8:48 active ready running |- 3:0:0:1 sdf 8:80 active ready running |- 2:0:0:1 sdb 8:16 active ready running `- 3:0:1:1 sdh 8:112 active ready running 3par-vv2 (360002ac00016cec9) dm-1 3PARdata,VVsize=2.0T features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:0:0 sda 8:0 active ready running |- 3:0:0:0 sde 8:64 active ready running |- 2:0:1:0 sdc 8:32 active ready running `- 3:0:1:0 sdg 8:96 active ready running My steps on first server (initial deploy of ovirt 4.0 hosted engine): # systemctl stop NetworkManager# systemctl disable NetworkManager# yum -y install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm# yum -y install epel-release# wget http://mirror.yandex.ru/centos/7/isos/x86_64/CentOS-7-x86_64-NetInstall-1511.iso -P /tmp/# yum install ovirt-hosted-engine-setup# yum install screen# screen -RD ...in screen session : # hosted-engine --deploy ...in configuration process I chose "fc" as storage type for oVirt hosted engine vm and select 60GB LUN.. --== CONFIGURATION PREVIEW ==-- ... Firewall manager : iptables Gateway address : 10.1.0.1 Host name for web application : KOM-AD01-OVIRT1 Storage Domain type : fc Host ID : 1 LUN ID : 360002ac0001bcec9 Image size GB : 40 Console type : vnc Memory size MB : 4096 MAC address : 00:16:3e:77:1d:07 Boot type : cdrom Number of CPUs : 2 ISO image (cdrom boot/cloud-init) : /tmp/CentOS-7-x86_64-NetInstall-1511.iso CPU Type : model_Penryn...and get error after step "Verifying sanlock lockspace initialization"... [ INFO ] Verifying sanlock lockspace initialization[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable[ INFO ] Stage: Clean up[ INFO ] Generating answer file '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160722124133.conf'[ INFO ] Stage: Pre-termination[ INFO ] Stage: Termination[ ERROR ] Hosted Engine deployment failed: this system is not reliable, please check the issue, fix and redeploy Log file is located at /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160722123404-t26vw0.log InterestinglyIf I try to deploy hosted-engine v3.6, everything goes well in the same configuration !! : [ INFO ] Stage: Transaction setup[ INFO ] Stage: Misc configuration[ INFO ] Stage: Package installation[ INFO ] Stage: Misc configuration[ INFO ] Configuring libvirt[ INFO ] Configuring VDSM[ INFO ] Starting vdsmd[ INFO ] Waiting for VDSM hardware info[ INFO ] Configuring the management bridge[ INFO ] Creating Volume Group[ INFO ] Creating Storage Domain[ INFO ] Creating Storage Pool[ INFO ] Connecting Storage Pool[ INFO ] Verifying sanlock lockspace initialization[ INFO ] Creating Image for 'hosted-engine.lockspace' ...[ INFO ] Image for 'hosted-engine.lockspace' created successfully[ INFO ] Creating Image for 'hosted-engine.metadata' ...[ INFO ] Image for 'hosted-engine.metadata' created successfully[ INFO ] Creating VM Image[ INFO ] Destroying Storage Pool[ INFO ] Start monitoring domain[ INFO ] Configuring VM[ INFO ] Updating hosted-engine configuration[ INFO ] Stage: Transaction commit[ INFO ] Stage: Closing up[ INFO ] Creating VM You can now connect to the VM with the following command: /bin/remote-viewer vnc://localhost:5900... What could be the problem?___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt 4 Hosted Engine deploy on fc storage - [ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable
Hello oVirt guru`s !I have problem with initial deploy of ovirt 4.0 hosted engine.My environment :* Two servers HP ProLiant DL 360 G5 with Qlogic FC HBA connected (with multipathd) to storage HP 3PAR 7200* On each server installed CentOS 7.2 Linux (3.10.0-327.22.2.el7.x86_64)* On 3PAR storage I created 2 LUNs for oVirt.- First LUN for oVirt Hosted Engine VM (60GB)- Second LUN for all other VMs (2TB)# multipath -ll3par-vv1 (360002ac0001bcec9) dm-0 3PARdata,VVsize=60G features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:1:1 sdd 8:48 active ready running |- 3:0:0:1 sdf 8:80 active ready running |- 2:0:0:1 sdb 8:16 active ready running `- 3:0:1:1 sdh 8:112 active ready running3par-vv2 (360002ac00016cec9) dm-1 3PARdata,VVsize=2.0T features='1 queue_if_no_path' hwhandler='1 alua' wp=rw`-+- policy='round-robin 0' prio=50 status=active |- 2:0:0:0 sda 8:0 active ready running |- 3:0:0:0 sde 8:64 active ready running |- 2:0:1:0 sdc 8:32 active ready running `- 3:0:1:0 sdg 8:96 active ready running My steps on first server (initial deploy of ovirt 4.0 hosted engine):# systemctl stop NetworkManager# systemctl disable NetworkManager# yum -y install http://resources.ovirt.org/pub/yum-repo/ovirt-release40.rpm# yum -y install epel-release# wget http://mirror.yandex.ru/centos/7/isos/x86_64/CentOS-7-x86_64-NetInstall-1511.iso -P /tmp/# yum install ovirt-hosted-engine-setup# yum install screen# screen -RD...in screen session :# hosted-engine --deploy...in configuration process I chose "fc" as storage type for oVirt hosted engine vm and select 60GB LUN..--== CONFIGURATION PREVIEW ==--... Firewall manager : iptables Gateway address : 10.1.0.1 Host name for web application : KOM-AD01-OVIRT1 Storage Domain type : fc Host ID : 1 LUN ID : 360002ac0001bcec9 Image size GB : 40 Console type : vnc Memory size MB : 4096 MAC address : 00:16:3e:77:1d:07 Boot type : cdrom Number of CPUs : 2 ISO image (cdrom boot/cloud-init) : /tmp/CentOS-7-x86_64-NetInstall-1511.iso CPU Type : model_Penryn...and get error after step "Verifying sanlock lockspace initialization"...[ INFO ] Verifying sanlock lockspace initialization[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 101] Network is unreachable[ INFO ] Stage: Clean up[ INFO ] Generating answer file '/var/lib/ovirt-hosted-engine-setup/answers/answers-20160722124133.conf'[ INFO ] Stage: Pre-termination[ INFO ] Stage: Termination[ ERROR ] Hosted Engine deployment failed: this system is not reliable, please check the issue, fix and redeploy Log file is located at /var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20160722123404-t26vw0.logInterestinglyIf I try to deploy hosted-engine v3.6, everything goes well in the same configuration !! :[ INFO ] Stage: Transaction setup[ INFO ] Stage: Misc configuration[ INFO ] Stage: Package installation[ INFO ] Stage: Misc configuration[ INFO ] Configuring libvirt[ INFO ] Configuring VDSM[ INFO ] Starting vdsmd[ INFO ] Waiting for VDSM hardware info[ INFO ] Configuring the management bridge[ INFO ] Creating Volume Group[ INFO ] Creating Storage Domain[ INFO ] Creating Storage Pool[ INFO ] Connecting Storage Pool[ INFO ] Verifying sanlock lockspace initialization[ INFO ] Creating Image for 'hosted-engine.lockspace' ...[ INFO ] Image for 'hosted-engine.lockspace' created successfully[ INFO ] Creating Image for 'hosted-engine.metadata' ...[ INFO ] Image for 'hosted-engine.metadata' created successfully[ INFO ] Creating VM Image[ INFO ] Destroying Storage Pool[ INFO ] Start monitoring domain[ INFO ] Configuring VM[ INFO ] Updating hosted-engine configuration[ INFO ] Stage: Transaction commit[ INFO ] Stage: Closing up[ INFO ] Creating VM You can now connect to the VM with the following command: /bin/remote-viewer vnc://localhost:5900...What could be the problem?___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users