Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1704282

Summary: [RFE] Hosted-Engine Add option to enable Cockpit service on RHEL based ha-hosts during deployment.
Product: Red Hat Enterprise Virtualization Manager Reporter: Nikolai Sednev <nsednev>
Component: ovirt-engineAssignee: Martin Perina <mperina>
Status: CLOSED DEFERRED QA Contact: Guilherme Santos <gdeolive>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.4.0CC: didi, dougsland, eslutsky, gdeolive, lleistne, lsurette, srevivo
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-12-22 15:33:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1720896, 1721070    
Bug Blocks:    

Description Nikolai Sednev 2019-04-29 13:22:03 UTC 
Description of problem:
Currently its not possible to enable Cockpit on RHEL based ha-hosts, during deployment. 
Cockpit service comes installed on clean ha-hosts after installation of hosted-engine components, but its not loaded by default.
In order to enable Cockpit, customer has to connect to each ha-host and run as follows:
systemctl enable cockpit.socket
systemctl start cockpit
systemctl status cockpit
systemctl status cockpit.service

firewall-cmd --permanent --add-port=9090/tcp
irewall-cmd --permanent --add-port=9090/udp
firewall-cmd --reload

Asking customer to enable cockpit service during deployment would be beneficial.

Version-Release number of selected component (if applicable):
ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch
ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch
cockpit-system-173.2-1.el7.noarch
cockpit-dashboard-176-4.el7.x86_64
cockpit-173.2-1.el7.x86_64
cockpit-storaged-176-4.el7.noarch
cockpit-bridge-173.2-1.el7.x86_64
cockpit-machines-ovirt-176-4.el7.noarch
cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch
cockpit-ws-173.2-1.el7.x86_64


How reproducible:
100%

Steps to Reproduce:
1.Install ovirt-hosted-engine-setup on RHEL host.
2.Deploy hosted-engine.

Actual results:
You can't enable Cockpit during deployment.

Expected results:
Customer should be able to choose to enable Cockpit service on RHEL hosts during deployment.

Additional info:
See also https://bugzilla.redhat.com/show_bug.cgi?id=1704278 and https://bugzilla.redhat.com/show_bug.cgi?id=1495506
Comment 1 Sandro Bonazzola 2019-05-02 14:48:38 UTC 
As far as I can tell ovirt-host-deploy enables and starts cockpit service if it exist.
See https://gerrit.ovirt.org/84302
If this is not working, we have a bug, not an RFE.

Can you confirm that at the end of the deployment the cockpit service is not up and running on the hosts?
Comment 2 Nikolai Sednev 2019-05-05 11:49:48 UTC 
(In reply to Sandro Bonazzola from comment #1)
> As far as I can tell ovirt-host-deploy enables and starts cockpit service if
> it exist.
> See https://gerrit.ovirt.org/84302
> If this is not working, we have a bug, not an RFE.
> 
> Can you confirm that at the end of the deployment the cockpit service is not
> up and running on the hosts?

Its not working on RHEL servers by default, its being loaded but dead and iptables not allowing it on ha-hosts by default.
Comment 3 Evgeny Slutsky 2019-06-13 13:50:29 UTC 
Hi,
I Couldn't reproduce this issue:

version:
ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch
ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch
cockpit-storaged-176-4.el7.noarch
cockpit-dashboard-176-4.el7.x86_64
cockpit-173.2-1.el7.x86_64
cockpit-system-173.2-1.el7.noarch
cockpit-ws-173.2-1.el7.x86_64
cockpit-bridge-173.2-1.el7.x86_64
cockpit-machines-ovirt-176-4.el7.noarch
cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch

I'v installed hosted-engine using cli: ovirt-hosted-engine-setup.

cockpit service was started  during the HE deployment by the engine (host-deploy) :
https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A

2019-06-13 13:07:51,779 p=3130 u=ovirt |  TASK [ovirt-host-deploy-firewalld : Enable firewalld rules] ********************
2019-06-13 13:07:52,756 p=3130 u=ovirt |  changed: [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => {
    "changed": true, 
    "item": {
        "service": "cockpit"
    }
}

MSG:

Permanent and Non-Permanent(immediate) operation, Changed service cockpit to enabled

2019-06-13 13:07:53,786 p=3130 u=ovirt |  changed: [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => {
    "changed": true, 
    "item": {
        "service": "libvirt-tls"
    }
}



please provide host-deploy logs from the engine.
Comment 4 Nikolai Sednev 2019-06-16 05:43:43 UTC 
(In reply to Evgeny Slutsky from comment #3)
> Hi,
> I Couldn't reproduce this issue:
> 
> version:
> ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch
> ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch
> cockpit-storaged-176-4.el7.noarch
> cockpit-dashboard-176-4.el7.x86_64
> cockpit-173.2-1.el7.x86_64
> cockpit-system-173.2-1.el7.noarch
> cockpit-ws-173.2-1.el7.x86_64
> cockpit-bridge-173.2-1.el7.x86_64
> cockpit-machines-ovirt-176-4.el7.noarch
> cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch
> 
> I'v installed hosted-engine using cli: ovirt-hosted-engine-setup.
> 
> cockpit service was started  during the HE deployment by the engine
> (host-deploy) :
> https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A
> 
> 2019-06-13 13:07:51,779 p=3130 u=ovirt |  TASK [ovirt-host-deploy-firewalld
> : Enable firewalld rules] ********************
> 2019-06-13 13:07:52,756 p=3130 u=ovirt |  changed:
> [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => {
>     "changed": true, 
>     "item": {
>         "service": "cockpit"
>     }
> }
> 
> MSG:
> 
> Permanent and Non-Permanent(immediate) operation, Changed service cockpit to
> enabled
> 
> 2019-06-13 13:07:53,786 p=3130 u=ovirt |  changed:
> [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => {
>     "changed": true, 
>     "item": {
>         "service": "libvirt-tls"
>     }
> }
> 
> 
> 
> please provide host-deploy logs from the engine.

Have you tried it on latest downstream 4.3.5?
The service simply not running and firewall rules are not configured properly.
Comment 5 Evgeny Slutsky 2019-06-16 07:20:56 UTC 
(In reply to Nikolai Sednev from comment #4)
> (In reply to Evgeny Slutsky from comment #3)
> > Hi,
> > I Couldn't reproduce this issue:
> > 
> > version:
> > ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch
> > ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch
> > cockpit-storaged-176-4.el7.noarch
> > cockpit-dashboard-176-4.el7.x86_64
> > cockpit-173.2-1.el7.x86_64
> > cockpit-system-173.2-1.el7.noarch
> > cockpit-ws-173.2-1.el7.x86_64
> > cockpit-bridge-173.2-1.el7.x86_64
> > cockpit-machines-ovirt-176-4.el7.noarch
> > cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch
> > 
> > I'v installed hosted-engine using cli: ovirt-hosted-engine-setup.
> > 
> > cockpit service was started  during the HE deployment by the engine
> > (host-deploy) :
> > https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A
> > 
> > 2019-06-13 13:07:51,779 p=3130 u=ovirt |  TASK [ovirt-host-deploy-firewalld
> > : Enable firewalld rules] ********************
> > 2019-06-13 13:07:52,756 p=3130 u=ovirt |  changed:
> > [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => {
> >     "changed": true, 
> >     "item": {
> >         "service": "cockpit"
> >     }
> > }
> > 
> > MSG:
> > 
> > Permanent and Non-Permanent(immediate) operation, Changed service cockpit to
> > enabled
> > 
> > 2019-06-13 13:07:53,786 p=3130 u=ovirt |  changed:
> > [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => {
> >     "changed": true, 
> >     "item": {
> >         "service": "libvirt-tls"
> >     }
> > }
> > 
> > 
> > 
> > please provide host-deploy logs from the engine.
> 
> Have you tried it on latest downstream 4.3.5?
> The service simply not running and firewall rules are not configured
> properly.

Yes,
I've installed it on RHEL 7.6 Latest Downstream version from public channels.
Comment 6 Evgeny Slutsky 2019-06-16 11:41:57 UTC 
(In reply to Evgeny Slutsky from comment #5)
> (In reply to Nikolai Sednev from comment #4)
> > (In reply to Evgeny Slutsky from comment #3)
> > > Hi,
> > > I Couldn't reproduce this issue:
> > > 
> > > version:
> > > ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch
> > > ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch
> > > cockpit-storaged-176-4.el7.noarch
> > > cockpit-dashboard-176-4.el7.x86_64
> > > cockpit-173.2-1.el7.x86_64
> > > cockpit-system-173.2-1.el7.noarch
> > > cockpit-ws-173.2-1.el7.x86_64
> > > cockpit-bridge-173.2-1.el7.x86_64
> > > cockpit-machines-ovirt-176-4.el7.noarch
> > > cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch
> > > 
> > > I'v installed hosted-engine using cli: ovirt-hosted-engine-setup.
> > > 
> > > cockpit service was started  during the HE deployment by the engine
> > > (host-deploy) :
> > > https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A
> > > 
> > > 2019-06-13 13:07:51,779 p=3130 u=ovirt |  TASK [ovirt-host-deploy-firewalld
> > > : Enable firewalld rules] ********************
> > > 2019-06-13 13:07:52,756 p=3130 u=ovirt |  changed:
> > > [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => {
> > >     "changed": true, 
> > >     "item": {
> > >         "service": "cockpit"
> > >     }
> > > }
> > > 
> > > MSG:
> > > 
> > > Permanent and Non-Permanent(immediate) operation, Changed service cockpit to
> > > enabled
> > > 
> > > 2019-06-13 13:07:53,786 p=3130 u=ovirt |  changed:
> > > [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => {
> > >     "changed": true, 
> > >     "item": {
> > >         "service": "libvirt-tls"
> > >     }
> > > }
> > > 
> > > 
> > > 
> > > please provide host-deploy logs from the engine.
> > 
> > Have you tried it on latest downstream 4.3.5?
> > The service simply not running and firewall rules are not configured
> > properly.
> 
> Yes,
> I've installed it on RHEL 7.6 Latest Downstream version from public channels.

I found related issue that cockpit.socket is not configured to run after reboot:
[root@hosted-engine ~]# systemctl status cockpit.socket
● cockpit.socket - Cockpit Web Service Socket
   Loaded: loaded (/usr/lib/systemd/system/cockpit.socket; disabled; vendor preset: disabled)
   Active: inactive (dead)
     Docs: man:cockpit-ws(8)
   Listen: [::]:9090 (Stream)
Comment 7 Nikolai Sednev 2019-06-16 12:44:06 UTC 
Exactly.
Comment 8 Evgeny Slutsky 2019-06-17 06:40:26 UTC 
not relevant patch, moving back to Assigned.
Comment 9 Yedidyah Bar David 2019-06-17 07:38:01 UTC 
*** Bug 1712242 has been marked as a duplicate of this bug. ***
Comment 10 Sandro Bonazzola 2019-07-11 07:02:23 UTC 
Re-targeting to 4.3.6 not being identified as blocker for 4.3.5.
Comment 11 Sandro Bonazzola 2019-12-17 12:58:18 UTC 
Moving out to 4.5 and back to NEW state.
In 4.4 we are not going to use ovirt-host-deploy anymore for deploying hosts and the current patch won't be useful.
We are late in the 4.4 schedule and not being an urgent RFE, moving this out to 4.5.
Comment 12 Michal Skrivanek 2021-08-20 08:27:25 UTC 
This bug/RFE is more than 2 years old and it didn't get enough attention so far, and is now flagged as pending close. 
Please review if it is still relevant and provide additional details/justification/patches if you believe it should get more attention for the next oVirt release.
Comment 15 Martin Perina 2021-12-22 15:33:34 UTC 
Cockpit is not used by any RHV functionality, closing as deferred