Hosted-engine Administration

  • Connect to VM hosted-engine with root and password setup during the install:
 1# Generate a backup 
 2engine-backup --scope=all --mode=backup --file=/root/backup --log=/root/backuplog
 3
 4# Restore from a backup on Fresh install
 5engine-backup --mode=restore --file=file_name --log=log_file_name --provision-db --restore-permissions
 6engine-setup
 7
 8# Restore a backup on existing install
 9engine-cleanup
10engine-backup --mode=restore --file=file_name --log=log_file_name --restore-permissions
11engine-setup

host Administration

  • Connect in ssh to the Host:
 1# Pass a host in maintenance mode manually
 2hosted-engine --vm-status
 3hosted-engine --set-maintenance --mode=global
 4hosted-engine --vm-status
 5
 6# Remove maintenance mode
 7hosted-engine --set-maintenance --mode=none
 8hosted-engine --vm-status
 9
10# upgrade hosted-engine
11hosted-engine --set-maintenance --mode=none
12hosted-engine --vm-status
13engine-upgrade-check
14dnf update ovirt\*setup\* # update the setup package
15engine-setup # launch it to update the engine

  • /!\ Connect individually to KVM Virtmanager does not work OVirt use libvirt but not like KVM do…

  • Virt-viewer on windows allow to connect to the console VM in SPICE:

1# install it in powershell as admin
2winget source update
3winget install virt-viewer

Certificates / CA

  • Following errors - during upload images:
1grep -Rn UPLOAD_IMAGE_NETWORK_ERROR /var/log/ovirt-engine
2/var/log/ovirt-engine/engine.log:22989:2025-05-14 17:01:56,169+02 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-311) [028c1226-ac31-48c4-a3c6-b5b5fa915062] EVENT_ID: UPLOAD_IMAGE_NETWORK_ERROR(1,062), Unable to upload image to disk 3e44e86d-1a9b-4656-a3c2-0486c970b988 due to a network error. Ensure ovirt-engine's CA certificate is registered as a trusted CA in the browser. The certificate can be fetched from https://VIRMA.example.com/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA

 1# From the Hosted-engine vm:
 2 ovirt-imageio --show-config | jq '.tls'
 3{
 4  "ca_file": "/etc/pki/ovirt-engine/apache-ca.pem",
 5  "cert_file": "/etc/pki/ovirt-engine/certs/apache.cer",
 6  "enable": true,
 7  "enable_tls1_1": false,
 8  "key_file": "/etc/pki/ovirt-engine/keys/apache.key.nopass"
 9}
10
11# The one in the ovirt-imageio config
12cat /etc/pki/ovirt-engine/certs/apache.cer | openssl x509 -noout -fingerprint -sha256 -dates
13
14# The one given by the URL
15openssl s_client -connect VIRMA.example.com:443 -showcerts < /dev/null 2>&1 | openssl x509 -noout -dates -fingerprint -sha256