Thanks Francesco, it looks like a fix has been put into oVirt 4.5 which is 
scheduled for general release on the 12th April.

I’m using an oVirt Node ISO (4.4.10) install on the host are you doing the same 
or did you install oVirt on top of a standard centos install yourself?

I did try a dnf downgrade libvirt but it said there were no previous packages 
available. Just doing a re-install so will try your provided commands in a 
moment.

Cheers,

Chris.

From: Francesco Lorenzini <france...@shellrent.com>
Sent: 14 March 2022 17:23
To: Christopher Law <ch...@chrislaw.me>; Milan Zamazal <mzama...@redhat.com>
Cc: francesco--- via Users <users@ovirt.org>
Subject: Re: [ovirt-users] Re: Console - VNC password is 12 characters long, 
only 8 permitted

Hi Crhis,

I didn't resolve properly, I found that downgrading libvirt was the fastest 
workaround.

Just downgrade libvirt via yum/dnf to to version 7.10.  I added the downgrade 
in an Ansible task, if you are practical:

- name: Ensure libvirt-7.10.0 is installed
  yum:
    name: libvirt-7.10.0
    state: present
    update_cache: true
    allow_downgrade: true
  ignore_errors: true

or via cli :

yum install libvirt-7.10.0


Post dowgrade we performed a restart of vdsm (or super-vdsm, or both, I don't 
remember). The downgrade is quite safe, we didn't encounter any problem with 
existing hosts and new deployed one.

Francesco

Il 14/03/2022 15:58, Christopher Law ha scritto:

Hi -



Did anyone get a solution to this. I just upgraded our physical ovirt-engine to 
4.4.10 and added a freshly installed oVirt Node 4.4.10, and I'm getting this 
issue.



Given libvirt8 is part of oVirt Node 4.4.10 base install I was hoping for a 
fix. Also seen a fix applied here: 
https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b701105f9e1066b09f
 but not sure if this has been released?



What are my options, not quite sure how to downgrade libvirt in oVirt Node. I 
was planning on trying to install 4.4.9, but not sure if the ansible scripts 
will update it automatically when adding it to the cluster.



Francesco - Did you get this resolved?



Cheers,



Chris.



-----Original Message-----

From: Milan Zamazal <mzama...@redhat.com><mailto:mzama...@redhat.com>

Sent: 14 February 2022 18:04

To: Francesco Lorenzini 
<france...@shellrent.com><mailto:france...@shellrent.com>

Cc: francesco--- via Users <users@ovirt.org><mailto:users@ovirt.org>

Subject: [ovirt-users] Re: Console - VNC password is 12 characters long, only 8 
permitted



Francesco Lorenzini <france...@shellrent.com><mailto:france...@shellrent.com> 
writes:



Hi Milan,



thank you for your answer.



So there is no other way/workaround? We must wait the fix in the

engine and then upgrade? Maybe a downgrade of libvirt(?).



I can't think about any other workaround, without modifying sources, than 
downgrading libvirt, until the fixed Engine is installed.



I was looking up some config file in the host under /etc/libvirt and

found the parameters vnc_password in qemu.conf file. I'm not sure that

setting a password per host in this config file works, casue it is

still passed via xml...



In theory, you could set the default password there and remove passwords from 
the domain XMLs using Vdsm hooks.  You would have to do it on all the hosts or 
handle migrations accordingly.  Downgrading libvirt looks much easier.



The default VNC password. Only 8 bytes are significant for # VNC

passwords. This parameter is only used if the per-domain # XML config

does not already provide a password.



Francesco



Il 14/02/2022 12:41, Milan Zamazal ha scritto:

francesco--- via Users<users@ovirt.org><mailto:users@ovirt.org>  writes:



Hi all,



I'm using websockify + noVNC for expose the vm console via browser getting  the 
graphicsconsoles ticket via API. Everything works fine for every other host 
that I have (more than 200), the console works either via oVirt engine and via 
browser) but just for a single host (CentOS Stream release 8, oVirt 4.4.9) the 
console works only via engine but when I try the connection via browser I get 
the following error (vdsm log of the host):



  ERROR FINISH updateDevice error=unsupported configuration: VNC password is 12 
characters long, only 8 permitted

  Traceback (most recent call last):

    File "/usr/lib/python3.6/site-packages/vdsm/common/api.py", line 124, in 
method

      ret = func(*args, **kwargs)

    File "/usr/lib/python3.6/site-packages/vdsm/API.py", line 372, in 
updateDevice

      return self.vm.updateDevice(params)

    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3389, in 
updateDevice

      return self._updateGraphicsDevice(params)

    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 3365, in 
_updateGraphicsDevice

      params['params']

    File "/usr/lib/python3.6/site-packages/vdsm/virt/vm.py", line 5169, in 
_setTicketForGraphicDev

      self._dom.updateDeviceFlags(xmlutils.tostring(graphics), 0)

    File "/usr/lib/python3.6/site-packages/vdsm/virt/virdomain.py", line 101, 
in f

      ret = attr(*args, **kwargs)

    File "/usr/lib/python3.6/site-packages/vdsm/common/libvirtconnection.py", 
line 131, in wrapper

      ret = f(*args, **kwargs)

    File "/usr/lib/python3.6/site-packages/vdsm/common/function.py", line 94, 
in wrapper

      return func(inst, *args, **kwargs)

    File "/usr/lib64/python3.6/site-packages/libvirt.py", line 3244, in 
updateDeviceFlags

      raise libvirtError('virDomainUpdateDeviceFlags() failed')

  libvirt.libvirtError: unsupported configuration: VNC password is

12 characters long, only 8 permitted





The error is pretty much self explanatory but, I can't manage to

figure out why only on this server

Hi,



this happens with libvirt 8.0.



and I wonder if I can set the length of the generated vnc password

somewhere.

I don't think so, it must be fixed in Engine.  See

https://github.com/oVirt/ovirt-engine/commit/a1e7e39348550b575f1f01b7

01105f9e1066b09f

for more details.



Regards,

Milan

_______________________________________________

Users mailing list --users@ovirt.org<mailto:--users@ovirt.org>

To unsubscribe send an email 
tousers-le...@ovirt.org<mailto:tousers-le...@ovirt.org> Privacy

Statement:https://www.ovirt.org/privacy-policy.html

oVirt Code of

Conduct:https://www.ovirt.org/community/about/community-guidelines/

List

Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/messag

e/XJMULDXFHBYK3GNICAJRASQCSLBIFJV7/

_______________________________________________

Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>

To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org> Privacy Statement: 
https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/

List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CE3A2WTEHVE2NPMPYTQS5WAVHEESND4X/

_______________________________________________

Users mailing list -- users@ovirt.org<mailto:users@ovirt.org>

To unsubscribe send an email to 
users-le...@ovirt.org<mailto:users-le...@ovirt.org>

Privacy Statement: https://www.ovirt.org/privacy-policy.html

oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/

List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ESU5O3JPYMOWWE6MFKL4JYYD5G3ND4SM/

--
--


[Shellrent - Il primo hosting italiano Security                      First]
Francesco Lorenzini
System Administrator & DevOps Engineer
Shellrent Srl
Via dell'Edilizia, 19 - 36100 Vicenza
Tel. 0444321155<tel:+390444321155>

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5DPNKIT6TEXYHXV6RYSKJPNQYYYQPA5J/

Reply via email to