[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-02-14 Thread Milan Zamazal
francesco--- via Users  writes:

> Hi all,
>
> I'm using websockify + noVNC for expose the vm console via browser getting  
> the graphicsconsoles ticket via API. Everything works fine for every other 
> host that I have (more than 200), the console works either via oVirt engine 
> and via browser) but just for a single host (CentOS Stream release 8, oVirt 
> 4.4.9) the console works only via engine but when I try the connection via 
> browser I get the following error (vdsm log of the host):
>
>  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 
> 12 characters long, only 8 permitted 
>  Traceback (most recent call last):   
>
>File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in 
> method   
>  ret = func(*args, **kwargs)  
>
>File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
> updateDevice
>  return self.vm.updateDevice(params)  
>
>File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
> updateDevice   
>  return self._updateGraphicsDevice(params)
>
>File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
> _updateGraphicsDevice  
>  params['params'] 
>
>File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
> _setTicketForGraphicDev
>  self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)  
>
>File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, 
> in f
>  ret = attr(*args, **kwargs)  
>
>File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", 
> line 131, in wrapper
>  ret = f(*args, **kwargs) 
>
>File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, 
> in wrapper  
>  return func(inst, *args, **kwargs)   
>
>File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
> updateDeviceFlags 
>  raise libvirtError('virDomainUpdateDeviceFlags() failed')
>
>  libvirt.libvirtError: unsupported configuration: VNC password is 12 
> characters long, only 8 permitted
>
>
> The error is pretty much self explanatory but, I can't manage to
> figure out why only on this server

Hi,

this happens with libvirt 8.0.

> and I wonder if I can set the length of the generated vnc password
> somewhere.

I don't think so, it must be fixed in Engine.  See
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
for more details.

Regards,
Milan
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/


[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-02-14 Thread Francesco Lorenzini via Users

Hi Milan,

thank you for your answer.

So there is no other way/workaround? We must wait the fix in the engine 
and then upgrade? Maybe a downgrade of libvirt(?).


I was looking up some config file in the host under /etc/libvirt and 
found the parameters vnc_password in qemu.conf file. I'm not sure that 
setting a password per host in this config file works, casue it is still 
passed via xml...




The default VNC password. Only 8 bytes are significant for
# VNC passwords. This parameter is only used if the per-domain
# XML config does not already provide a password.


Francesco

Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users  writes:


Hi all,

I'm using websockify + noVNC for expose the vm console via browser getting  the 
graphicsconsoles ticket via API. Everything works fine for every other host 
that I have (more than 200), the console works either via oVirt engine and via 
browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the 
console works only via engine but when I try the connection via browser I get 
the following error (vdsm log of the host):

  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 
characters long, only 8 permitted
  Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in 
method
  ret = func(*args, **kwargs)
File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
updateDevice
  return self.vm.updateDevice(params)
File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
updateDevice
  return self._updateGraphicsDevice(params)
File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
_updateGraphicsDevice
  params['params']
File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
_setTicketForGraphicDev
  self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, 
in f
  ret = attr(*args, **kwargs)
File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", 
line 131, in wrapper
  ret = f(*args, **kwargs)
File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, 
in wrapper
  return func(inst, *args, **kwargs)
File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
updateDeviceFlags
  raise libvirtError('virDomainUpdateDeviceFlags() failed')
  libvirt.libvirtError: unsupported configuration: VNC password is 12 
characters long, only 8 permitted


The error is pretty much self explanatory but, I can't manage to
figure out why only on this server

Hi,

this happens with libvirt 8.0.


and I wonder if I can set the length of the generated vnc password
somewhere.

I don't think so, it must be fixed in Engine.  See
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
for more details.

Regards,
Milan
___
Users mailing list --users@ovirt.org
To unsubscribe send an email tousers-le...@ovirt.org
Privacy Statement:https://www.ovirt.org/privacy-policy.html
oVirt Code of 
Conduct:https://www.ovirt.org/community/about/community-guidelines/
List 
Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/


--
--  
Shellrent - Il primo hosting italiano Security First

*Francesco Lorenzini*
/System Administrator & DevOps Engineer/
Shellrent Srl
Via dell'Edilizia, 19 - 36100 Vicenza
Tel. 0444321155  | Fax 04441492177
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IXZ5I2WT7LHWJYAKA7KWTSKPSBDIX4QK/


[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-02-14 Thread Milan Zamazal
Francesco Lorenzini  writes:

> Hi Milan,
>
> thank you for your answer.
>
> So there is no other way/workaround? We must wait the fix in the
> engine and then upgrade? Maybe a downgrade of libvirt(?).

I can't think about any other workaround, without modifying sources,
than downgrading libvirt, until the fixed Engine is installed.

> I was looking up some config file in the host under /etc/libvirt and
> found the parameters vnc_password in qemu.conf file. I'm not sure that 
> setting a password per host in this config file works, casue it is
> still passed via xml...

In theory, you could set the default password there and remove passwords
from the domain XMLs using Vdsm hooks.  You would have to do it on all
the hosts or handle migrations accordingly.  Downgrading libvirt looks
much easier.

>> The default VNC password. Only 8 bytes are significant for
>> # VNC passwords. This parameter is only used if the per-domain
>> # XML config does not already provide a password.
>
> Francesco
>
> Il 14/02/2022 12:41, Milan Zamazal ha scritto:
>> francesco--- via Users  writes:
>>
>>> Hi all,
>>>
>>> I'm using websockify + noVNC for expose the vm console via browser getting  
>>> the graphicsconsoles ticket via API. Everything works fine for every other 
>>> host that I have (more than 200), the console works either via oVirt engine 
>>> and via browser) but just for a single host (CentOS Stream release 8, oVirt 
>>> 4.4.9) the console works only via engine but when I try the connection via 
>>> browser I get the following error (vdsm log of the host):
>>>
>>>   ERROR FINISH updateDevice error=unsupported configuration: VNC password 
>>> is 12 characters long, only 8 permitted
>>>   Traceback (most recent call last):
>>> File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, 
>>> in method
>>>   ret = func(*args, **kwargs)
>>> File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
>>> updateDevice
>>>   return self.vm.updateDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
>>> updateDevice
>>>   return self._updateGraphicsDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
>>> _updateGraphicsDevice
>>>   params['params']
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
>>> _setTicketForGraphicDev
>>>   self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 
>>> 101, in f
>>>   ret = attr(*args, **kwargs)
>>> File 
>>> "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 
>>> 131, in wrapper
>>>   ret = f(*args, **kwargs)
>>> File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 
>>> 94, in wrapper
>>>   return func(inst, *args, **kwargs)
>>> File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
>>> updateDeviceFlags
>>>   raise libvirtError('virDomainUpdateDeviceFlags() failed')
>>>   libvirt.libvirtError: unsupported configuration: VNC password is 12 
>>> characters long, only 8 permitted
>>>
>>>
>>> The error is pretty much self explanatory but, I can't manage to
>>> figure out why only on this server
>> Hi,
>>
>> this happens with libvirt 8.0.
>>
>>> and I wonder if I can set the length of the generated vnc password
>>> somewhere.
>> I don't think so, it must be fixed in Engine.  See
>> https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
>> for more details.
>>
>> Regards,
>> Milan
>> ___
>> Users mailing list --users@ovirt.org
>> To unsubscribe send an email tousers-le...@ovirt.org
>> Privacy Statement:https://www.ovirt.org/privacy-policy.html
>> oVirt Code of 
>> Conduct:https://www.ovirt.org/community/about/community-guidelines/
>> List
>> Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE3A2WTEHVE2NPMPYTQS5WAVHEESND4X/


[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-03-14 Thread Christopher Law
Hi -

Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 
4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this 
issue.

Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied here: 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
 but not sure if this has been released?

What are my options, not quite sure how to downgrade libvirt in oVirt Node. I 
was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.

Francesco - Did you get this resolved?

Cheers,

Chris.

-Original Message-
From: Milan Zamazal  
Sent: 14 February 2022 18:04
To: Francesco Lorenzini 
Cc: francesco--- via Users 
Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 
permitted

Francesco Lorenzini  writes:

> Hi Milan,
>
> thank you for your answer.
>
> So there is no other way/workaround? We must wait the fix in the 
> engine and then upgrade? Maybe a downgrade of libvirt(?).

I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.

> I was looking up some config file in the host under /etc/libvirt and 
> found the parameters vnc_password in qemu.conf file. I'm not sure that 
> setting a password per host in this config file works, casue it is 
> still passed via xml...

In theory, you could set the default password there and remove passwords from 
the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or 
handle migrations accordingly.  Downgrading libvirt looks much easier.

>> The default VNC password. Only 8 bytes are significant for # VNC 
>> passwords. This parameter is only used if the per-domain # XML config 
>> does not already provide a password.
>
> Francesco
>
> Il 14/02/2022 12:41, Milan Zamazal ha scritto:
>> francesco--- via Users  writes:
>>
>>> Hi all,
>>>
>>> I'm using websockify + noVNC for expose the vm console via browser getting  
>>> the graphicsconsoles ticket via API. Everything works fine for every other 
>>> host that I have (more than 200), the console works either via oVirt engine 
>>> and via browser) but just for a single host (CentOS Stream release 8, oVirt 
>>> 4.4.9) the console works only via engine but when I try the connection via 
>>> browser I get the following error (vdsm log of the host):
>>>
>>>   ERROR FINISH updateDevice error=unsupported configuration: VNC password 
>>> is 12 characters long, only 8 permitted
>>>   Traceback (most recent call last):
>>> File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, 
>>> in method
>>>   ret = func(*args, **kwargs)
>>> File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
>>> updateDevice
>>>   return self.vm.updateDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
>>> updateDevice
>>>   return self._updateGraphicsDevice(params)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
>>> _updateGraphicsDevice
>>>   params['params']
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
>>> _setTicketForGraphicDev
>>>   self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
>>> File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 
>>> 101, in f
>>>   ret = attr(*args, **kwargs)
>>> File 
>>> "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", line 
>>> 131, in wrapper
>>>   ret = f(*args, **kwargs)
>>> File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 
>>> 94, in wrapper
>>>   return func(inst, *args, **kwargs)
>>> File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
>>> updateDeviceFlags
>>>   raise libvirtError('virDomainUpdateDeviceFlags() failed')
>>>   libvirt.libvirtError: unsupported configuration: VNC password is 
>>> 12 characters long, only 8 permitted
>>>
>>>
>>> The error is pretty much self explanatory but, I can't manage to 
>>> figure out why only on this server
>> Hi,
>>
>> this happens with libvirt 8.0.
>>
>>> and I wonder if I can set the length of 

[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-03-14 Thread Francesco Lorenzini via Users

Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the 
fastest workaround.


Just downgrade libvirt via yum/dnf to to version 7.10.  I added the 
downgrade in an Ansible task, if you are practical:


- name: Ensure libvirt-7.10.0 is installed
  yum:
    name: libvirt-7.10.0
    state: present
    update_cache: true
    allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I 
don't remember). The downgrade is quite safe, we didn't encounter any 
problem with existing hosts and new deployed one.


Francesco


Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -

Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 
4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this 
issue.

Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied 
here:https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
  but not sure if this has been released?

What are my options, not quite sure how to downgrade libvirt in oVirt Node. I 
was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.

Francesco - Did you get this resolved?

Cheers,

Chris.

-Original Message-
From: Milan Zamazal  
Sent: 14 February 2022 18:04

To: Francesco Lorenzini
Cc: francesco--- via Users
Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 
permitted

Francesco Lorenzini  writes:


Hi Milan,

thank you for your answer.

So there is no other way/workaround? We must wait the fix in the
engine and then upgrade? Maybe a downgrade of libvirt(?).

I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.


I was looking up some config file in the host under /etc/libvirt and
found the parameters vnc_password in qemu.conf file. I'm not sure that
setting a password per host in this config file works, casue it is
still passed via xml...

In theory, you could set the default password there and remove passwords from 
the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or 
handle migrations accordingly.  Downgrading libvirt looks much easier.


The default VNC password. Only 8 bytes are significant for # VNC
passwords. This parameter is only used if the per-domain # XML config
does not already provide a password.

Francesco

Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users   writes:


Hi all,

I'm using websockify + noVNC for expose the vm console via browser getting  the 
graphicsconsoles ticket via API. Everything works fine for every other host 
that I have (more than 200), the console works either via oVirt engine and via 
browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the 
console works only via engine but when I try the connection via browser I get 
the following error (vdsm log of the host):

   ERROR FINISH updateDevice error=unsupported configuration: VNC password is 
12 characters long, only 8 permitted
   Traceback (most recent call last):
 File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in 
method
   ret = func(*args, **kwargs)
 File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
updateDevice
   return self.vm.updateDevice(params)
 File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
updateDevice
   return self._updateGraphicsDevice(params)
 File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
_updateGraphicsDevice
   params['params']
 File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
_setTicketForGraphicDev
   self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)
 File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, 
in f
   ret = attr(*args, **kwargs)
 File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", 
line 131, in wrapper
   ret = f(*args, **kwargs)
 File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, 
in wrapper
   return func(inst, *args, **kwargs)
 File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
updateDeviceFlags
   raise libvirtError('virDomainUpdateDeviceFlags() failed')
   libvirt.libvirtError: unsupported configuration: VNC password is
12 characters long, only 8 permitted


The error is pretty much self explanatory but, I can't manage to
figure out why only on this server

Hi,

this happens with libvirt 8.0.


and I wonder if I can set the length of the generated vnc password
somewhere.

I don't think so

[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-03-14 Thread Christopher Law
Thanks Francesco, it looks like a fix has been put into oVirt 4.5 which is 
scheduled for general release on the 12th April.

I’m using an oVirt Node ISO (4.4.10) install on the host are you doing the same 
or did you install oVirt on top of a standard centos install yourself?

I did try a dnf downgrade libvirt but it said there were no previous packages 
available. Just doing a re-install so will try your provided commands in a 
moment.

Cheers,

Chris.

From: Francesco Lorenzini 
Sent: 14 March 2022 17:23
To: Christopher Law ; Milan Zamazal 
Cc: francesco--- via Users 
Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, 
only 8 permitted

Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the fastest 
workaround.

Just downgrade libvirt via yum/dnf to to version 7.10.  I added the downgrade 
in an Ansible task, if you are practical:

- name: Ensure libvirt-7.10.0 is installed
  yum:
name: libvirt-7.10.0
state: present
update_cache: true
allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I don't 
remember). The downgrade is quite safe, we didn't encounter any problem with 
existing hosts and new deployed one.

Francesco

Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -



Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 
4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this 
issue.



Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied here: 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
 but not sure if this has been released?



What are my options, not quite sure how to downgrade libvirt in oVirt Node. I 
was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.



Francesco - Did you get this resolved?



Cheers,



Chris.



-Original Message-

From: Milan Zamazal <mailto:mzama...@redhat.com>

Sent: 14 February 2022 18:04

To: Francesco Lorenzini 
<mailto:france...@shellrent.com>

Cc: francesco--- via Users <mailto:users@ovirt.org>

Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 
permitted



Francesco Lorenzini <mailto:france...@shellrent.com> 
writes:



Hi Milan,



thank you for your answer.



So there is no other way/workaround? We must wait the fix in the

engine and then upgrade? Maybe a downgrade of libvirt(?).



I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.



I was looking up some config file in the host under /etc/libvirt and

found the parameters vnc_password in qemu.conf file. I'm not sure that

setting a password per host in this config file works, casue it is

still passed via xml...



In theory, you could set the default password there and remove passwords from 
the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or 
handle migrations accordingly.  Downgrading libvirt looks much easier.



The default VNC password. Only 8 bytes are significant for # VNC

passwords. This parameter is only used if the per-domain # XML config

does not already provide a password.



Francesco



Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users<mailto:users@ovirt.org>  writes:



Hi all,



I'm using websockify + noVNC for expose the vm console via browser getting  the 
graphicsconsoles ticket via API. Everything works fine for every other host 
that I have (more than 200), the console works either via oVirt engine and via 
browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the 
console works only via engine but when I try the connection via browser I get 
the following error (vdsm log of the host):



  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 
characters long, only 8 permitted

  Traceback (most recent call last):

File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in 
method

  ret = func(*args, **kwargs)

File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
updateDevice

  return self.vm.updateDevice(params)

File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
updateDevice

  return self._updateGraphicsDevice(params)

File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
_updateGraphicsDevice

  params['params']

File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
_setTicketForGraphicDev

  self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)

File "/usr/lib/python3.6/site-packages/v

[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-03-15 Thread Francesco Lorenzini via Users

Hi Chris (sorry for the previous mispel),

I installed oVirt 4.4.8 on top on CentOS 8 (Stream and standard), never 
used Node ISO. Maybe enabling external repo? In a "test" server try to 
install the following rpm and then downgrade libvirt:


http://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm

Regards,
Francesco

Il 14/03/2022 18:31, Christopher Law ha scritto:


Thanks Francesco, it looks like a fix has been put into oVirt 4.5 
which is scheduled for general release on the 12^th April.


I’m using an oVirt Node ISO (4.4.10) install on the host are you doing 
the same or did you install oVirt on top of a standard centos install 
yourself?


I did try a dnf downgrade libvirt but it said there were no previous 
packages available. Just doing a re-install so will try your provided 
commands in a moment.


Cheers,

Chris.

*From:*Francesco Lorenzini 
*Sent:* 14 March 2022 17:23
*To:* Christopher Law ; Milan Zamazal 


*Cc:* francesco--- via Users 
*Subject:* Re: [ovirt-users] Re: Console - VNC password is 12 
characters long, only 8 permitted


Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the 
fastest workaround.


Just downgrade libvirt via yum/dnf to to version 7.10.  I added the 
downgrade in an Ansible task, if you are practical:


- name: Ensure libvirt-7.10.0 is installed
  yum:
    name: libvirt-7.10.0
    state: present
    update_cache: true
    allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, 
I don't remember). The downgrade is quite safe, we didn't encounter 
any problem with existing hosts and new deployed one.


Francesco

Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -

Did anyone get a solution to this. I just upgraded our physical 
ovirt-engine to 4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm 
getting this issue.

Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied 
here:https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
  but not sure if this has been released?

What are my options, not quite sure how to downgrade libvirt in oVirt Node. 
I was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.

Francesco - Did you get this resolved?

Cheers,

Chris.

-Original Message-

From: Milan Zamazal  <mailto:mzama...@redhat.com>  


Sent: 14 February 2022 18:04

To: Francesco Lorenzini  
<mailto:france...@shellrent.com>

Cc: francesco--- via Users  <mailto:users@ovirt.org>

Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, 
only 8 permitted

Francesco Lorenzini  
<mailto:france...@shellrent.com>  writes:

Hi Milan,

thank you for your answer.

So there is no other way/workaround? We must wait the fix in the

engine and then upgrade? Maybe a downgrade of libvirt(?).

I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.

I was looking up some config file in the host under /etc/libvirt and

found the parameters vnc_password in qemu.conf file. I'm not sure that

setting a password per host in this config file works, casue it is

still passed via xml...

In theory, you could set the default password there and remove passwords 
from the domain XMLs using Vdsm hooks.  You would have to do it on all the 
hosts or handle migrations accordingly.  Downgrading libvirt looks much easier.

The default VNC password. Only 8 bytes are significant for # VNC

passwords. This parameter is only used if the per-domain # XML 
config

does not already provide a password.

Francesco

Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users  <mailto:users@ovirt.org>   
writes:

Hi all,

I'm using websockify + noVNC for expose the vm console via 
browser getting  the graphicsconsoles ticket via API. Everything works fine for 
every other host that I have (more than 200), the console works either via 
oVirt engine and via browser) but just for a single host (CentOS Stream release 
8, oVirt 4.4.9) the console works only via engine but when I try the connection 
via browser I get the following error (vdsm log of the host):

   ERROR FINISH updateDevice error=unsupported configuration: 
VNC password is 12 characters long, only 8 permitted

   Traceback (most recent call last):

     File 
"/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in method

   ret = func(*args, **kwargs)

  

[ovirt-users] Re: Console - VNC password is 12 characters long, only 8 permitted

2022-03-15 Thread Christopher Law
Hi Francesco –

I was using the latest oVirt Node ISO Image 4.4.10 (released on 3rd March), I 
believe this is a genuine bug in the oVirt Node ISO they have included libvirt 
8!

I reinstalled with the February release of oVirt Node ISO (same version 4.4.10) 
which has libvirt 7.10.0 and this has worked! So, my problem is resolved.

I’ll look to raise a bug report when I get a minute.

Cheers,

Chris.

From: Francesco Lorenzini 
Sent: 15 March 2022 08:14
To: Christopher Law ; Milan Zamazal 
Cc: francesco--- via Users 
Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, 
only 8 permitted

Hi Chris (sorry for the previous mispel),

I installed oVirt 4.4.8 on top on CentOS 8 (Stream and standard), never used 
Node ISO. Maybe enabling external repo? In a "test" server try to install the 
following rpm and then downgrade libvirt:

http://resources.ovirt.org/pub/yum-repo/ovirt-release44.rpm

Regards,
Francesco
Il 14/03/2022 18:31, Christopher Law ha scritto:
Thanks Francesco, it looks like a fix has been put into oVirt 4.5 which is 
scheduled for general release on the 12th April.

I’m using an oVirt Node ISO (4.4.10) install on the host are you doing the same 
or did you install oVirt on top of a standard centos install yourself?

I did try a dnf downgrade libvirt but it said there were no previous packages 
available. Just doing a re-install so will try your provided commands in a 
moment.

Cheers,

Chris.

From: Francesco Lorenzini 
<mailto:france...@shellrent.com>
Sent: 14 March 2022 17:23
To: Christopher Law <mailto:ch...@chrislaw.me>; Milan 
Zamazal <mailto:mzama...@redhat.com>
Cc: francesco--- via Users <mailto:users@ovirt.org>
Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, 
only 8 permitted

Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the fastest 
workaround.

Just downgrade libvirt via yum/dnf to to version 7.10.  I added the downgrade 
in an Ansible task, if you are practical:

- name: Ensure libvirt-7.10.0 is installed
  yum:
name: libvirt-7.10.0
state: present
update_cache: true
allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I don't 
remember). The downgrade is quite safe, we didn't encounter any problem with 
existing hosts and new deployed one.

Francesco


Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -



Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 
4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this 
issue.



Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied here: 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
 but not sure if this has been released?



What are my options, not quite sure how to downgrade libvirt in oVirt Node. I 
was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.



Francesco - Did you get this resolved?



Cheers,



Chris.



-Original Message-

From: Milan Zamazal <mailto:mzama...@redhat.com>

Sent: 14 February 2022 18:04

To: Francesco Lorenzini 
<mailto:france...@shellrent.com>

Cc: francesco--- via Users <mailto:users@ovirt.org>

Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 
permitted



Francesco Lorenzini <mailto:france...@shellrent.com> 
writes:



Hi Milan,



thank you for your answer.



So there is no other way/workaround? We must wait the fix in the

engine and then upgrade? Maybe a downgrade of libvirt(?).



I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.



I was looking up some config file in the host under /etc/libvirt and

found the parameters vnc_password in qemu.conf file. I'm not sure that

setting a password per host in this config file works, casue it is

still passed via xml...



In theory, you could set the default password there and remove passwords from 
the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or 
handle migrations accordingly.  Downgrading libvirt looks much easier.



The default VNC password. Only 8 bytes are significant for # VNC

passwords. This parameter is only used if the per-domain # XML config

does not already provide a password.



Francesco



Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users<mailto:users@ovirt.org>  writes:



Hi all,



I'm using websockify + noVNC for expose the vm console via browser getting  the 
graphicsconsoles ticket via API. Everything works fine for every other host 
that I have (more than 200), the console works either via oVirt engine and via 
browser) but just for a s