[ovirt-users] useful workaround for catch-22 situation with nic drivers and Windows
Hello, I just wanted to post a nice workaround I came up with in case it helps anybody. The reason I needed it is that in oVirt 4.4, it appears I am unable to change the nic1 type when creating VMs (maybe that's a bug?) and I necessarily end up with the default nic1 type which needs a virtio driver in Windows which is obviously not present on a clean install. Also, since there is no networking, it can't be downloaded. I did think of mounting a USB stick via remote-viewer, but something is wonky there too - the USB device selection menu item is grayed out, and no, it's not permissions. So what i did was to create an .iso file with spice-guest-tools-latest.exe in it and copy the resulting iso file to the ISO domain. Then, I was easily able to attach the ISO to the Windows machine in question and install spice-guest-tools, which made the network adapter work. Quick snippet of how I created the .iso: $ find test test test/spice-guest-tools-latest.exe $ mkisofs -o spice-tools.iso test I: -input-charset not specified, using utf-8 (detected in locale settings) Total translation table size: 0 Total rockridge attributes bytes: 0 Total directory bytes: 116 Path table size(bytes): 10 Max brk space used 0 5124 extents written (10 MB) Hope it helps somebody :). Cheers! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/JR5MOF7FJ3UDVNR7R7ASNBWNNROI6HAX/
Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client
Hi Christophe, They share a part of their code-base, primarily in the native implementation. However, Opaque has a substantially reimplemented UI. They both live in the same repository, though, and the plan was to bring them closer together over time. I see aSPICE as analogous to spicy and Opaque as analogous to virt-viewer. Cheers, iordan On Thu, Jan 15, 2015 at 8:22 AM, Christophe Fergeau wrote: > On Mon, Jan 05, 2015 at 04:17:58PM +0100, Michal Skrivanek wrote: >> >> > Thank you, >> > Tomas >> > >> > - Original Message - >> >> From: "i iordanov" >> >> To: "users" , de...@ovirt.org >> >> Cc: "Sphoorti Joglekar" >> >> Sent: Thursday, December 25, 2014 11:19:58 PM >> >> Subject: Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client >> >> >> >> Hey guys, >> >> >> >> Thanks for remembering about Opaque. For those who are not familiar >> >> with the project, it is an oVirt/RHEV graphics console client which >> >> supports the SPICE protocol so far. It uses libgovirt to connect to >> >> the oVirt/RHEV API. I also created a separate pure SPICE client >> >> (called aSPICE) for Android based on libspice. >> >> >> >> It would be nice if I got more feedback from Red Hat developers, but >> >> you guys are probably as busy as I am :). The app is getting attention >> >> on Google Play and people are using it successfully for their >> >> installations, it seems. >> >> >> >> I have plans to add the following features to Opaque, time permitting: >> >> >> >> - Ability to edit default settings, so that people who connect with >> >> console.vv file will be able to configure Audio, keyboard layout, etc. >> >> - The ability to allocate VMs from a pool. >> >> - The ability to control Audio Playback and Recording separately. >> >> >> >> I don't think Opaque needs to get portal-management functionality. >> >> >> >> I was contacted by an intern working on movirt (Sphoorti Joglekar, >> >> cc-ed), asking whether I would be willing to support a URI Intent >> >> scheme that movirt can use to launch aSPICE. I think I already have a >> >> pretty well specified URI scheme that may work for the purpose, so >> >> we'll see how that goes. I am wondering whether it wouldn't be better >> >> to launch aSPICE or Opaque with a console.vv file instead, though. I >> >> guess the developers of movirt will have to consider both options. >> >> >> >> At any rate, Opaque is far from dead. I'm security supporting it, I >> >> just don't find a lot of time to work on additional features. >> >> >> >> I am cc-ing Brian Proffitt, because at one point we discussed setting >> >> up Opaque as a sub-project of oVirt. I don't know whether there is any >> >> interest for that in Red Hat, or any interest at all in supporting >> >> mobile clients for oVirt/RHEV, etc. It would be nice to hear an >> >> official stance on the topic. >> >> (adding Brian properly this time) >> >> I think it makes sense to add it together with something…though maybe >> more related to SPICE clients. So adding Christophe for his thoughts… > > Opaque seems to be more an oVirt client than a SPICE client, so I'd tend > to think it would be a better fit as an oVirt project. aSPICE would fit > well together with other SPICE repositories, dunno if these are the same > code base or not (?). > >> On Jan 5, 2015, at 13:38 , Tomas Jelinek wrote: >> > >> > One more question - does aSPICE support spice proxy? >> > > > libgovirt is not parsing the proxy information at this point, so answer > would be no. See > http://lists.freedesktop.org/archives/spice-devel/2014-December/018475.html > and its followup > http://lists.freedesktop.org/archives/spice-devel/2015-January/018609.html > > Christophe -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [ovirt-devel] [RFC] oVirt mobile client
Hey guys, Thanks for remembering about Opaque. For those who are not familiar with the project, it is an oVirt/RHEV graphics console client which supports the SPICE protocol so far. It uses libgovirt to connect to the oVirt/RHEV API. I also created a separate pure SPICE client (called aSPICE) for Android based on libspice. It would be nice if I got more feedback from Red Hat developers, but you guys are probably as busy as I am :). The app is getting attention on Google Play and people are using it successfully for their installations, it seems. I have plans to add the following features to Opaque, time permitting: - Ability to edit default settings, so that people who connect with console.vv file will be able to configure Audio, keyboard layout, etc. - The ability to allocate VMs from a pool. - The ability to control Audio Playback and Recording separately. I don't think Opaque needs to get portal-management functionality. I was contacted by an intern working on movirt (Sphoorti Joglekar, cc-ed), asking whether I would be willing to support a URI Intent scheme that movirt can use to launch aSPICE. I think I already have a pretty well specified URI scheme that may work for the purpose, so we'll see how that goes. I am wondering whether it wouldn't be better to launch aSPICE or Opaque with a console.vv file instead, though. I guess the developers of movirt will have to consider both options. At any rate, Opaque is far from dead. I'm security supporting it, I just don't find a lot of time to work on additional features. I am cc-ing Brian Proffitt, because at one point we discussed setting up Opaque as a sub-project of oVirt. I don't know whether there is any interest for that in Red Hat, or any interest at all in supporting mobile clients for oVirt/RHEV, etc. It would be nice to hear an official stance on the topic. Thanks! iordan On Tue, Nov 4, 2014 at 10:17 AM, David Jaša wrote: > The app in Google may be half year old but there is a movement in git > [1] and the author recently called for testing or comments on > spice-devel ML. > > David > > [1] > https://github.com/iiordanov/remote-desktop-clients/tree/master/eclipse_projects/Opaque > > > On Pá, 2014-10-31 at 07:56 +0100, Gianluca Cecchi wrote: >> On Fri, Oct 31, 2014 at 7:03 AM, Yair Zaslavsky >> wrote: >> >> >> - Original Message - >> > From: "Greg Sheremeta" >> > To: "users" , de...@ovirt.org >> > Sent: Friday, October 31, 2014 3:49:11 AM >> > Subject: [ovirt-devel] [RFC] oVirt mobile client >> > >> > Hi, >> > >> > The focus of our OPW internship program starting in December >> will be >> > mobile and/or lightweight engine clients -- hopefully >> integrating the >> > new ovirt.js project. >> >> +100 >> >> >> [snip] >> >> > >> > I see that there are some already existing mobile clients >> for oVirt. >> > I'm trying to grasp what we have and what the needs are. >> >> > >> > That's all I see on the first few pages of google. >> > >> >> >> There was also project from Iordanov about spice/oVirt support on >> android.. >> See: >> http://lists.ovirt.org/pipermail/users/2013-December/018434.html >> >> >> Some days ago it seems he go also support international keyboard >> layout support: >> >> " >> I finally got some time to back-port the international keyboard layout >> support from the Android Ovirt client Opaque into the SPICE client >> aSPICE >> " >> >> >> I made same preliminary tests at the end of 2013 but I was not able to >> connect to oVirt... >> I don't know actually how it went ahead... the Google channel seems >> stopped since February... >> >> >> Gianluca >> ___ >> Devel mailing list >> de...@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/devel > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hey, Just a quick update on this. The machine is really quiet and cool, and most importantly, oVirt works perfectly on it. Thanks again for all the input! iordan On Fri, Jun 6, 2014 at 12:03 PM, i iordanov wrote: > Hi Francesco, > > Thank you so much! I really appreciate it. I already ordered the parts > taking a small risk. Yes, this system promises to be so cool and > quiet, that I can practically use it as a pillow :). > > Cheers! > iordan > > On Fri, Jun 6, 2014 at 5:32 AM, Francesco Romani wrote: >> - Original Message - >>> From: "Doron Fediuck" >>> To: "i iordanov" >>> Cc: users@ovirt.org >>> Sent: Thursday, June 5, 2014 6:50:58 PM >>> Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >>> >>> >>> >>> - Original Message - >>> > From: "i iordanov" >>> > To: "Doron Fediuck" >>> > Cc: users@ovirt.org, "Yedidyah Bar David" , "Sandro >>> > Bonazzola" >>> > Sent: Thursday, June 5, 2014 7:46:24 PM >>> > Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >>> > >>> > Hi Doron, >>> > >>> > I haven't purchased the Kabini-based system. I hoping that I would be >>> > able to learn in advance whether an all-in-one installation of oVirt >>> > would work on it. Unfortunately, returning it would be a hassle and I >>> > would not get a full refund for it. If there is no way to discover in >>> > advance whether oVirt will work on the system, I can take a risk. Is >>> > an all-in-one oVirt installation known to work on any of the modern >>> > AMD offerings? >>> > >>> > Thanks! >>> > iordan >> >> Hi everyone, >> >> I'm playing with a new AMD Kabini host, to see how it behaves as very >> low-cost[1], >> low-consumption hypervisor host[2]. I'm still installing the node, so I don't >> have actual data yet. >> >> According to libvirt, the host present itself as Opteron_G3. >> >> Plese find attached the output from >> virsh (1.2.5) capabilities (caps.txt) >> lscpu (lscpu.txt) >> lspci (lspci.txt) >> >> >> +++ >> >> [1] You can get a CPU + mainboard with ~85 EURO or even less, and it will >> consume >> 25W fully loaded, much less when idle. The fan is close to inaudible. >> [2] I'll put together a document/wiki page with my findings and experience >> afterwards. >> >> -- >> Francesco Romani >> RedHat Engineering Virtualization R & D >> Phone: 8261328 >> IRC: fromani > > > > -- > The conscious mind has only one thread of execution. -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hi Francesco, Thank you so much! I really appreciate it. I already ordered the parts taking a small risk. Yes, this system promises to be so cool and quiet, that I can practically use it as a pillow :). Cheers! iordan On Fri, Jun 6, 2014 at 5:32 AM, Francesco Romani wrote: > - Original Message - >> From: "Doron Fediuck" >> To: "i iordanov" >> Cc: users@ovirt.org >> Sent: Thursday, June 5, 2014 6:50:58 PM >> Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >> >> >> >> - Original Message - >> > From: "i iordanov" >> > To: "Doron Fediuck" >> > Cc: users@ovirt.org, "Yedidyah Bar David" , "Sandro >> > Bonazzola" >> > Sent: Thursday, June 5, 2014 7:46:24 PM >> > Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >> > >> > Hi Doron, >> > >> > I haven't purchased the Kabini-based system. I hoping that I would be >> > able to learn in advance whether an all-in-one installation of oVirt >> > would work on it. Unfortunately, returning it would be a hassle and I >> > would not get a full refund for it. If there is no way to discover in >> > advance whether oVirt will work on the system, I can take a risk. Is >> > an all-in-one oVirt installation known to work on any of the modern >> > AMD offerings? >> > >> > Thanks! >> > iordan > > Hi everyone, > > I'm playing with a new AMD Kabini host, to see how it behaves as very > low-cost[1], > low-consumption hypervisor host[2]. I'm still installing the node, so I don't > have actual data yet. > > According to libvirt, the host present itself as Opteron_G3. > > Plese find attached the output from > virsh (1.2.5) capabilities (caps.txt) > lscpu (lscpu.txt) > lspci (lspci.txt) > > > +++ > > [1] You can get a CPU + mainboard with ~85 EURO or even less, and it will > consume > 25W fully loaded, much less when idle. The fan is close to inaudible. > [2] I'll put together a document/wiki page with my findings and experience > afterwards. > > -- > Francesco Romani > RedHat Engineering Virtualization R & D > Phone: 8261328 > IRC: fromani -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hi Doron, I haven't purchased the Kabini-based system. I hoping that I would be able to learn in advance whether an all-in-one installation of oVirt would work on it. Unfortunately, returning it would be a hassle and I would not get a full refund for it. If there is no way to discover in advance whether oVirt will work on the system, I can take a risk. Is an all-in-one oVirt installation known to work on any of the modern AMD offerings? Thanks! iordan On Wed, Jun 4, 2014 at 4:29 PM, Doron Fediuck wrote: > > > - Original Message ----- >> From: "i iordanov" >> To: "Doron Fediuck" >> Cc: users@ovirt.org >> Sent: Wednesday, June 4, 2014 1:26:03 AM >> Subject: Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >> >> Hi Doron, >> >> To justify the reason I'm asking my question. On this page: >> >> http://www.ovirt.org/Features/Self_Hosted_Engine >> >> I see references to a limited set of CPU types supported by some >> component of oVirt. For example, I find the following text alarming: >> >>The following CPU types are supported by this host: >>- model_Nehalem: Intel Nehalem Family >>- model_Penryn: Intel Penryn Family >>- model_Conroe: Intel Conroe Family >> >> >> Thanks! >> iordan >> >> On Tue, Jun 3, 2014 at 6:19 PM, i iordanov wrote: >> > Hi Doron, >> > >> > So there is no artificial check for supported CPUs in the oVirt engine >> > installer? >> > >> > Thanks! >> > iordan >> > >> > On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck wrote: >> >> >> >> >> >> - Original Message - >> >>> From: "i iordanov" >> >>> To: users@ovirt.org >> >>> Sent: Sunday, May 25, 2014 12:51:57 AM >> >>> Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >> >>> >> >>> Hey guys, >> >>> >> >>> I need a system to test oVirt and Opaque on, but I want it to be >> >>> super-low power and near-silent. Therefore I am thinking of grabbing >> >>> one of the new 25W AMD Kabini CPUs. Will oVirt work well on that >> >>> architecture? If not, what would you recommend? >> >>> >> >>> Many thanks! >> >>> iordan >> >>> >> >>> -- >> >>> The conscious mind has only one thread of execution. >> >>> ___ >> >>> Users mailing list >> >>> Users@ovirt.org >> >>> http://lists.ovirt.org/mailman/listinfo/users >> >>> >> >> >> >> Hey, >> >> oVirt works with libvirt and kvm. >> >> >> >> In order to know what is supported with kvm you can check: >> >> http://www.linux-kvm.org/page/Processor_support >> >> >> >> As for libvirt, they provide a wiki on troubleshooting it: >> >> http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation >> >> >> >> Hope that helps, >> >> Doron >> > >> > >> > >> > -- >> > The conscious mind has only one thread of execution. >> >> >> >> -- >> The conscious mind has only one thread of execution. >> > > Hi iordan, > The text you provided is based on the information we get from libvirt > with some restrictions we impose specifically on hosted engine to make > sure its VM can live-migrate from one host to the other. > > You can see more info here: > http://docs.fedoraproject.org/en-US/Fedora/18/html/Virtualization_Administration_Guide/ch15s13s03.html > > Can you provide the output of 'virsh capabilities' on your AMD Kabini? -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hi Doron, To justify the reason I'm asking my question. On this page: http://www.ovirt.org/Features/Self_Hosted_Engine I see references to a limited set of CPU types supported by some component of oVirt. For example, I find the following text alarming: The following CPU types are supported by this host: - model_Nehalem: Intel Nehalem Family - model_Penryn: Intel Penryn Family - model_Conroe: Intel Conroe Family Thanks! iordan On Tue, Jun 3, 2014 at 6:19 PM, i iordanov wrote: > Hi Doron, > > So there is no artificial check for supported CPUs in the oVirt engine > installer? > > Thanks! > iordan > > On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck wrote: >> >> >> - Original Message - >>> From: "i iordanov" >>> To: users@ovirt.org >>> Sent: Sunday, May 25, 2014 12:51:57 AM >>> Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >>> >>> Hey guys, >>> >>> I need a system to test oVirt and Opaque on, but I want it to be >>> super-low power and near-silent. Therefore I am thinking of grabbing >>> one of the new 25W AMD Kabini CPUs. Will oVirt work well on that >>> architecture? If not, what would you recommend? >>> >>> Many thanks! >>> iordan >>> >>> -- >>> The conscious mind has only one thread of execution. >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >> >> Hey, >> oVirt works with libvirt and kvm. >> >> In order to know what is supported with kvm you can check: >> http://www.linux-kvm.org/page/Processor_support >> >> As for libvirt, they provide a wiki on troubleshooting it: >> http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation >> >> Hope that helps, >> Doron > > > > -- > The conscious mind has only one thread of execution. -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hi Doron, So there is no artificial check for supported CPUs in the oVirt engine installer? Thanks! iordan On Sun, May 25, 2014 at 7:47 AM, Doron Fediuck wrote: > > > - Original Message - >> From: "i iordanov" >> To: users@ovirt.org >> Sent: Sunday, May 25, 2014 12:51:57 AM >> Subject: [ovirt-users] experience with AMD Kabini (Jaguar) CPUs >> >> Hey guys, >> >> I need a system to test oVirt and Opaque on, but I want it to be >> super-low power and near-silent. Therefore I am thinking of grabbing >> one of the new 25W AMD Kabini CPUs. Will oVirt work well on that >> architecture? If not, what would you recommend? >> >> Many thanks! >> iordan >> >> -- >> The conscious mind has only one thread of execution. >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> > > Hey, > oVirt works with libvirt and kvm. > > In order to know what is supported with kvm you can check: > http://www.linux-kvm.org/page/Processor_support > > As for libvirt, they provide a wiki on troubleshooting it: > http://wiki.libvirt.org/page/Libvirt_identifies_host_processor_as_a_different_model_from_the_hardware_documentation > > Hope that helps, > Doron -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] experience with AMD Kabini (Jaguar) CPUs
Hey guys, I need a system to test oVirt and Opaque on, but I want it to be super-low power and near-silent. Therefore I am thinking of grabbing one of the new 25W AMD Kabini CPUs. Will oVirt work well on that architecture? If not, what would you recommend? Many thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hey guys, Just in case you missed the update I posted to the Opaque Beta test community page (if you are using gmail it would have placed it in your "Social" inbox), I wanted to mention here as well that v1.2.2 of Opaque Beta can now record audio using the microphone of your device! Your feedback would be highly appreciated! Thanks, iordan On Sun, Jan 26, 2014 at 7:43 PM, i iordanov wrote: > Hi Nathanaël and everyone else interested in keyboard layouts other than > English, > > I really didn't like the idea of releasing Opaque into production supporting > only English (QWERTY), so I devised a method to get around a current SPICE > protocol limitation (only being able to transmit keyboard scan codes and not > unicode to the VM). It involves Opaque translating unicode characters > on-device according to a user-specified layout into a series of scan codes. > Currently English (QWERTY), German (QWERTZ), and French (AZERTY) are fully > supported including all AltGr and dead-key combinations. > > I encourage all users of the supported layouts to give them a thorough > beating and let me know of any issues. I'd also like to hear your opinions > on whether such a solution can and should make it to production. > > To use a layout other than English (default), long-tap on a connection to > edit it, then from the new drop-down select your desired layout. Once > connected to your VM, ensure that the chosen layout there matches the layout > you picked in the settings. For best results (i.e. for your Android keyboard > to offer you all the possible unicode choices that your layout can produce), > you should also use an Android keyboard that supports your language. The > layout on your phone is not at all important, because all I need from the > Android IME are unicode values, however, I must say that I find Hacker's > keyboard most flexible. > > One caviat is that in order to be able to obtain the true unicode value from > the IME, I've had to interpret ALT meta state as belonging to the KeyEvent > rather than something that should be passed on to the VM. The reason for > this is that on Android, some characters like the German "ß" appears as > ALT+s to me, and that's the only way to properly capture it. In fact, if you > type ALT+s manually, while using the German layout, you will get a "ß" on > the remote side. > > Hence, the Hacker's keyboard ALT cannot be used as an ALT. Thankfully, > though, there is a nice workaround. The on-screen ALT button is exempt from > such considerations and works just fine. > > Once the project gains a larger user-base, I expect that interested people > will be able to help me create their own keyboard layout map files. The > final format will be documented and the documentation will be available in > the source distribution. > > Everyone, thank you very much in advance for your input! > > Sincerely, > iordan > > > > > On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet > wrote: >> >> Le 06/12/2013 17:31, Nathanaël Blanchet a écrit : >> >> Hi, just tested it, it is an unexpected good idea! >> My ovirt server is ssl only, so it was a bit complicated to get >> /etc/pki/ovirt-engine/ca.pem. >> I think it could be great to add a browser to get the ca into the >> filesystem instead of searching it into the phone, virtual keyboard is not >> convinient to type long inputs. >> Then, opaque's keyboard regional layout gave me headache. It is default >> qwerty but I need french layout, and no option to change it in the app is >> available. So, I changed the android layout keyboard into qwerty, but at >> this time while the keyboard is physically qwerty, I get a "A" for "Q", so >> it is always inversed. Maybe I should change the spice server layout... >> So the idea is good but it is unusable with non US layout. >> >> Something else important : I only managed to login with admin@local and no >> external authentication (AD in my case) was possible since it is supported >> into the regular webadmin. >> >> Le 06/12/2013 17:11, i iordanov a écrit : >> >> Hi guys, >> >> Just a clarification that Opaque is a VM console client, not an >> infrastructure management client. >> >> Cheers! >> iordan >> >> >> On Thu, Dec 5, 2013 at 12:38 PM, i iordanov wrote: >>> >>> Hello, >>> >>> We invite any interested oVirt/RHEV developers and administrators to >>> beta-test Opaque, a new Android oVirt/RHEV client application. >>> >>> To opt in, please reply to this message with an email address associated >>> with a Go
[Users] VNC support in Opaque
Hi Sven, I would like to separate the discussion of features in Opaque from my question about the Wiki, so I'm sending a separate email regarding your question. > Does it support the novnc connection to the vm too, or just spice? > This would be _huge_ ! Do you mean supporting VMs which has VNC set as the console type? Then that is a planned feature, but I didn't know how to prioritize it. A very fast an capable Android VNC client (bVNC) is also part of my remote-desktop-clients repository, and I was planning to make use of it in order to give Opaque the capability. Do we have a consensus on how important such a feature would be? Can I hear from others too? Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Opaque project on wiki?
Hey guys, I was wondering if you're interested in featuring the Opaque project somewhere on the wiki? If so, where? It's now in production, and the source code (GPLv3) is released in my repository housing all my remote desktop client software here: https://github.com/iiordanov/remote-desktop-clients Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Opaque oVirt/RHEV/Proxmox client and source code released
Hello! Apologies for the cross-post. I've released Opaque into production on Google Play: https://play.google.com/store/apps/details?id=com.undatech.opaque and on Blackberry World for devices running Blackberry OS 10.2.1 or newer: http://appworld.blackberry.com/webstore/content/46004889 The source code is now part of the renamed (formerly bVNC) repository: https://github.com/iiordanov/remote-desktop-clients The old name of the repository links to the new one. I didn't think it's a good idea to keep calling it bVNC given that it already contains code to build 4 different remote desktop clients. If you are an oVirt or RHEV admin, please ensure that Opaque works in your environment before recommending it to your users. Please start by reading the KNOWN ISSUES section in the description of the application. Thanks for all the feedback I received from the beta test community! I will still be releasing new features to be beta-tested before pushing them to production. Sincerely, iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Nathanaël and everyone else interested in keyboard layouts other than English, I really didn't like the idea of releasing Opaque into production supporting only English (QWERTY), so I devised a method to get around a current SPICE protocol limitation (only being able to transmit keyboard scan codes and not unicode to the VM). It involves Opaque translating unicode characters on-device according to a user-specified layout into a series of scan codes. Currently English (QWERTY), German (QWERTZ), and French (AZERTY) are fully supported including all AltGr and dead-key combinations. I encourage all users of the supported layouts to give them a thorough beating and let me know of any issues. I'd also like to hear your opinions on whether such a solution can and should make it to production. To use a layout other than English (default), long-tap on a connection to edit it, then from the new drop-down select your desired layout. Once connected to your VM, ensure that the chosen layout there matches the layout you picked in the settings. For best results (i.e. for your Android keyboard to offer you all the possible unicode choices that your layout can produce), you should also use an Android keyboard that supports your language. The layout on your phone is not at all important, because all I need from the Android IME are unicode values, however, I must say that I find Hacker's keyboard most flexible. One caviat is that in order to be able to obtain the true unicode value from the IME, I've had to interpret ALT meta state as belonging to the KeyEvent rather than something that should be passed on to the VM. The reason for this is that on Android, some characters like the German "ß" appears as ALT+s to me, and that's the only way to properly capture it. In fact, if you type ALT+s manually, while using the German layout, you will get a "ß" on the remote side. Hence, the Hacker's keyboard ALT cannot be used as an ALT. Thankfully, though, there is a nice workaround. The on-screen ALT button is exempt from such considerations and works just fine. Once the project gains a larger user-base, I expect that interested people will be able to help me create their own keyboard layout map files. The final format will be documented and the documentation will be available in the source distribution. Everyone, thank you very much in advance for your input! Sincerely, iordan On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet wrote: > Le 06/12/2013 17:31, Nathanaël Blanchet a écrit : > > Hi, just tested it, it is an unexpected good idea! > My ovirt server is ssl only, so it was a bit complicated to get > /etc/pki/ovirt-engine/ca.pem. > I think it could be great to add a browser to get the ca into the > filesystem instead of searching it into the phone, virtual keyboard is not > convinient to type long inputs. > Then, opaque's keyboard regional layout gave me headache. It is default > qwerty but I need french layout, and no option to change it in the app is > available. So, I changed the android layout keyboard into qwerty, but at > this time while the keyboard is physically qwerty, I get a "A" for "Q", so > it is always inversed. Maybe I should change the spice server layout... > So the idea is good but it is unusable with non US layout. > > Something else important : I only managed to login with admin@local and > no external authentication (AD in my case) was possible since it is > supported into the regular webadmin. > > Le 06/12/2013 17:11, i iordanov a écrit : > > Hi guys, > > Just a clarification that Opaque is a VM console client, not an > infrastructure management client. > > Cheers! > iordan > > > On Thu, Dec 5, 2013 at 12:38 PM, i iordanov wrote: > >> Hello, >> >> We invite any interested oVirt/RHEV developers and administrators to >> beta-test Opaque, a new Android oVirt/RHEV client application. >> >> To opt in, please reply to this message with an email address associated >> with a Google Account, because joining the beta-test group is based on >> membership to a Google Plus community. If you don't want that email address >> posted to the mailing list, don't include it in your reply! >> >> Itamar or I will add you to the community and let you know that you can >> proceed to the following two steps: >> >> 1) Please visit this page here to accept the invitation: >> https://plus.google.com/communities/116099119712127782216 >> >> 2) Once you've become a member of the Google+ group, to opt-in, visit: >> https://play.google.com/apps/testing/com.undatech.opaquebeta >> >> You will be able to download Opaque from Google Play by following the >> link at the bottom of the opt-in page. >>
Re: [Users] connecting to oVirt/RHEV VMs through proxy and the oVirt API
Hi Juan, On Fri, Jan 17, 2014 at 4:55 AM, Juan Hernandez wrote: > You are right. Obtaining the global proxy setting is currently > impossible in the API. There is no bug requesting it, as far as I know. > Can you open a new one? > Here is the bug report for future reference: https://bugzilla.redhat.com/show_bug.cgi?id=1054948 Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] connecting to oVirt/RHEV VMs through proxy and the oVirt API
Hello, My apologies for cross-posting, but this discussion concerns both mailing lists, I think. In Opaque, I recently started setting the proxy property of SpiceSession from a console file, as is done in remote-viewer, in order to support installations where the nodes are not "visible" from the point of view of the client. However, then I remembered that I have not seen the proxy property being available through the oVirt/RHEV API. I looked at the latest remote-viewer code, and I looked through the oVirt/RHEV API documentation, and indeed, I see no way to get proxy information other than through the console.vv file. If I am correct, then this means that both Opaque and remote-viewer cannot connect to VMs behind a proxy unless a console.vv file is used, which also means that since console.vv files are unobtainable through the User Portal on mobile devices, mobile devices effectively cannot at all connect to such VMs if the user is not an Administrator. Would it be possible to expose the proxy parameter through the API? I couldn't find a bug opened about this, but it doesn't mean it isn't there :). Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Marian, I'm cc-ing the list because I think this may be valuable information for other people trying this on Android 2.3 devices. On Tue, Dec 17, 2013 at 2:54 PM, Marian Krcmarik wrote: > I was fighting with RHEVM3.2/3.3 User/Admin Portal and vv files on Android > and I must admit I am defeated. > Firefox constantly crashes when trying to access console (by clicking on > Console button), once It even rebooted my Android phone. > Firefox works for me on my 4.3 and now upgraded 4.4 Nexus 4. > UC Browser and Opera Mini crashes when trying to open User/Admin portal > page. > Opera Mobile does not do anything when clicking on Console button but at > least does not crash. > I haven't tried Opera Mini, but UC Browser works for me on my device. > So I gave up, maybe It's because of my Android 2 phone. > It may very well be Android 2.3 causing all this trouble. Alternatively, your phone may not have enough RAM to run these browsers. At any rate, I'd say the bottom line is that the console.vv route will not work for Android 2.3 devices unless we can figure out a browser that works well enough. > > What browser did you use for accessing console? > To summarize, I've successfully obtained console.vv through Chrome, Firefox, and UCBrowser. The Admin console is not rendered well in any of those browsers, whereas the User console seems to be rendered well enough in any of them. For the User portal to be useful, however, we need to work around the double-click requirement first. For reference, the issue is reported here: https://bugzilla.redhat.com/show_bug.cgi?id=1043559 Cheers! iordan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] feature request - support getting console.vv with a single click
Hi Michal, Thanks for fixing the product information on the bug-report. I see that single-click is used to select a VM to show details on the right at the moment, so I understand your reluctance to change the default behavior. That said, I think having users look for the console icon in the right pane may generate a lot of questions. Here are some suggestions for you to consider: 1) What about adding an icon (somewhat separated to reduce the likelihood of mis-taps) to the bottom row of icons where Run/Shutdown/Suspend are? This is not ideal, but if we put it all the way on the left where the "Run" button is, the danger is minimal. 2) What do you think about changing the "Run" icon to an "Attach to console" icon once the machine is up instead of graying it out? 3) Another possibility is dedicating one corner of the entire icon (e.g. top right) for the purpose. This way, users can still single-click/tap near the middle to see details and use the top right to get console.vv. On a device with a small screen and touch interface, ideally one should be able to easily tap a (relatively) big icon for any functionality. Therefore, apart from these suggestions, I think that making all existing icons a bit bigger would make it easier for a users to tap on a mobile device with a small screen. What do you think? Hopefully one or more of these ideas will work for you! Thanks, iordan On Tue, Dec 17, 2013 at 11:27 AM, Michal Skrivanek wrote: > > > On 16 Dec 2013, at 17:13, i iordanov wrote: > > Hi Itamar, > > On Mon, Dec 16, 2013 at 3:18 AM, Itamar Heim wrote: > >> I'd say yes, and suggest you open a bug to track this. > > > I've done what you suggested. > > https://bugzilla.redhat.com/show_bug.cgi?id=1043559 > > > Corected the product. Note it is "oVirt" > > I also wonder if having a new link on right hand side would be enough. I > wouldn't want to change the default behavior on the vm icon... > > Thanks, > michal > > > Thanks! > iordan > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] feature request - support getting console.vv with a single click
Hi Itamar, On Mon, Dec 16, 2013 at 3:18 AM, Itamar Heim wrote: > I'd say yes, and suggest you open a bug to track this. I've done what you suggested. https://bugzilla.redhat.com/show_bug.cgi?id=1043559 Thanks! iordan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Jorick, On Thu, Dec 12, 2013 at 6:10 PM, Jorick Astrego wrote: > Not trying to start a flame war or something on this list, just curious > about the reasoning > Why only Google+? We would love to test it but I refuse to get a Google > account due to privacy and other civil liberty issues. > There's no risk of starting a flame war with me. I understand your point of view completely and sympathize. For any other people reading who would like to avoid Google+, there is now also a Google group that I can invite you to (which I don't think requires Google+ membership). So if that works for you or anybody else, I would be more than happy to invite you. So let me refresh my invitation to the beta test now and say that Google+ membership is no longer required. If there are any questions why this is on Google Play, I can justify that as well. Cheers! iordan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Jiri, On Thu, Dec 12, 2013 at 5:17 PM, Jiří Sléžka wrote: > Yes, I hate these situations :-) I think I can give you an access to this > testing oVirt but it is accessible only through our openvpn. If you are > interested let me know. > Yes, I'm interested in testing! Please let me know how I can get access. It really sounds like the SPICE client part of Opaque isn't happy about SSL for some reason. Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hello! Anybody who has problems accessing the graphical console of a VM and would not mind creating an unprivileged user with access to an unimportant VM, I would be able to try reproducing the issue on my device as well. Please let me know and send me credentials and server address if possible. Thanks! iordan On Wed, Dec 11, 2013 at 3:36 PM, i iordanov wrote: > Also, can you please also try connecting to your VM by logging in with > admin@internal with a mobile browser (Firefox works), selecting a VM and > tapping the green console icon to get a console.vv? > > The newest version of Opaque Beta supports .vv files. > > Thanks! > iordan > > > On Wed, Dec 11, 2013 at 3:34 PM, i iordanov wrote: > >> Hi Jiri, >> >> Thanks for the feedback. The thumbnails become 1/2 the size once you add >> 3 or more VMs to the list of saved connections. >> >> Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or >> at least the ability to launch an external app. >> >> Please tell us what version of oVirt /RHEV you are using, whether your >> certificate is self-signed, and whether you've used remote-viewer on the >> command-line successfully and what options and URI it needed. >> >> I have a couple of users complaining of similar issues, and a couple plus >> myself who've had no issues. I'm trying to figure out what is common >> between the users who have problems. >> >> Thanks! >> iordan >> >> >> >> On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka wrote: >> >>> Hi iordan, >>> >>> >>> >>> On 10.12.2013 17:16, i iordanov wrote: >>> >>>> Hey guys, >>>> >>>> Any feedback so far? >>>> >>> >>> first, I was surprised I cannot see any vms but it is more problem how >>> oVirt handle rights. Although I had "SuperUser" rights I was not explicitly >>> listed in my vm's permissions list. Also I had assign any of user roles not >>> an admin one. >>> >>> secondly, I cannot connect because "Connection failure. Please check >>> server address and network connectivity". I am trying to connect from same >>> network where spice firefox plugin works fine. I hope Opaque is a spice >>> client, right? :-) >>> >>> btw, I am using Nexus7 (Android 4.4.2) and It would be better to use >>> kind of list of vms instead of big thumbnails because user (like I :-) can >>> have no idea it is actually a list because he/she can see only big (nearly >>> two screens high) blue rectangle with text "No Screenshot available yet" :-) >>> >>> >>> But screenshots looks promising, I am going to write more feedbacks when >>> I connect to some vm :-) >>> >>> >>> Cheers, dron >>> >>> >>> >>>> Thanks, >>>> iordan >>>> >>>> >>>> On Thu, Dec 5, 2013 at 12:38 PM, i iordanov >>> <mailto:iiorda...@gmail.com>> wrote: >>>> >>>> Hello, >>>> >>>> We invite any interested oVirt/RHEV developers and administrators to >>>> beta-test Opaque, a new Android oVirt/RHEV client application. >>>> >>>> To opt in, please reply to this message with an email address >>>> associated with a Google Account, because joining the beta-test >>>> group is based on membership to a Google Plus community. If you >>>> don't want that email address posted to the mailing list, don't >>>> include it in your reply! >>>> >>>> Itamar or I will add you to the community and let you know that you >>>> can proceed to the following two steps: >>>> >>>> 1) Please visit this page here to accept the invitation: >>>> https://plus.google.com/communities/116099119712127782216 >>>> >>>> 2) Once you've become a member of the Google+ group, to opt-in, >>>> visit: >>>> https://play.google.com/apps/testing/com.undatech.opaquebeta >>>> >>>> You will be able to download Opaque from Google Play by following >>>> the link at the bottom of the opt-in page. >>>> >>>> Please share your experiences with Opaque to the mailing list! >>>> >>>> Cheers, >>>> iordan >>>> >>>> -- >>>> The conscious mind has only one thread of execution. >>>> >>>> >>>> >>>> >>>> -- >>>> The conscious mind has only one thread of execution. >>>> >>>> >>>> ___ >>>> Users mailing list >>>> Users@ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users >>>> >>>> >>> >>> >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> >> >> -- >> The conscious mind has only one thread of execution. >> > > > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Also, can you please also try connecting to your VM by logging in with admin@internal with a mobile browser (Firefox works), selecting a VM and tapping the green console icon to get a console.vv? The newest version of Opaque Beta supports .vv files. Thanks! iordan On Wed, Dec 11, 2013 at 3:34 PM, i iordanov wrote: > Hi Jiri, > > Thanks for the feedback. The thumbnails become 1/2 the size once you add 3 > or more VMs to the list of saved connections. > > Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or > at least the ability to launch an external app. > > Please tell us what version of oVirt /RHEV you are using, whether your > certificate is self-signed, and whether you've used remote-viewer on the > command-line successfully and what options and URI it needed. > > I have a couple of users complaining of similar issues, and a couple plus > myself who've had no issues. I'm trying to figure out what is common > between the users who have problems. > > Thanks! > iordan > > > > On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka wrote: > >> Hi iordan, >> >> >> >> On 10.12.2013 17:16, i iordanov wrote: >> >>> Hey guys, >>> >>> Any feedback so far? >>> >> >> first, I was surprised I cannot see any vms but it is more problem how >> oVirt handle rights. Although I had "SuperUser" rights I was not explicitly >> listed in my vm's permissions list. Also I had assign any of user roles not >> an admin one. >> >> secondly, I cannot connect because "Connection failure. Please check >> server address and network connectivity". I am trying to connect from same >> network where spice firefox plugin works fine. I hope Opaque is a spice >> client, right? :-) >> >> btw, I am using Nexus7 (Android 4.4.2) and It would be better to use kind >> of list of vms instead of big thumbnails because user (like I :-) can have >> no idea it is actually a list because he/she can see only big (nearly two >> screens high) blue rectangle with text "No Screenshot available yet" :-) >> >> >> But screenshots looks promising, I am going to write more feedbacks when >> I connect to some vm :-) >> >> >> Cheers, dron >> >> >> >>> Thanks, >>> iordan >>> >>> >>> On Thu, Dec 5, 2013 at 12:38 PM, i iordanov >> <mailto:iiorda...@gmail.com>> wrote: >>> >>> Hello, >>> >>> We invite any interested oVirt/RHEV developers and administrators to >>> beta-test Opaque, a new Android oVirt/RHEV client application. >>> >>> To opt in, please reply to this message with an email address >>> associated with a Google Account, because joining the beta-test >>> group is based on membership to a Google Plus community. If you >>> don't want that email address posted to the mailing list, don't >>> include it in your reply! >>> >>> Itamar or I will add you to the community and let you know that you >>> can proceed to the following two steps: >>> >>> 1) Please visit this page here to accept the invitation: >>> https://plus.google.com/communities/116099119712127782216 >>> >>> 2) Once you've become a member of the Google+ group, to opt-in, >>> visit: >>> https://play.google.com/apps/testing/com.undatech.opaquebeta >>> >>> You will be able to download Opaque from Google Play by following >>> the link at the bottom of the opt-in page. >>> >>> Please share your experiences with Opaque to the mailing list! >>> >>> Cheers, >>> iordan >>> >>> -- >>> The conscious mind has only one thread of execution. >>> >>> >>> >>> >>> -- >>> The conscious mind has only one thread of execution. >>> >>> >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> > > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Jiri, Thanks for the feedback. The thumbnails become 1/2 the size once you add 3 or more VMs to the list of saved connections. Yes, Opaque is a SPICE client, and I am also hoping to add VNC support or at least the ability to launch an external app. Please tell us what version of oVirt /RHEV you are using, whether your certificate is self-signed, and whether you've used remote-viewer on the command-line successfully and what options and URI it needed. I have a couple of users complaining of similar issues, and a couple plus myself who've had no issues. I'm trying to figure out what is common between the users who have problems. Thanks! iordan On Wed, Dec 11, 2013 at 3:09 PM, Jiří Sléžka wrote: > Hi iordan, > > > > On 10.12.2013 17:16, i iordanov wrote: > >> Hey guys, >> >> Any feedback so far? >> > > first, I was surprised I cannot see any vms but it is more problem how > oVirt handle rights. Although I had "SuperUser" rights I was not explicitly > listed in my vm's permissions list. Also I had assign any of user roles not > an admin one. > > secondly, I cannot connect because "Connection failure. Please check > server address and network connectivity". I am trying to connect from same > network where spice firefox plugin works fine. I hope Opaque is a spice > client, right? :-) > > btw, I am using Nexus7 (Android 4.4.2) and It would be better to use kind > of list of vms instead of big thumbnails because user (like I :-) can have > no idea it is actually a list because he/she can see only big (nearly two > screens high) blue rectangle with text "No Screenshot available yet" :-) > > > But screenshots looks promising, I am going to write more feedbacks when I > connect to some vm :-) > > > Cheers, dron > > > >> Thanks, >> iordan >> >> >> On Thu, Dec 5, 2013 at 12:38 PM, i iordanov > <mailto:iiorda...@gmail.com>> wrote: >> >> Hello, >> >> We invite any interested oVirt/RHEV developers and administrators to >> beta-test Opaque, a new Android oVirt/RHEV client application. >> >> To opt in, please reply to this message with an email address >> associated with a Google Account, because joining the beta-test >> group is based on membership to a Google Plus community. If you >> don't want that email address posted to the mailing list, don't >> include it in your reply! >> >> Itamar or I will add you to the community and let you know that you >> can proceed to the following two steps: >> >> 1) Please visit this page here to accept the invitation: >> https://plus.google.com/communities/116099119712127782216 >> >> 2) Once you've become a member of the Google+ group, to opt-in, visit: >> https://play.google.com/apps/testing/com.undatech.opaquebeta >> >> You will be able to download Opaque from Google Play by following >> the link at the bottom of the opt-in page. >> >> Please share your experiences with Opaque to the mailing list! >> >> Cheers, >> iordan >> >> -- >> The conscious mind has only one thread of execution. >> >> >> >> >> -- >> The conscious mind has only one thread of execution. >> >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] feature request - support getting console.vv with a single click
Hey, I did some more research, and I can definitely say that at least from all the discussions I've read, no Android browser is capable of sending a double-click to a web-site. Is there an interest in supporting the mobile browser use-case in the User Portal? Thanks! iordan On Tue, Dec 10, 2013 at 4:43 PM, i iordanov wrote: > Hi guys, > > Mobile browsers usually reserve the double-tap functionality for zooming > in/out. It's therefore difficult/impossible to obtain a console.vv file > from the user-mode web interface on a mobile device. > > Would you consider adding functionality to connect to the console without > a double-click? > > Thanks! > iordan > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
I think 13 people from this list so far. Would you like me to invite you too? Cheers! iordan On Wed, Dec 11, 2013 at 8:44 AM, Dave Neary wrote: > Hi Iordan, > > Looks interesting! Sorry, I missed this the first time around. > > Have you had a lot of people sign up for it? > > Cheers, > Dave. > > On 12/10/2013 05:16 PM, i iordanov wrote: > > Hey guys, > > > > Any feedback so far? > > > > Thanks, > > iordan > > > > > > On Thu, Dec 5, 2013 at 12:38 PM, i iordanov > <mailto:iiorda...@gmail.com>> wrote: > > > > Hello, > > > > We invite any interested oVirt/RHEV developers and administrators to > > beta-test Opaque, a new Android oVirt/RHEV client application. > > > > To opt in, please reply to this message with an email address > > associated with a Google Account, because joining the beta-test > > group is based on membership to a Google Plus community. If you > > don't want that email address posted to the mailing list, don't > > include it in your reply! > > > > Itamar or I will add you to the community and let you know that you > > can proceed to the following two steps: > > > > 1) Please visit this page here to accept the invitation: > > https://plus.google.com/communities/116099119712127782216 > > > > 2) Once you've become a member of the Google+ group, to opt-in, > visit: > > https://play.google.com/apps/testing/com.undatech.opaquebeta > > > > You will be able to download Opaque from Google Play by following > > the link at the bottom of the opt-in page. > > > > Please share your experiences with Opaque to the mailing list! > > > > Cheers, > > iordan > > > > -- > > The conscious mind has only one thread of execution. > > > > > > > > > > -- > > The conscious mind has only one thread of execution. > > > > > > ___ > > Users mailing list > > Users@ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > > > -- > Dave Neary, Lyon, France > Email: dne...@gnome.org / Jabber: nea...@gmail.com > Ph: +33 950 71 55 62 / Cell: +33 6 77 01 92 13 > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] feature request - support getting console.vv with a single click
Hi guys, Mobile browsers usually reserve the double-tap functionality for zooming in/out. It's therefore difficult/impossible to obtain a console.vv file from the user-mode web interface on a mobile device. Would you consider adding functionality to connect to the console without a double-click? Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hey guys, Any feedback so far? Thanks, iordan On Thu, Dec 5, 2013 at 12:38 PM, i iordanov wrote: > Hello, > > We invite any interested oVirt/RHEV developers and administrators to > beta-test Opaque, a new Android oVirt/RHEV client application. > > To opt in, please reply to this message with an email address associated > with a Google Account, because joining the beta-test group is based on > membership to a Google Plus community. If you don't want that email address > posted to the mailing list, don't include it in your reply! > > Itamar or I will add you to the community and let you know that you can > proceed to the following two steps: > > 1) Please visit this page here to accept the invitation: > https://plus.google.com/communities/116099119712127782216 > > 2) Once you've become a member of the Google+ group, to opt-in, visit: > https://play.google.com/apps/testing/com.undatech.opaquebeta > > You will be able to download Opaque from Google Play by following the link > at the bottom of the opt-in page. > > Please share your experiences with Opaque to the mailing list! > > Cheers, > iordan > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi Nathanael, Supporting non-US keyboard layouts will only be convenient and good if libspice supported a separate channel for sending unicode characters over to the vdagent of the guest. The reason is that mobile devices generally do not generate scan codes with soft-input keyboards, and I basically resort to mapping characters to scancodes which is non-optimal. As far as the other question you have, my setup is a FreeIPA server with a bunch of users on it, which has been added to oVirt. I'm able to authenticate with both admin@internal and all of the users in LDAP. You must enter user@domain, and not just user for the authentication to work, however. If this still doesn't help you, can you tell me what difference do you think it makes for the client whether oVirt is authenticating against AD or FreeIPA? Cheers! iordan On Fri, Dec 6, 2013 at 11:47 AM, Nathanaël Blanchet wrote: > Le 06/12/2013 17:31, Nathanaël Blanchet a écrit : > > Hi, just tested it, it is an unexpected good idea! > My ovirt server is ssl only, so it was a bit complicated to get > /etc/pki/ovirt-engine/ca.pem. > I think it could be great to add a browser to get the ca into the > filesystem instead of searching it into the phone, virtual keyboard is not > convinient to type long inputs. > Then, opaque's keyboard regional layout gave me headache. It is default > qwerty but I need french layout, and no option to change it in the app is > available. So, I changed the android layout keyboard into qwerty, but at > this time while the keyboard is physically qwerty, I get a "A" for "Q", so > it is always inversed. Maybe I should change the spice server layout... > So the idea is good but it is unusable with non US layout. > > Something else important : I only managed to login with admin@local and > no external authentication (AD in my case) was possible since it is > supported into the regular webadmin. > > Le 06/12/2013 17:11, i iordanov a écrit : > > Hi guys, > > Just a clarification that Opaque is a VM console client, not an > infrastructure management client. > > Cheers! > iordan > > > On Thu, Dec 5, 2013 at 12:38 PM, i iordanov wrote: > >> Hello, >> >> We invite any interested oVirt/RHEV developers and administrators to >> beta-test Opaque, a new Android oVirt/RHEV client application. >> >> To opt in, please reply to this message with an email address associated >> with a Google Account, because joining the beta-test group is based on >> membership to a Google Plus community. If you don't want that email address >> posted to the mailing list, don't include it in your reply! >> >> Itamar or I will add you to the community and let you know that you can >> proceed to the following two steps: >> >> 1) Please visit this page here to accept the invitation: >> https://plus.google.com/communities/116099119712127782216 >> >> 2) Once you've become a member of the Google+ group, to opt-in, visit: >> https://play.google.com/apps/testing/com.undatech.opaquebeta >> >> You will be able to download Opaque from Google Play by following the >> link at the bottom of the opt-in page. >> >> Please share your experiences with Opaque to the mailing list! >> >> Cheers, >> iordan >> >> -- >> The conscious mind has only one thread of execution. >> > > > > -- > The conscious mind has only one thread of execution. > > > ___ > Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users > > > -- > Nathanaël Blanchet > > Supervision réseau > Pôle exploitation et maintenance > Département des systèmes d'information > 227 avenue Professeur-Jean-Louis-Viala > 34193 MONTPELLIER CEDEX 5 > Tél. 33 (0)4 67 54 84 55 > Fax 33 (0)4 67 54 84 14blanc...@abes.fr > > > > ___ > Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users > > > -- > Nathanaël Blanchet > > Supervision réseau > Pôle exploitation et maintenance > Département des systèmes d'information > 227 avenue Professeur-Jean-Louis-Viala > 34193 MONTPELLIER CEDEX 5 > Tél. 33 (0)4 67 54 84 55 > Fax 33 (0)4 67 54 84 14blanc...@abes.fr > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hi guys, Just a clarification that Opaque is a VM console client, not an infrastructure management client. Cheers! iordan On Thu, Dec 5, 2013 at 12:38 PM, i iordanov wrote: > Hello, > > We invite any interested oVirt/RHEV developers and administrators to > beta-test Opaque, a new Android oVirt/RHEV client application. > > To opt in, please reply to this message with an email address associated > with a Google Account, because joining the beta-test group is based on > membership to a Google Plus community. If you don't want that email address > posted to the mailing list, don't include it in your reply! > > Itamar or I will add you to the community and let you know that you can > proceed to the following two steps: > > 1) Please visit this page here to accept the invitation: > https://plus.google.com/communities/116099119712127782216 > > 2) Once you've become a member of the Google+ group, to opt-in, visit: > https://play.google.com/apps/testing/com.undatech.opaquebeta > > You will be able to download Opaque from Google Play by following the link > at the bottom of the opt-in page. > > Please share your experiences with Opaque to the mailing list! > > Cheers, > iordan > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] oVirt/RHEV Android client (Opaque) available for beta testing
Hello, We invite any interested oVirt/RHEV developers and administrators to beta-test Opaque, a new Android oVirt/RHEV client application. To opt in, please reply to this message with an email address associated with a Google Account, because joining the beta-test group is based on membership to a Google Plus community. If you don't want that email address posted to the mailing list, don't include it in your reply! Itamar or I will add you to the community and let you know that you can proceed to the following two steps: 1) Please visit this page here to accept the invitation: https://plus.google.com/communities/116099119712127782216 2) Once you've become a member of the Google+ group, to opt-in, visit: https://play.google.com/apps/testing/com.undatech.opaquebeta You will be able to download Opaque from Google Play by following the link at the bottom of the opt-in page. Please share your experiences with Opaque to the mailing list! Cheers, iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] crafting a POST request to the oVirt API manually
Thank you all! The information you've provided will help immensely! Cheers, iordan On Wed, Dec 4, 2013 at 11:47 AM, Douglas Schilling Landgraf < dougsl...@redhat.com> wrote: > On 12/04/2013 08:28 AM, Sven Kieske wrote: > >> Hi, >> >> a first starting point can be: http://www.ovirt.org/Api >> >> HTH >> >> PS: RedHat has also an extensive PDF, RHEV 3.2 DeveloperGuide >> >> > Some rest examples: > https://github.com/dougsland/ovirt-restapi-scripts/wiki > > POST: > https://github.com/dougsland/ovirt-restapi-scripts/blob/ > master/vm_shutdown.py > > > Am 03.12.2013 22:50, schrieb i iordanov: >> >>> Hello, >>> >>> Can somebody give me some pointers on how to craft POST requests to the >>> API >>> "by hand" with (for example) a Firefox plugin like Poster: >>> >>> https://addons.mozilla.org/en-US/firefox/addon/poster/ >>> >>> It would be very helpful for libgovirt development. >>> >>> Thanks! >>> iordan >>> >>> >>> >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> > > -- > Cheers > Douglas > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] crafting a POST request to the oVirt API manually
Hello, Can somebody give me some pointers on how to craft POST requests to the API "by hand" with (for example) a Firefox plugin like Poster: https://addons.mozilla.org/en-US/firefox/addon/poster/ It would be very helpful for libgovirt development. Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Free IPA + oVirt setup fails
Hi Itamar, On Sun, Nov 24, 2013 at 10:41 AM, Itamar Heim wrote: > > You probably added the user role to the user from the users tab, rather > than just adding at vm level . You don't need to add the user first. > This was the misunderstanding that I had. I thought I have to add the users in the Users tab first. When adding to individual VMs, the user gains access to just the VM in question. Thanks to both you and Juan! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Free IPA + oVirt setup fails
Hi Juan, Thanks for your suggestions! On Sun, Nov 24, 2013 at 5:36 AM, Juan Hernandez wrote: > Here you are experiencing two security features of the engine. The first > one is the multiple level administration (a.k.a. MLA). The engine > organizes objets in hierarchy: a set of data centers, then inside each > data center a set of clusters, and inside each cluster a set of virtual > machines. When you assign a permission to a user or group you in fact > assign it to one of these objects, and objects deeper in the tree > inherit them. So if you assign the "create vm" permission to user A and > the default data center, then that user will have permission to create > VMs on any cluster of that data center. I guess that the two users that > you initially created had the permission on the default data center or > the default cluster, so they have the permissions apply to all the VMs. > Try to go to the data center or cluster tabs and see if the users have > permissions there, then remove them as needed. > When I looked at the Data Centers and Clusters tabs and examined the permissions given to the users, UserA and UserB have UserRole permissions granted on both the default data center and the default cluster. Moreover, I am unable to remove them, as the "Remove" selection is always grayed out. Furthermore, examining the permissions on UserA's VM, I can see that only UserA has been granted UseRole permission on it. No other user is mentioned. So do the UserRole permissions granted to UserA and UserB in the Data Center and Cluster explain the fact that they can see and attach to "other people's VM's"? If so, do I have to take the data center and cluster down to remove the UserRole permissions for the users? Also, how could I prevent this permission from getting added to the Data Center and Cluster automatically? I haven't added it myself and it says that it's an inherited permission (System). > > The other thing you are experiencing is the prevention of hijacking of > the console of a VM. > Yes, I understand. I remember seeing the option you mention when creating/editing VMs. I mentioned this more as a way to explain why UserB was initially not able to connect to UserA's VM where in fact, it was possible upon a clean boot. Any additional help is appreciated! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Free IPA + oVirt setup fails
Hey, I actually realized that something I wrote is inaccurate. UserB, who was not granted permission to any VM was actually able to connect to a freshly booted UserA's VM. Subsequently, UserA was unable to connect to "his own VM" anymore, and the error message was: Operation Failed: [user cannot force reconnect to vm] When UserB then shut down UserA's VM, UserA was able to power it on and attach to it. Subsequently, UserB was not able to connect to the VM again with the same message UserA was getting (user cannot force connect to vm). What I expected is that UserB would not see, not be able to power control, and not be able to attach at all to UserA's VM, so this behavior is quite puzzling to me! Any clarification and help would be appreciated! Thanks, iordan On Sat, Nov 23, 2013 at 7:50 PM, i iordanov wrote: > Hi Juan, > > On Sat, Nov 23, 2013 at 3:03 PM, Juan Hernandez wrote: > >> Did you change it while the server was running? If so during stop the >> server will probably overwrite the file. Try to change it after stopping >> the server: >> > > Yes, it was absolutely because the server was running and was writing out > its configuration upon being stopped. > > In fact modifying the file is not good practice, you may prefer to do it >> using LDAP: >> > > I guess this method would not have suffered from the clobbered config file > :D. Thanks for the additional tip, I'm quite new to LDAP. > > >> I have just tested this in my local environment and with minssf=1 it >> works correctly, including the ability to search for users in the LDAP >> directory from the administration GUI and using those users to log in to >> both the administration GUI and to the user portal. >> > > I can definitely now confirm that changing minssf to 1 worked around the > issue. > > However, I'm faced with either an issue or a misunderstanding of how > things work in oVirt. I was able to add a couple of users to IPA (user A > and user B) and then import them with UserRole into oVirt. What is puzzling > is that both are able to see(!!) and power on/off(!) all the machines > which were created by and for user admin@internal. Some of these machines > are based on the Blank template and some on a different template (if that > matters). Thankfully, at least the new users are unable to attach to the > console of those machines. > > When I created a new virtual machine and in the permissions added user A > as UserRole, user A now has access to the console of that VM. However, what > was again puzzling is that user B can see and power on/off the new virtual > machine, but at least cannot attach to the console (consistent with my > previous findings). > > I would have thought that users would "see" and be able to power on/off > only their own VMs, and something tells me that this is the way it was > intended. So what do you think is broken in my test rig? > > Thank you very much! > iordan > > -- > The conscious mind has only one thread of execution. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Free IPA + oVirt setup fails
Hi Juan, On Sat, Nov 23, 2013 at 3:03 PM, Juan Hernandez wrote: > Did you change it while the server was running? If so during stop the > server will probably overwrite the file. Try to change it after stopping > the server: > Yes, it was absolutely because the server was running and was writing out its configuration upon being stopped. In fact modifying the file is not good practice, you may prefer to do it > using LDAP: > I guess this method would not have suffered from the clobbered config file :D. Thanks for the additional tip, I'm quite new to LDAP. > I have just tested this in my local environment and with minssf=1 it > works correctly, including the ability to search for users in the LDAP > directory from the administration GUI and using those users to log in to > both the administration GUI and to the user portal. > I can definitely now confirm that changing minssf to 1 worked around the issue. However, I'm faced with either an issue or a misunderstanding of how things work in oVirt. I was able to add a couple of users to IPA (user A and user B) and then import them with UserRole into oVirt. What is puzzling is that both are able to see(!!) and power on/off(!) all the machines which were created by and for user admin@internal. Some of these machines are based on the Blank template and some on a different template (if that matters). Thankfully, at least the new users are unable to attach to the console of those machines. When I created a new virtual machine and in the permissions added user A as UserRole, user A now has access to the console of that VM. However, what was again puzzling is that user B can see and power on/off the new virtual machine, but at least cannot attach to the console (consistent with my previous findings). I would have thought that users would "see" and be able to power on/off only their own VMs, and something tells me that this is the way it was intended. So what do you think is broken in my test rig? Thank you very much! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Free IPA + oVirt setup fails
Hi Juan, I found the setting in the file you pointed me to: nsslapd-minssf: 0 I changed it to 1, but as soon as I restart the ipa service with: systemctl restart ipa or reboot it reverts back to 0! Why is this happening? Many thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Free IPA + oVirt setup fails
Hi guys, I'm trying to work around the impossibility of adding local users into oVirt by setting up a FreeIPA server for my test rig... :( Everything is Fedora 19 and whatever package versions come with it. 1) I have an A-record, a PTR-record and the necessary SRV records for my server in dnsmasq on my OpenWRT router: ptr-record=60.2.168.192.in-addr.arpa,"freeipa.iiordanov.com" srv-host=_kerberos-master._tcp,freeipa.iiordanov.com,88,0,100 srv-host=_kerberos-master._udp,freeipa.iiordanov.com,88,0,100 srv-host=_kerberos._tcp,freeipa.iiordanov.com,88,0,100 srv-host=_kerberos._udp,freeipa.iiordanov.com,88,0,100 srv-host=_kpasswd._tcp,freeipa.iiordanov.com,464,0,100 srv-host=_kpasswd._udp,freeipa.iiordanov.com,464,0,100 srv-host=_ldap._tcp,freeipa.iiordanov.com,389,0,100 2) I have run ipa-server-install and everything completed without error. I've disabled the firewall on the server completely and the iptables chains are all clean. I've rebooted the server just in case. 3) When I try to add the IPA server to oVirt, I get a nasty error! # engine-manage-domains -action=add -domain=iiordanov.com -user=admin -provider=ipa -interactive Enter password: General error has occurednull java.lang.NegativeArraySizeException at sun.security.jgss.krb5.CipherHelper.aes256Encrypt(CipherHelper.java:1367) at sun.security.jgss.krb5.CipherHelper.encryptData(CipherHelper.java:722) at sun.security.jgss.krb5.WrapToken_v2.(WrapToken_v2.java:200) at sun.security.jgss.krb5.Krb5Context.wrap(Krb5Context.java:861) at sun.security.jgss.GSSContextImpl.wrap(GSSContextImpl.java:385) at com.sun.security.sasl.gsskerb.GssKrb5Base.wrap(GssKrb5Base.java:104) at com.sun.jndi.ldap.sasl.SaslOutputStream.write(SaslOutputStream.java:89) at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:430) at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:555) at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1985) at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1847) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339) at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267) at org.ovirt.engine.core.ldap.RootDSEData.(RootDSEData.java:52) at org.ovirt.engine.core.utils.kerberos.JndiAction.getDomainDN(JndiAction.java:257) at org.ovirt.engine.core.utils.kerberos.JndiAction.run(JndiAction.java:87) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:356) at org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.promptSuccessfulAuthentication(KerberosConfigCheck.java:174) at org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.validateKerberosInstallation(KerberosConfigCheck.java:150) at org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.checkInstallation(KerberosConfigCheck.java:135) at org.ovirt.engine.core.domains.ManageDomains.checkKerberosConfiguration(ManageDomains.java:746) at org.ovirt.engine.core.domains.ManageDomains.testConfiguration(ManageDomains.java:917) at org.ovirt.engine.core.domains.ManageDomains.addDomain(ManageDomains.java:539) at org.ovirt.engine.core.domains.ManageDomains.runCommand(ManageDomains.java:311) at org.ovirt.engine.core.domains.ManageDomains.main(ManageDomains.java:206) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.jboss.modules.Module.run(Module.java:260) at org.jboss.modules.Main.main(Main.java:291) Failure while testing domain %1$s. Details: %2$s: One of the parameters for this error is null and no default message to show Can anybody spot the trouble here? Any help is appreciated! Many thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] replacing self-signed certificates
Hi Itamar, On Wed, Nov 20, 2013 at 2:54 PM, Itamar Heim wrote: > iordan - maybe wikify for future generations? > I don't see why not! Once I verify the procedure I'll get an account to edit the wiki. Cheers, iordan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] replacing self-signed certificates
Thanks Alon and Thomas! iordan On Wed, Nov 20, 2013 at 1:51 PM, Alon Bar-Lev wrote: > > > - Original Message - > > From: "i iordanov" > > To: users@ovirt.org > > Sent: Wednesday, November 20, 2013 6:50:04 PM > > Subject: [Users] replacing self-signed certificates > > > > Hello, > > > > I searched around but could not come up with specific instructions for > how to > > replace the self-signed certificates in an oVirt 3.3 setup with > > non-self-signed certificates. I need to ensure that my oVirt/SPICE client > > actually does the right thing when connecting to a machine with a 3rd > party > > signed certificate. > > > > Presumably, I would be able to adapt the instructions provided here: > > http://www.ovirt.org/How_to_change_engine_host_name > > > > right? Which steps need to be modified? If I hammer at it long enough, I > > would probably succeed in getting it to work at some point, but I was > hoping > > for somebody more experienced to help me over the initial hurdle. > > > > In case I have to reinstall to use non-self-signed certificates, how do > I go > > about preparing the environment prior to running engine-setup? > > Usually there is no need to replace any other certificate than the > certificate that is used for apache frontend. > > No need to touch the spice and other certificates and keys. > > Replace /etc/pki/ovirt-engine/apache-ca.pem with your 3rd party CA > certificate chain. > Replace /etc/pki/ovirt-engine/keys/apache.p12 with key store. > Extract key from apache.p12 to > /etc/pki/ovirt-engine/keys/apache.key.nopass do not protect with password. > Extract certificate from apache.p12 to > /etc/pki/ovirt-engine/certs/apache.cer > > Alternatively, you can configure the mod_ssl as you wish. > > Once you do this, if you have ovirt-node already installed, delete > /etc/pki/vdsm/certs/engine_web_ca.pem to allow fetch ssl trust and allow > registration in future. > > Regards, > Alon Bar-Lev. > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] replacing self-signed certificates
Hi Thomas, Thanks for your response! This goes a long way, however there is still the unknown where ovirt-engine takes the SPICE certificate and CA from. Can somebody confirm that replacing just the files referenced in the apache configuration will be sufficient? Thanks! iordan On Wed, Nov 20, 2013 at 1:00 PM, Thomas Suckow wrote: > I don't know about the native SPICE client, but here is what I did for > apache and the websocket proxy: > > In /etc/httpd/conf.d/ssl.conf it lists > SSLCertificateFile > SSLCertificateKeyFile > SSLCertificateChainFile > SSLCACertificateFile > > Those are the files you need to replace for the web interface. My certs > were combined, so I actually only use SSLCertificateFile and > SSLCertificateChainFile > > NOTE: If you modify ssl.conf, the path /etc/pki/ovirt-engine/apache-ca.pem > is used by ovirt-iso-uploader. Uploads will fail unless you replace/symlink > that file or specify a CA certificate on the command line. I actually > linked to my chain file and it seems to be happy. > > > > Websocket Proxy: > > /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf defines the > certificates. > > The websocket proxy needs a combined certificate file with your cert and > the entire chain for SSL_CERTIFICATE > SSL_KEY is just the unencrypted key, and it MUST be accessible by the > ovirt user. > > > > As for spice, I am not sure, I am guessing it is > /etc/pki/ovirt-engine/keys/engine_id_rsa and /etc/pki/ovirt-engine/keys/ > certs/engine.cer > Not sure where they are referenced except by the websocket proxy. > > -- > Thomas > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] replacing self-signed certificates
Hello, I searched around but could not come up with specific instructions for how to replace the self-signed certificates in an oVirt 3.3 setup with non-self-signed certificates. I need to ensure that my oVirt/SPICE client actually does the right thing when connecting to a machine with a 3rd party signed certificate. Presumably, I would be able to adapt the instructions provided here: http://www.ovirt.org/How_to_change_engine_host_name right? Which steps need to be modified? If I hammer at it long enough, I would probably succeed in getting it to work at some point, but I was hoping for somebody more experienced to help me over the initial hurdle. In case I have to reinstall to use non-self-signed certificates, how do I go about preparing the environment prior to running engine-setup? Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] [Spice-devel] govirt 0.30 plans
Hi Itamar, Thanks for the explanations! I'll let Christophe confirm that govirt defaults to user-mode. On Sat, Nov 16, 2013 at 5:26 AM, Itamar Heim wrote: > so you have two options - move to admin mode in govirt, or easier (and > probably more consistent if you are aiming your solution for users rather > than admins), give admin@internal a UserRole on the VMs, not an Admin Role. The client will be aimed at users, so there is no real problem here, once I got over the initial hurdle of actually attaching to machines. Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt-live questions
Hi Itamar, Just a follow-up to our previous conversation. I believe all my troubles were due to running the VMs inside an oVirt node which itself was a VM (with nested virtualization). I reworked my scheme where the node is now installed directly onto hardware and everything is operating lightning fast with no hangups. Thanks for the quick reply and take care! Cheers, iordan On Sat, Nov 2, 2013 at 10:46 AM, i iordanov wrote: > Hi Dan, > > I reproduced this bug within oVirt Live 1.1. One difference from a > traditional setup in my case was that I was running the oVirt Live > distro within a VM with nested virtualization enabled. I don't think > that this is the cause because I was able to run VMs successfully when > I removed the -uuid option, but it's worth mentioning. > > On Sat, Nov 2, 2013 at 11:24 AM, Dan Kenigsberg wrote: >> How are you sure that -uuid is the trigger for this qemu bug? Could you >> copy here the shortest command line that reproduces the bug? > > When I get a chance, I will get that VM running again and will give > you the shortest command-line that reproduces the hang. > >> I suppose that a qemu mailing list could provide more help. What is your >> host kernel and exact qemu version? > > I'll get that for you in the follow-up as well. > > Thanks! > iordan > > > -- > The conscious mind has only one thread of execution. -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt-live questions
Hi Dan, I reproduced this bug within oVirt Live 1.1. One difference from a traditional setup in my case was that I was running the oVirt Live distro within a VM with nested virtualization enabled. I don't think that this is the cause because I was able to run VMs successfully when I removed the -uuid option, but it's worth mentioning. On Sat, Nov 2, 2013 at 11:24 AM, Dan Kenigsberg wrote: > How are you sure that -uuid is the trigger for this qemu bug? Could you > copy here the shortest command line that reproduces the bug? When I get a chance, I will get that VM running again and will give you the shortest command-line that reproduces the hang. > I suppose that a qemu mailing list could provide more help. What is your > host kernel and exact qemu version? I'll get that for you in the follow-up as well. Thanks! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt-live questions
Hi Itamar, On Thu, Oct 31, 2013 at 7:44 PM, Itamar Heim wrote: > please check your spam folder and flag as not spam... Yes, that turned out to be the problem, and I've reported it as not spam... >> - My oVirt live distro is installed on-disk, and I'm able to get it up >> and running with an engine-cleanup, some manual rm's, and an >> engine-setup. However, when I reboot, the "local_host" host is in a >> failed state and refuses to be resurrected no matter what. Is there a >> way to get around that somehow? > > logs may help. I was using an older version of oVirt Live where these bugs were present, the host does come up on reboot now if I manually put it in maintenance before the reboot. I haven't tried not putting it in maintenance. >> - My second question is, where do I have to tweak to make all the >> cores available on the "local_host" host? At the moment, engine-setup >> automatically sets it to have only 1 core, and it has 8. > > that shouldn't happen - it should auto learn from host. > what does vdsClient -s 0 getVdsCaps returns? The newest version of oVirt Live also seems to have this bug resolved. However, in my environment it seems to have a new crippling bug. All virtual machines I create hang at the gPXE stage or at the Booting from CD stage indefinitely. I extracted the qemu-kvm command-line, and I was able to figure out that if I remove the -uuid option, the machines proceed rather than hanging. It seems unlikely that it's simply the -uuid option that's causing the hang. More likely something the option causes qemu-kvm to do is causing the hang. The engine does not appear to be aware that the machine is in a hung state - to it, everything seems perfectly sane. There are no logs to report. I can send you an strace of the qemu-kvm process if you think that'll help. Thanks! iordan ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] ovirt-live questions
Hello, Please cc me on any reply, because I tried to subscribe to this list twice and did not receive any confirmation so I assume I'm not subscribed. I'm using ovirt live as a test framework for some Android SPICE client work I'm doing and I have a couple of questions: - My oVirt live distro is installed on-disk, and I'm able to get it up and running with an engine-cleanup, some manual rm's, and an engine-setup. However, when I reboot, the "local_host" host is in a failed state and refuses to be resurrected no matter what. Is there a way to get around that somehow? - My second question is, where do I have to tweak to make all the cores available on the "local_host" host? At the moment, engine-setup automatically sets it to have only 1 core, and it has 8. Any help is much appreciated, and thanks in advance! iordan -- The conscious mind has only one thread of execution. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
