[ovirt-users] Re: sanlock error

[kim . kargaard]

Hi,

We have plenty of space, I have checked with both df -h and df -i. 

Here are the vdsm logs from one node. 

2021-03-08 12:09:15,550+0100 INFO  (jsonrpc/7) [vdsm.api] START 
deleteImage(sdUUID=u'fb14e013-15f1-49b6-b129-210517aca0da', 
spUUID=u'aec485fa-cdbb-4979-8dc9-a2376559b2a4', 
imgUUID=u'459872a1-8783-463a-98ae-9e56d8883abb', postZero=u'false', 
force=u'false', discard=False) from=:::172.16.122.253,44650, 
flow_id=39b2eddb, task_id=969cdd60-9b4c-43d9-960a-2a3b467b227c (api:48)
2021-03-08 12:09:15,719+0100 INFO  (tasks/9) [storage.StorageDomainManifest] 
Unlink volume symlink 
u'/rhev/data-center/mnt/blockSD/fb14e013-15f1-49b6-b129-210517aca0da/images/01af322e-ff54-4981-9842-0f0a608da17c/46bf0806-8d16-40db-92df-8436f43628a4'
 (blockSD:722)
2021-03-08 12:09:15,719+0100 INFO  (tasks/9) [storage.StorageDomainManifest] 
Unlink volume symlink 
u'/rhev/data-center/mnt/blockSD/fb14e013-15f1-49b6-b129-210517aca0da/images/01af322e-ff54-4981-9842-0f0a608da17c/27638d78-e935-44f4-b0cc-5ee2459e204a'
 (blockSD:722)
2021-03-08 12:09:15,719+0100 INFO  (tasks/9) [storage.StorageDomainManifest] 
removed: 
[u'/rhev/data-center/mnt/blockSD/fb14e013-15f1-49b6-b129-210517aca0da/images/01af322e-ff54-4981-9842-0f0a608da17c/27638d78-e935-44f4-b0cc-5ee2459e204a']
 (blockSD:729)
2021-03-08 12:09:15,719+0100 INFO  (tasks/9) [storage.StorageDomainManifest] 
Removing image directory 
u'/rhev/data-center/mnt/blockSD/fb14e013-15f1-49b6-b129-210517aca0da/images/01af322e-ff54-4981-9842-0f0a608da17c'
 (blockSD:735)
2021-03-08 12:09:15,729+0100 INFO  (tasks/9) [storage.ThreadPool.WorkerThread] 
FINISH task 9a57dcf5-85b2-4c7c-8ffb-f11eecc2313f (threadPool:210)
2021-03-08 12:09:16,671+0100 WARN  (jsonrpc/7) [storage.LVM] Removing stale lv: 
fb14e013-15f1-49b6-b129-210517aca0da/46bf0806-8d16-40db-92df-8436f43628a4 
(lvm:564)
2021-03-08 12:09:17,920+0100 WARN  (tasks/7) [storage.LVM] lv: 
46bf0806-8d16-40db-92df-8436f43628a4 not found in lvs vg: 
fb14e013-15f1-49b6-b129-210517aca0da response (lvm:736)
2021-03-08 12:09:17,921+0100 ERROR (tasks/7) [storage.TaskManager.Task] 
(Task='d4aa81a1-9adc-45c9-be46-05bc63862f4e') Unexpected error (task:875)
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 882, in 
_run
return fn(*args, **kargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/task.py", line 336, in run
return self.cmd(*self.argslist, **self.argsdict)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/securable.py", line 79, 
in wrapper
return method(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/sp.py", line 1966, in 
deleteVolume
vol = dom.produceVolume(imgUUID, volUUID)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/sd.py", line 913, in 
produceVolume
volUUID)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 814, in 
__init__
self._manifest = self.manifestClass(repoPath, sdUUID, imgUUID, volUUID)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/blockVolume.py", line 62, 
in __init__
volUUID)
  File "/usr/lib/python2.7/site-packages/vdsm/storage/volume.py", line 86, in 
__init__
self.validate()
  File "/usr/lib/python2.7/site-packages/vdsm/storage/blockVolume.py", line 
151, in validate
raise se.VolumeDoesNotExist(self.volUUID)
VolumeDoesNotExist: Volume does not exist: 
(u'46bf0806-8d16-40db-92df-8436f43628a4',)
2021-03-08 12:09:17,946+0100 INFO  (tasks/7) [storage.ThreadPool.WorkerThread] 
FINISH task d4aa81a1-9adc-45c9-be46-05bc63862f4e (threadPool:210)
2021-03-08 12:09:18,273+0100 WARN  (jsonrpc/7) [storage.LVM] Command 
['/usr/sbin/lvm', 'lvchange', '--config', 'devices {  
preferred_names=["^/dev/mapper/"]  ignore_suspended_devices=1  
write_cache_state=0  disable_after_error_count=3  
filter=["a|^/dev/mapper/2181ad2edfa7b485c6c9ce90045609718$|^/dev/mapper/2763fdda70ca458906c9ce90045609718$|^/dev/mapper/28ba7d1d12c7099ef6c9ce90045609718$|^/dev/mapper/2e9d013564898d36f6c9ce90045609718$|",
 "r|.*|"] } global {  locking_type=1  prioritise_write_locks=1  
wait_for_locks=1  use_lvmetad=0 } backup {  retain_min=50  retain_days=0 }', 
'--autobackup', 'n', '-a', 'y', '--deltag', 
u'IU_459872a1-8783-463a-98ae-9e56d8883abb', '--addtag', 
u'IU__remove_me_459872a1-8783-463a-98ae-9e56d8883abb', 
'fb14e013-15f1-49b6-b129-210517aca0da/5d51973d-4198-4cec-994a-727317640ccb'] 
succeeded with warnings: ['  WARNING: Combining activation change with other 
commands is not advised.', '  Scan of VG fb14e013-15f1-49b6-b129-210517aca0da 
from /dev/mapper/2763fdda70ca
 458906c9ce90045609718 found metadata seqno 26448 vs previous 26447.', '  Scan 
of VG fb14e013-15f1-49b6-b129-210517aca0da from 
/dev/mapper/2763fdda70ca458906c9ce90045609718 found metadata seqno 26448 vs 
previous 26447.'] (lvm:385)
2021-03-08 12:09:18,281+0100 INFO  (jsonrpc/7) [vdsm.api] FINISH deleteImage 
return=None from=:::172.16.122.253,44650, flow_id=39b2eddb, 
task_id=969cdd60-9b4c-43d9-960a-2a3b467b227c 

[ovirt-users] sanlock error

[kim . kargaard]

Hi,

We are running ovirt 4.3 and whenever we create a new VM, we get the error:

HSMGetAllTasksStatusesVDS failed: Error creating a new volume: (u"Volume 
creation 77be733a-a38a-4125-a3ae-beea960d9e28 failed: (28, 'Sanlock resource 
write failure', 'No space left on device')",)
3/8/2111:56:57 AM

I have checked the engine logs and see the following:

2021-03-08 12:09:18,306+01 ERROR [org.ovirt.engine.core.bll.tasks.SPMAsyncTask] 
(EE-ManagedThreadFactory-engineScheduled-Thread-40) [] 
BaseAsyncTask::logEndTaskFailure: Task 'd4aa81a1-9adc-45c9-be46-05bc63862f4e' 
(Parent Command 'Unknown', Parameters Type 
'org.ovirt.engine.core.common.asynctasks.AsyncTaskParameters') ended with 
failure:
-- Result: 'cleanSuccess'
-- Message: 'VDSGenericException: VDSErrorException: Failed to 
HSMGetAllTasksStatusesVDS, error = Volume does not exist: 
(u'46bf0806-8d16-40db-92df-8436f43628a4',), code = 201',
-- Exception: 'VDSGenericException: VDSErrorException: Failed to 
HSMGetAllTasksStatusesVDS, error = Volume does not exist: 
(u'46bf0806-8d16-40db-92df-8436f43628a4',), code = 201'

Not sure how to solve this issue. I have tried restarting the engine, but that 
did not solve it. Any tips?

Thanks. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/JC7KB2SGXBBXQIZ7X4EVBADPM7BLITWK/

[ovirt-users] Re: AFFINITY GROUPS

[Kim Kargaard]

You can select multiple hosts when selecting which host the VM can run on.

Kim

From: LS CHENG 
Sent: Sunday, January 31, 2021 9:51 AM
To: Strahil Nikolov 
Cc: users@ovirt.org 
Subject: [ovirt-users] Re: AFFINITY GROUPS

Hi

Yes, that can be trick as well. I am using affinity rules because I am trying 
to extend to more combinations. For examples 4 hosts and a vm can run in 2 
hosts only etc.

Thanks

On Sun, Jan 31, 2021 at 9:14 AM Strahil Nikolov 
mailto:hunter86...@yahoo.com>> wrote:
Why don't you go to VM settings and define that vm01 can run only on host_x?
If the host is down, it won't start on host_y.

Best Regards,
Strahil Nikolov
Sent from Yahoo Mail on 
Android

On Sat, Jan 30, 2021 at 23:09, LS CHENG
mailto:lsc.or...@gmail.com>> wrote:
Hi

I would like to know how AFFINITY GROUPS works.

I have 2 VM in 2 hosts, each VM runs in a host. Let's call

HOST_X where vm01 runs
HOST_Y where vm02 runs

I have set up an affinity group where it says vm01 relates to HOST_X, vm02 
relates to HOST_Y. VM affinity rule is set to negative and HOST affinity rule 
set to positive. I need both vm01 and vm02 to run in their respective physical 
host.

I have a problem, when vm01 is stopped and HOST_Y is rebooted vm02 starts in 
HOST_X, how can I avoid that?

Thank you

Luis Sanchez


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to 
users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C74WDKK2SSFA3JRQ6RERHRINJ4F53CBB/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZE3UGTTUZ7BAEADGBPSBVRE2KOFMZG4K/

[ovirt-users] Re: vGPU on ovirt 4.3

[kim . kargaard]

I would also be interested to know that :)
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5K4J7HEIBVBUTMSMOODEOGFX4X2HYGMT/

[ovirt-users] Re: vGPU on ovirt 4.3

[kim . kargaard]

Thanks all for the feedback. 

When we bought the servers, they put some Nvidia Quadro P4000's in, but I can't 
seem to find anything that says they support vGPU. 

I wasn't aware of the license server requirement for Nvidia, but the pricing 
isn't too bad, so I can probably get that pushed through. Anyone aware of which 
AMD cards are supported by oVirt? I have only found a list of Nvidia cards. 

Thanks,

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PYVDLRK6IS4EO4COA3CAE6EQZPOLNOGT/

[ovirt-users] vGPU on ovirt 4.3

[kim . kargaard]

Hi,

We are looking at getting some GPU's for our servers and to use vGPU 
passthrough so that our students can do some video renders on the VM's. Does 
anyone have good experience with the Nvidia Quadro RTX6000 or RTX8000 and ovirt 
4.3? 

Thanks.

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XF4LZOEAC2YTRH5LTL55YKA4BPRZLVZH/

[ovirt-users] Re: multiple new networks

[Kim Kargaard]

Hi,

Thank you, will check that out.

Kind regards

Kim

From: Ales Musil 
Date: Wednesday, 21 October 2020 at 10:28
To: Kim Kargaard 
Cc: users 
Subject: Re: [ovirt-users] multiple new networks



On Wed, Oct 21, 2020 at 10:12 AM 
mailto:kim.karga...@noroff.no>> wrote:
Hi all,

We have Ovirt 4.3, with 11 hosts, and need a bunch of VLANs for our student's 
to be isolated and do specific things. We have created the VLANs on the switch, 
but need to create them on the admin portal, with vlan tagging and then add 
them to the interface on the hosts. We are talking about 400 VLANs. I have done 
this manually for 4 VLANs and all works fine, but was wondering if there is a 
way of doing this in one go for all? So I don't have to do it 400 times (at 
least creating the VLANs on the admin portal).

Thanks.

Kim
___
Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>
To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3YDTCIKQ4GY3KFLH3IBGTERADO7WLHDB/


Hello,

you can automate this using oVirt API. The documentation is available on [0].
Another way is to use python-sdk [1]. Python SDK uses the oVirt API under the 
hood so it corresponds one to another.
[1] contains some real python code that is used to manipulate networks through 
the SDK.

Hopefully this helps.

Regards,
Ales

[0] http://ovirt.github.io/ovirt-engine-api-model/4.3/
[1] http://ovirt.github.io/ovirt-engine-sdk/4.3/4.3.2/
[2] 
https://github.com/oVirt/ovirt-system-tests/blob/master/basic-suite-master/test_utils/network_utils_v4.py


--

Ales Musil

Software Engineer - RHV Network

Red Hat EMEA<https://www.redhat.com>

amu...@redhat.com<mailto:amu...@redhat.com>IM: amusil
[Image removed by sender.]<https://red.ht/sig>

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UABEVRA6IHCL3EMS4YXDDIBQHCCZDWCZ/

[ovirt-users] multiple new networks

[kim . kargaard]

Hi all,

We have Ovirt 4.3, with 11 hosts, and need a bunch of VLANs for our student's 
to be isolated and do specific things. We have created the VLANs on the switch, 
but need to create them on the admin portal, with vlan tagging and then add 
them to the interface on the hosts. We are talking about 400 VLANs. I have done 
this manually for 4 VLANs and all works fine, but was wondering if there is a 
way of doing this in one go for all? So I don't have to do it 400 times (at 
least creating the VLANs on the admin portal).

Thanks.

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/3YDTCIKQ4GY3KFLH3IBGTERADO7WLHDB/

[ovirt-users] user role

[kim . kargaard]

Hi all,

For a group of users added to ovirt through AD, which role should one add to an 
ISO for the group to be able to select an ISO when creating VM's in the VM 
portal? 

Thanks.

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RWER23VG3JXYJVTNIHLNJDEEXLB4TINK/

[ovirt-users] LDAP/AD issue

[kim . kargaard]

Hi all,

We have had our ovirt instance connected to our internal AD for users to log 
into the VM portal for the last year, linked to studentdomene.noroff.no. This 
has been working without any problems. We had it set up and the DNS server had 
a forward record to the DC's. All good. 

Then, of course, the institution decided to introduce student emails and they 
decided to add the domain stud.noroff.no for student emails and made this the 
primary domain in the AD. The problem is that when this is changed, students 
can no longer log into the engine. I have of course changed the ldap settings 
and added a forward record on the DNS to the new domain. However, it seems that 
the domain is studentdomene.noroff.no, but with an added UPN suffix with 
stud.noroff.no 

When students try to log in, with the config changes, they get this error in 
the browser:

server_error: An error occurred while attempting to query DNS in order to 
retrieve SRV records with name '_ldap._tcp.stud.noroff.no': 
NameNotFoundException(DNS name not found [response code 3]), 
ldapSDKVersion=4.0.7, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58 

Any ideas on how to solve this issue? 

My config looks like this:

sudo cat /etc/ovirt-engine/aaa/Students.properties 
[sudo] password for noroffadmin: 
include = 

vars.domain = studentdomene.noroff.no
vars.user = CN=ovirt auth,CN=Users,DC=stud,DC=noroff,DC=no
vars.password = PASSWORD

pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
pool.default.serverset.type = srvrecord
pool.default.serverset.srvrecord.domain = ${global:vars.domain}

my forward on the DNS server looks like this:
sudo cat /etc/named/named.conf.local
[sudo] password for noroffadmin: 
zone "platform.noroff.no"{
type master;
file "/etc/named/zones/db.platform.noroff.no";  # zone file path
};
zone "stud.noroff.no" {
type forward;
forward only;
forwarders { 172.24.111.20; 172.27.111.20; 172.21.111.20; 
172.16.111.20; };
};
zone "studentdomene.noroff.no" {
type forward;
forward only;
forwarders { 172.24.111.20; 172.27.111.20; 172.21.111.20; 
172.16.111.20; };
};
zone "122.16.172.in-addr.arpa" {
type master;
file "/etc/named/zones/db.122.16.172";  # 172.16.122.0/24 subnet
};

Any pointers would be greatly appreciated :)

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4NUUMBLEUD2MYZVAMGY2AJVBS235CEQK/

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Yes, in the end, it was a permission on the one CA file, that was set to 700 
and should have been 750 (if I remember correctly).

From: Anton Louw 
Date: Friday, 12 June 2020 at 12:01
To: Kim Kargaard , "Staniforth, Paul" 
, "users@ovirt.org" 
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Hopefully  I will still run through a couple of checks, I am sure it is 
something small I am missing. Was your issue due to owner and permissions?

Yes, for some of our offerings we do use oVirt.


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<http://www.vox.co.za>

[F]<https://www.facebook.com/voxtelecomZA>

[T]<https://www.twitter.com/voxtelecom>

[I]<https://www.instagram.com/voxtelecomza/>

[L]<https://www.linkedin.com/company/voxtelecom>

[Y]<https://www.youtube.com/user/VoxTelecom>


From: Kim Kargaard 
Sent: 12 June 2020 11:43
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Hi Anton,

Don´t worry, it had me tearing out hair for a while. But, Paul managed to save 
my remaining hair, so hopefully he has a suggestion that will sort things out 
for you too 

By the way, is Vox using ovirt as their cloud system for customers? Just 
curious of course.

Kind regards

Kim

From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 11:36
To: Kim Kargaard mailto:kim.karga...@noroff.no>>, 
"Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org<mailto:users@ovirt.org>" 
mailto:users@ovirt.org>>
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<http://www.vox.co.za>

[F]<https://www.facebook.com/voxtelecomZA>

[T]<https://www.twitter.com/voxtelecom>

[I]<https://www.instagram.com/voxtelecomza/>

[L]<https://www.linkedin.com/company/voxtelecom>

[Y]<https://www.youtube.com/user/VoxTelecom>


From: Kim Kargaard mailto:kim.karga...@noroff.no>>
Sent: 12 June 2020 10:51
To: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>; Staniforth, 
Paul mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org<mailto:users@ovirt.org>
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while  The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org<mailto:users@ovirt.org>" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<http://www.vox.co.za>

[F]<https://www.facebook.com/voxtelecomZA>

[T]<https://www.twitter.com/voxtelecom>

[I]<https://www.instagram.com/voxtelecomza/>

[L]<https://www.linkedin.com/company/voxtelecom>

[Y]<https://www.youtube.com/user/VoxTelecom>


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 20

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Hi Anton,

Don´t worry, it had me tearing out hair for a while. But, Paul managed to save 
my remaining hair, so hopefully he has a suggestion that will sort things out 
for you too 

By the way, is Vox using ovirt as their cloud system for customers? Just 
curious of course.

Kind regards

Kim

From: Anton Louw 
Date: Friday, 12 June 2020 at 11:36
To: Kim Kargaard , "Staniforth, Paul" 
, "users@ovirt.org" 
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<http://www.vox.co.za>

[F]<https://www.facebook.com/voxtelecomZA>

[T]<https://www.twitter.com/voxtelecom>

[I]<https://www.instagram.com/voxtelecomza/>

[L]<https://www.linkedin.com/company/voxtelecom>

[Y]<https://www.youtube.com/user/VoxTelecom>


From: Kim Kargaard 
Sent: 12 June 2020 10:51
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while  The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org<mailto:users@ovirt.org>" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<http://www.vox.co.za>

[F]<https://www.facebook.com/voxtelecomZA>

[T]<https://www.twitter.com/voxtelecom>

[I]<https://www.instagram.com/voxtelecomza/>

[L]<https://www.linkedin.com/company/voxtelecom>

[Y]<https://www.youtube.com/user/VoxTelecom>


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org<mailto:users@ovirt.org>; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org<mailto:users@ovirt.org> 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za<mailto:anton.l...@voxtelecom.co.za>
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co.za%2F=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457323998384=N9eVNgOX74N%2BbkmHXsNRq%2FDclLUh2ktGH9NeURi9UVg%3D=0>

[Ima

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while  The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users 
Reply to: Anton Louw 
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" , "users@ovirt.org" 

Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[Image removed by sender. 
F]

[Image removed by sender. 
T]

[Image removed by sender. 
I]

[Image removed by sender. 
L]

[Image removed by sender. 
Y]



[Image removed by sender. 
#VoxBrand]

Disclaimer

The contents of this email are confidential to 

[ovirt-users] VM's in status unknown

[kim . kargaard]

Hi,

We have a few Windows 10 VM's running on our ovirt 4.3, where when you shutdown 
the VM from within Windows, that VM does not shut down but gets a status of 
unknown in ovirt and one cannot do anything to the machines within the web gui. 
This seems to specfically be related to that Windows 10 template that we have 
created. Any ideas? Also, any ideas on how one can shut these machines down?

Thanks

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/UM26TABUTG373QVXEI4UJN3EAKANLWHL/

[ovirt-users] bare-metal to self-hosted engine

[kim . kargaard]

Hi,

We currently have an ovirt engine running on a server. The server has CentOS 
installed and the ovirt-engine installed, but is not a node that hosts VM's. I 
would like to move the ovirt-engine to a self-hosted engine and it seems like 
this articles is the one to follow: 
https://www.ovirt.org/documentation/self-hosted/chap-Migrating_from_Bare_Metal_to_an_EL-Based_Self-Hosted_Environment.html
Am I correct that I can migrate from a bare-metal CentOS server engine to a 
self-hosted VM of the engine and is the documentation above the only 
documentation I will need to complete this process?

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TWP27VKE6WCP4S3QSPINOESGOZZ6HPJV/

[ovirt-users] Re: ovirt vdsm and networking

[kim . kargaard]

Thank you. 

Managed to add the IP's using that method Dominik and finally managed to set 
the display network to the Student network. 

A related question :)

Our set up is a public facing IP that uses NAT at the firewall to point 
internally to the ovirt engine web app. When users create VM's and click on the 
SPICE console and download the .vv file, the file now points to the public 
facing IP, which I assume is correct as I have set the ovirt engine as the 
websocket proxy. Our remote users will not have access to the internal network 
through a VPN, so they need to be able to use Spice and connect to the VM's. 
So, the firewall would need to take the traffic coming in from the public 
facing IP on port 590(n) and point it to the internal ovirt engine IP, correct? 
Then, the ovirt engine as the websocket proxy would know where to send the 
traffic to match that VM? Have I understood the process correctly?

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BFQ4OAV4432HWIWQ4HA7ET6MZSB3NHE4/

[ovirt-users] ovirt vdsm and networking

[kim . kargaard]

Hi,

We are running CentOS and ovirt 4.3.4. We currently have four nodes and have 
set up the networks as follows:

ovirtmanagmeent network - set up as a tagged vlan with a static IP
SAN network - set up as a tagged vlan with a static IP
student network - set up as a tagged vlan
fw network - set up as a tagged vlan

The ovirtmanagement and SAN networks were configured on the CentOS boxes during 
after installing CentOS and before adding the nodes as hosts. The student 
network and the fw network were configured through the ovirt admin panel. 
However, because of this, the student network is not assigned a static IP on 
the nodes and serves the VM's using the DHCP on the firewall. The ovirt 
management network is set as the display network and every time I try to change 
that to the student network, ovirt admin panel tells me that I can't because 
there is no IP address assigned to the student network vlan. I tried using ip 
addr add to add a static IP on the one CentOS node, but this does not get 
picked up by ovirt and of course ovirt controls the actual vlan files on the 
CentOS box through VDSM, so any changes I make there will likely just be 
overwritten. 

So, my question is, should I stop VDSM, add the IP to the vlan files on the 
CentOS nodes and then restart VDSM or is there a proper way of solving this? I 
need the Display Network to be set to the student network. 

Thank you for any help.

Kim 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/O5GJRNIPOXJLZ2KEPGZJZZNG57OTTLGI/

[ovirt-users] spice connection error

[kim . kargaard]

Hi,

When trying to connect from a remote network on the spice console to a VM, I 
get the following error:

(remote-viewer:80195): virt-viewer-WARNING **: 11:05:22.322: Channel error: 
Could not connect to proxy server xx.xx.xx.xx: Socket I/O timed out

I found that the display is set to the management network and not the VM 
networkn in the cluster logical network. However, when I try to set the other 
vlan to be the display network, I get the following error:

Error while executing action: Cannot edit Network. IP address has to be set for 
the NIC that bears a role network. Network: student-vlan100, Nic: p2p1.100 on 
host node3 violates that rule.

I am not sure what this means. Any ideas?

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/6YEI3I4NCAHQOTRTANIXDIGUNA32YM6J/

[ovirt-users] ovirt UI update and webproxy server

[kim . kargaard]

Hi,

I want our users to be able to use novnc via the VM portal, so I installed a 
separate version of the UI, following the information I could find on that 
process. It is now possible to get the novnc console option in the VM portal, 
but it seems something with this broke the internal CA for the webproxy, as I 
get the wonderful: 

Disconnected from ConsoleCannot connect to websocket proxy server. Please check 
your websocket proxy certificate or ask your administrator for help. For 
further information please refer to the console manual.
Press the 'Connect' button to reconnect the console.

When using the Admin Portal, I of course get a bit more detail and a suggestion 
to check if websocket proxy server is running, if the firewall is blocking it 
or if the CA is installed. But, it was working perfectly before the UI update. 
When I check the status of the websocket proxy on the engine, I see the 
following:

   Active: active (running) since Fri 2019-09-27 10:58:28 CEST; 1 weeks 5 days 
ago
 Main PID: 58139 (ovirt-websocket)
   CGroup: /system.slice/ovirt-websocket-proxy.service
   └─58139 /usr/bin/python 
/usr/share/ovirt-engine/services/ovirt-websocket-proxy/ovirt-websocket-proxy.py 
--systemd=notify start

Oct 09 14:14:00 enginedomain ovirt-websocket[3569]: 2019-10-09 
14:14:00,746+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 
13] Permission denied
Oct 09 14:14:00 enginedomain ovirt-websocket-proxy.py[58139]: 
ovirt-websocket-proxy[3569] INFO msg:887 handler exception: [Errno 13] 
Permission denied
Oct 09 14:17:44 enginedomain ovirt-websocket[3855]: 2019-10-09 
14:17:44,797+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 
13] Permission denied
Oct 09 14:17:44 enginedomain ovirt-websocket-proxy.py[58139]: 
ovirt-websocket-proxy[3855] INFO msg:887 handler exception: [Errno 13] 
Permission denied
Oct 09 14:21:43 enginedomain ovirt-websocket[4146]: 2019-10-09 
14:21:43,126+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 
13] Permission denied
Oct 09 14:21:43 enginedomain ovirt-websocket-proxy.py[58139]: 
ovirt-websocket-proxy[4146] INFO msg:887 handler exception: [Errno 13] 
Permission denied
Oct 09 14:22:25 enginedomain ovirt-websocket[4180]: 2019-10-09 
14:22:25,004+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 
13] Permission denied
Oct 09 14:22:25 enginedomain ovirt-websocket-proxy.py[58139]: 
ovirt-websocket-proxy[4180] INFO msg:887 handler exception: [Errno 13] 
Permission denied
Oct 09 14:22:40 enginedomain ovirt-websocket[4206]: 2019-10-09 
14:22:40,506+0200 ovirt-websocket-proxy: INFO msg:887 handler exception: [Errno 
13] Permission denied
Oct 09 14:22:40 enginedomain ovirt-websocket-proxy.py[58139]: 
ovirt-websocket-proxy[4206] INFO msg:887 handler exception: [Errno 13] 
Permission denied

The CA files have not changed permissions, so I am at a bit of a loss. Any 
suggestions? I checked the ovirt logs, but I struggled to find a log for the 
websocket proxy, so I can't find a more detailed error log. 

I installed ovirt-web-ui-1.6.1-0.20190923.git6ca35b5.el7.noarch.rpm to get the 
novnc console on the VM portal. 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MLSJGCZYI76MWYZUZQK74E5JDZ6RO6LZ/

[ovirt-users] user role

[kim . kargaard]

Hi,

We are an Higher Education Institution and have set up oVirt 4.3 as a Virtual 
Lab Environment, for both on-campus and distance learning students. We have 
integrated AD and can log in with AD credentials for users. However, I am 
struggling to find the right user role for normal student users. Basically, 
they need to be able to do the following:
1. Create a new VM and select from either a template or select an uploaded ISO
2. Start the VM
3. Restart the VM
4. Shutdown the VM
5. Snapshot the VM
6. Connect to the VM using either spice or vnc/novnc
7. Create a disk
8. Connect to the student network (only would be preferable here) as we have 
management networks that we dont want the students be be able to see or select 
(if possible)

I have tested using the PowerUserRole, but that does not allow me to select 
VNC/noVNC or spice and does not allow me to install from an ISO, only a 
template. Any suggestions on role that I can give these users?

Thanks.

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/4C2KCNPOR2VTJVHZZSIXTVGC54RKDY3S/

[ovirt-users] Re: SPICE and VNC native

[kim . kargaard]

Hi,

Thanks all. Seems I hadn´t realized that the VNC and SPICE native requires a 
proxy like squid. Going to set that up and see if I can get it working. 

Appreciate the help.

Kind regards

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KEY7CHUWPR344MA6UEFJ2GYSFLLTZYYG/

[ovirt-users] SPICE and VNC native

[kim . kargaard]

Hi,

We are running ovirt 4.3. The engine is on a bare metal machine and the hosts 
are running on Centos 7. When installing the engine, I set it to be the 
webproxy. When I create a new vm, I select both SPICE+VNC. When clicking on the 
console I only have the option for SPICE native, not for the HTML option. For 
VNC I have both options and the HTML option can be selected and works. But, 
this is also the only option that works. VNC Native as well as SPICE Native do 
not work. I have tried using both remote viewer on Mac and a VNC client on a 
Windows machine and neither will actually open the VM. I would really also like 
the SPICE HTML option to exist, but it does not. The enable SPICE proxy in the 
Console selection is greyed out. 

When I open in remoteviewer (Mac) I get Unable to connect to the graphic server.

Any suggestions?

Kim
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PDH2UJKZC2XEOXRKIEGAKYPXZOI5ALSB/

[ovirt-users] SAN re-attachment error

[Kim Kargaard]

Hi,

I am running into an issue with my SAN storage on ovirt 4.3

I had an issue with the engine and re-installed and when I try to activate the 
SAN storage and DC (once linked) again, I get this errors:

VDSM node2 command HSMGetTaskStatusVDS failed: Cannot acquire host id: 
('fb14e013-15f1-49b6-b129-210517aca0da', SanlockException(22, 'Sanlock 
lockspace add failure', 'Invalid argument'))

Invalid status on Data Center Default. Setting status to Non Responsive.

The nodes can still all see the SAN and the LUNs.

I have tried restarting sanlock on the nodes, but the error persists. I have a 
vm with a disk on the SAN that I do not want to lose. Any thoughts?

Kind regards

Kim


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/2FCXD4S4J5VLLV7Z6BXQTICD43HAVTL3/