Description of problem: Currently its not possible to enable Cockpit on RHEL based ha-hosts, during deployment. Cockpit service comes installed on clean ha-hosts after installation of hosted-engine components, but its not loaded by default. In order to enable Cockpit, customer has to connect to each ha-host and run as follows: systemctl enable cockpit.socket systemctl start cockpit systemctl status cockpit systemctl status cockpit.service firewall-cmd --permanent --add-port=9090/tcp irewall-cmd --permanent --add-port=9090/udp firewall-cmd --reload Asking customer to enable cockpit service during deployment would be beneficial. Version-Release number of selected component (if applicable): ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch cockpit-system-173.2-1.el7.noarch cockpit-dashboard-176-4.el7.x86_64 cockpit-173.2-1.el7.x86_64 cockpit-storaged-176-4.el7.noarch cockpit-bridge-173.2-1.el7.x86_64 cockpit-machines-ovirt-176-4.el7.noarch cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch cockpit-ws-173.2-1.el7.x86_64 How reproducible: 100% Steps to Reproduce: 1.Install ovirt-hosted-engine-setup on RHEL host. 2.Deploy hosted-engine. Actual results: You can't enable Cockpit during deployment. Expected results: Customer should be able to choose to enable Cockpit service on RHEL hosts during deployment. Additional info: See also https://bugzilla.redhat.com/show_bug.cgi?id=1704278 and https://bugzilla.redhat.com/show_bug.cgi?id=1495506
As far as I can tell ovirt-host-deploy enables and starts cockpit service if it exist. See https://gerrit.ovirt.org/84302 If this is not working, we have a bug, not an RFE. Can you confirm that at the end of the deployment the cockpit service is not up and running on the hosts?
(In reply to Sandro Bonazzola from comment #1) > As far as I can tell ovirt-host-deploy enables and starts cockpit service if > it exist. > See https://gerrit.ovirt.org/84302 > If this is not working, we have a bug, not an RFE. > > Can you confirm that at the end of the deployment the cockpit service is not > up and running on the hosts? Its not working on RHEL servers by default, its being loaded but dead and iptables not allowing it on ha-hosts by default.
Hi, I Couldn't reproduce this issue: version: ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch cockpit-storaged-176-4.el7.noarch cockpit-dashboard-176-4.el7.x86_64 cockpit-173.2-1.el7.x86_64 cockpit-system-173.2-1.el7.noarch cockpit-ws-173.2-1.el7.x86_64 cockpit-bridge-173.2-1.el7.x86_64 cockpit-machines-ovirt-176-4.el7.noarch cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch I'v installed hosted-engine using cli: ovirt-hosted-engine-setup. cockpit service was started during the HE deployment by the engine (host-deploy) : https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A 2019-06-13 13:07:51,779 p=3130 u=ovirt | TASK [ovirt-host-deploy-firewalld : Enable firewalld rules] ******************** 2019-06-13 13:07:52,756 p=3130 u=ovirt | changed: [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => { "changed": true, "item": { "service": "cockpit" } } MSG: Permanent and Non-Permanent(immediate) operation, Changed service cockpit to enabled 2019-06-13 13:07:53,786 p=3130 u=ovirt | changed: [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => { "changed": true, "item": { "service": "libvirt-tls" } } please provide host-deploy logs from the engine.
(In reply to Evgeny Slutsky from comment #3) > Hi, > I Couldn't reproduce this issue: > > version: > ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch > ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch > cockpit-storaged-176-4.el7.noarch > cockpit-dashboard-176-4.el7.x86_64 > cockpit-173.2-1.el7.x86_64 > cockpit-system-173.2-1.el7.noarch > cockpit-ws-173.2-1.el7.x86_64 > cockpit-bridge-173.2-1.el7.x86_64 > cockpit-machines-ovirt-176-4.el7.noarch > cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch > > I'v installed hosted-engine using cli: ovirt-hosted-engine-setup. > > cockpit service was started during the HE deployment by the engine > (host-deploy) : > https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A > > 2019-06-13 13:07:51,779 p=3130 u=ovirt | TASK [ovirt-host-deploy-firewalld > : Enable firewalld rules] ******************** > 2019-06-13 13:07:52,756 p=3130 u=ovirt | changed: > [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => { > "changed": true, > "item": { > "service": "cockpit" > } > } > > MSG: > > Permanent and Non-Permanent(immediate) operation, Changed service cockpit to > enabled > > 2019-06-13 13:07:53,786 p=3130 u=ovirt | changed: > [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => { > "changed": true, > "item": { > "service": "libvirt-tls" > } > } > > > > please provide host-deploy logs from the engine. Have you tried it on latest downstream 4.3.5? The service simply not running and firewall rules are not configured properly.
(In reply to Nikolai Sednev from comment #4) > (In reply to Evgeny Slutsky from comment #3) > > Hi, > > I Couldn't reproduce this issue: > > > > version: > > ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch > > ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch > > cockpit-storaged-176-4.el7.noarch > > cockpit-dashboard-176-4.el7.x86_64 > > cockpit-173.2-1.el7.x86_64 > > cockpit-system-173.2-1.el7.noarch > > cockpit-ws-173.2-1.el7.x86_64 > > cockpit-bridge-173.2-1.el7.x86_64 > > cockpit-machines-ovirt-176-4.el7.noarch > > cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch > > > > I'v installed hosted-engine using cli: ovirt-hosted-engine-setup. > > > > cockpit service was started during the HE deployment by the engine > > (host-deploy) : > > https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A > > > > 2019-06-13 13:07:51,779 p=3130 u=ovirt | TASK [ovirt-host-deploy-firewalld > > : Enable firewalld rules] ******************** > > 2019-06-13 13:07:52,756 p=3130 u=ovirt | changed: > > [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => { > > "changed": true, > > "item": { > > "service": "cockpit" > > } > > } > > > > MSG: > > > > Permanent and Non-Permanent(immediate) operation, Changed service cockpit to > > enabled > > > > 2019-06-13 13:07:53,786 p=3130 u=ovirt | changed: > > [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => { > > "changed": true, > > "item": { > > "service": "libvirt-tls" > > } > > } > > > > > > > > please provide host-deploy logs from the engine. > > Have you tried it on latest downstream 4.3.5? > The service simply not running and firewall rules are not configured > properly. Yes, I've installed it on RHEL 7.6 Latest Downstream version from public channels.
(In reply to Evgeny Slutsky from comment #5) > (In reply to Nikolai Sednev from comment #4) > > (In reply to Evgeny Slutsky from comment #3) > > > Hi, > > > I Couldn't reproduce this issue: > > > > > > version: > > > ovirt-hosted-engine-ha-2.3.1-1.el7ev.noarch > > > ovirt-hosted-engine-setup-2.3.7-1.el7ev.noarch > > > cockpit-storaged-176-4.el7.noarch > > > cockpit-dashboard-176-4.el7.x86_64 > > > cockpit-173.2-1.el7.x86_64 > > > cockpit-system-173.2-1.el7.noarch > > > cockpit-ws-173.2-1.el7.x86_64 > > > cockpit-bridge-173.2-1.el7.x86_64 > > > cockpit-machines-ovirt-176-4.el7.noarch > > > cockpit-ovirt-dashboard-0.12.8-1.el7ev.noarch > > > > > > I'v installed hosted-engine using cli: ovirt-hosted-engine-setup. > > > > > > cockpit service was started during the HE deployment by the engine > > > (host-deploy) : > > > https://paste.fedoraproject.org/paste/XcU3eiZUxsrIzdrsFE~B4A > > > > > > 2019-06-13 13:07:51,779 p=3130 u=ovirt | TASK [ovirt-host-deploy-firewalld > > > : Enable firewalld rules] ******************** > > > 2019-06-13 13:07:52,756 p=3130 u=ovirt | changed: > > > [hosted-engine.es.localvms.com] => (item={u'service': u'cockpit'}) => { > > > "changed": true, > > > "item": { > > > "service": "cockpit" > > > } > > > } > > > > > > MSG: > > > > > > Permanent and Non-Permanent(immediate) operation, Changed service cockpit to > > > enabled > > > > > > 2019-06-13 13:07:53,786 p=3130 u=ovirt | changed: > > > [hosted-engine.es.localvms.com] => (item={u'service': u'libvirt-tls'}) => { > > > "changed": true, > > > "item": { > > > "service": "libvirt-tls" > > > } > > > } > > > > > > > > > > > > please provide host-deploy logs from the engine. > > > > Have you tried it on latest downstream 4.3.5? > > The service simply not running and firewall rules are not configured > > properly. > > Yes, > I've installed it on RHEL 7.6 Latest Downstream version from public channels. I found related issue that cockpit.socket is not configured to run after reboot: [root@hosted-engine ~]# systemctl status cockpit.socket ● cockpit.socket - Cockpit Web Service Socket Loaded: loaded (/usr/lib/systemd/system/cockpit.socket; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:cockpit-ws(8) Listen: [::]:9090 (Stream)
Exactly.
not relevant patch, moving back to Assigned.
*** Bug 1712242 has been marked as a duplicate of this bug. ***
Re-targeting to 4.3.6 not being identified as blocker for 4.3.5.
Moving out to 4.5 and back to NEW state. In 4.4 we are not going to use ovirt-host-deploy anymore for deploying hosts and the current patch won't be useful. We are late in the 4.4 schedule and not being an urgent RFE, moving this out to 4.5.
This bug/RFE is more than 2 years old and it didn't get enough attention so far, and is now flagged as pending close. Please review if it is still relevant and provide additional details/justification/patches if you believe it should get more attention for the next oVirt release.
Cockpit is not used by any RHV functionality, closing as deferred