<div dir="ltr">Hmm. currently running jboss-as-7.7.7-11.el6. <br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jul 18, 2013 at 7:45 AM, Jim Kinney <span dir="ltr"><<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Will do. Suggested version? I can't tell from ovirt site which engine has apache integrated. Or am I looking for jboss-as integrated with apache?<br>
</div><div class="gmail_extra"><div><div class="h5"><br><br><div class="gmail_quote">
On Thu, Jul 18, 2013 at 3:05 AM, Alon Bar-Lev <span dir="ltr"><<a href="mailto:alonbl@redhat.com" target="_blank">alonbl@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><br>
<br>
<br>
----- Original Message -----<br>
> From: "Itamar Heim" <<a href="mailto:iheim@redhat.com" target="_blank">iheim@redhat.com</a>><br>
> To: "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>><br>
> Cc: <a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>, "Alex Lourie" <<a href="mailto:alourie@redhat.com" target="_blank">alourie@redhat.com</a>>, "Alon Bar-Lev" <<a href="mailto:alonbl@redhat.com" target="_blank">alonbl@redhat.com</a>>, "Moran Goldboim"<br>
> <<a href="mailto:mgoldboi@redhat.com" target="_blank">mgoldboi@redhat.com</a>><br>
> Sent: Thursday, July 18, 2013 6:42:02 AM<br>
> Subject: Re: [Users] 3.2.2 allinone install fails on CentOS 6.4<br>
><br>
> On 07/17/2013 11:55 PM, Jim Kinney wrote:<br>
> > I'm tying to install $STABLE (3.2.2) on CentOS 6.4 . I have the repo for<br>
> > the el6 from ovirt.<br>
><br>
> this looks like<br>
> packaging: Creating keystore for jboss use<br>
<br>
</div>Indeed.<br>
<br>
Jim, I suggest you install engine with apache integration, apache integration is forced in 3.3 so better to be ready.<br>
<div><div><br>
><br>
> Currently jboss uses apache.p12 keystore file. In cases<br>
> where apache is not used for proxying, jboss tries to<br>
> use this file directly and fails on permissions.<br>
><br>
> This patch tries to resolve the issue by adding an additional<br>
> keystore jboss.p12 during setup/upgrade for the use by the jboss.<br>
><br>
> Change-Id: I22d71d9de011e8af4bde26d9e2a048a6387ce70f<br>
> Signed-off-by: Alex Lourie <<a href="mailto:alourie@redhat.com" target="_blank">alourie@redhat.com</a>><br>
><br>
> <a href="http://gerrit.ovirt.org/#/c/12374/" target="_blank">http://gerrit.ovirt.org/#/c/12374/</a><br>
><br>
> alex - was it backported to 3.2?<br>
> i also see some other potentially relevant patches were backported to<br>
> 3.2.2 by alon - shouldn't we refresh the build for this?<br>
> <a href="http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=shortlog;h=refs%2Fheads%2Fengine_3.2" target="_blank">http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=shortlog;h=refs%2Fheads%2Fengine_3.2</a><br>
><br>
> ><br>
> > Before the engine-setup --with-allinone=yes can complete it errors out<br>
> > with the following in the setup log:<br>
> ><br>
> > 2013-07-17 15:52:47::DEBUG::all_in_one_100::451::root:: Checking JBoss<br>
> > status.<br>
> > 2013-07-17 15:52:47::INFO::all_in_one_100::454::root:: JBoss is up and<br>
> > running.<br>
> > 2013-07-17 15:52:47::DEBUG::setup_sequences::59::root:: running initAPI<br>
> > 2013-07-17 15:52:47::DEBUG::all_in_one_100::240::root:: Initiating the<br>
> > API object<br>
> > 2013-07-17 15:52:47::ERROR::all_in_one_100::251::root:: Traceback (most<br>
> > recent call last):<br>
> > File "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > line 248, in initAPI<br>
> > ca_file=basedefs.FILE_CA_CRT_SRC,<br>
> > File "/usr/lib/python2.6/site-packages/ovirtsdk/api.py", line 119, in<br>
> > __init__<br>
> > url='/api'<br>
> > File<br>
> > "/usr/lib/python2.6/site-packages/ovirtsdk/infrastructure/proxy.py",<br>
> > line 112, in request<br>
> > persistent_auth=self._persistent_auth)<br>
> > File<br>
> > "/usr/lib/python2.6/site-packages/ovirtsdk/infrastructure/proxy.py",<br>
> > line 134, in __doRequest<br>
> > persistent_auth=persistent_auth<br>
> > File "/usr/lib/python2.6/site-packages/ovirtsdk/web/connection.py",<br>
> > line 148, in doRequest<br>
> > raise ConnectionError, str(e)<br>
> > ConnectionError: [ERROR]::oVirt API connection failure, [Errno 111]<br>
> > Connection refused<br>
> ><br>
> > 2013-07-17 15:52:47::DEBUG::setup_sequences::62::root:: Traceback (most<br>
> > recent call last):<br>
> > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60,<br>
> > in run<br>
> > function()<br>
> > File "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > line 252, in initAPI<br>
> > raise Exception(ERROR_CREATE_API_OBJECT)<br>
> > Exception: Error: could not create ovirtsdk API object<br>
> ><br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1972::root:: *** The following<br>
> > params were used as user input:<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > override-httpd-config: no<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: http-port: 8700<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: https-port: 8701<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: random-passwords: no<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: mac-range:<br>
> > 00:1A:4A:8C:8A:00-00:1A:4A:8C:8A:FF<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: host-fqdn:<br>
> > <a href="http://storage01.mydomain.me" target="_blank">storage01.mydomain.me</a> <<a href="http://storage01.mydomain.me" target="_blank">http://storage01.mydomain.me</a>><br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: auth-pass: ********<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: org-name:<br>
> > <a href="http://mydomain.me" target="_blank">mydomain.me</a> <<a href="http://mydomain.me" target="_blank">http://mydomain.me</a>><br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: application-mode:<br>
> > virt<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: default-dc-type:<br>
> > POSIXFS<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > db-remote-install: local<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: db-host: localhost<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: db-local-pass:<br>
> > ********<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: nfs-mp:<br>
> > /var/lib/exports/iso<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: iso-domain-name:<br>
> > ISO_DOMAIN<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: config-nfs: yes<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > override-firewall: None<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: config-allinone: yes<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: storage-path:<br>
> > /var/lib/images<br>
> > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: superuser-pass:<br>
> > ********<br>
> > 2013-07-17 15:52:47::ERROR::engine-setup::2392::root:: Traceback (most<br>
> > recent call last):<br>
> > File "/usr/bin/engine-setup", line 2386, in <module><br>
> > main(confFile)<br>
> > File "/usr/bin/engine-setup", line 2169, in main<br>
> > runSequences()<br>
> > File "/usr/bin/engine-setup", line 2092, in runSequences<br>
> > controller.runAllSequences()<br>
> > File "/usr/share/ovirt-engine/scripts/setup_controller.py", line 54,<br>
> > in runAllSequences<br>
> > sequence.run()<br>
> > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 154,<br>
> > in run<br>
> > step.run()<br>
> > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60,<br>
> > in run<br>
> > function()<br>
> > File "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > line 252, in initAPI<br>
> > raise Exception(ERROR_CREATE_API_OBJECT)<br>
> > Exception: Error: could not create ovirtsdk API object<br>
> ><br>
> ><br>
> ><br>
> > After much digging, it seems like the issue is in the certs but it's not<br>
> > making sense to me why it fails. From the server.log:<br>
> ><br>
> > 2013-07-17 16:37:28,873 INFO [org.jboss.as.server.deployment.scanner]<br>
> > (MSC service thread 1-3) JBAS015012: Started FileSystemDeploymentService<br>
> > for directory /var/lib/ovirt-engine/deployments<br>
> > 2013-07-17 16:37:28,877 ERROR<br>
> > [org.apache.tomcat.util.net.jsse.JSSESocketFactory] (MSC service thread<br>
> > 1-4) Failed to load keystore type PKCS12 with path<br>
> > /etc/pki/ovirt-engine/keys/apache.p12 due to<br>
> > /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied):<br>
> > java.io.FileNotFoundException: /etc/pki/ovirt-engine/keys/apache.p12<br>
> > (Permission denied)<br>
> > at java.io.FileInputStream.open(Native Method) [rt.jar:1.7.0_25]<br>
> > at java.io.FileInputStream.<init>(FileInputStream.java:138)<br>
> > [rt.jar:1.7.0_25]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:515)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:977)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at org.apache.catalina.connector.Connector.init(Connector.java:983)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > [jboss-as-web-7.1.1.Final.jar:7.1.1.Final]<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > [rt.jar:1.7.0_25]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > [rt.jar:1.7.0_25]<br>
> > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> ><br>
> > 2013-07-17 16:37:28,883 ERROR [org.apache.coyote.http11.Http11Protocol]<br>
> > (MSC service thread 1-4) Error initializing endpoint:<br>
> > java.io.FileNotFoundException: /etc/pki/ovirt-engine/keys/apache.p12<br>
> > (Permission denied)<br>
> > at java.io.FileInputStream.open(Native Method) [rt.jar:1.7.0_25]<br>
> > at java.io.FileInputStream.<init>(FileInputStream.java:138)<br>
> > [rt.jar:1.7.0_25]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:515)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:977)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at org.apache.catalina.connector.Connector.init(Connector.java:983)<br>
> > [jbossweb-7.0.13.Final.jar:]<br>
> > at<br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > [jboss-as-web-7.1.1.Final.jar:7.1.1.Final]<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > [rt.jar:1.7.0_25]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > [rt.jar:1.7.0_25]<br>
> > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> ><br>
> > 2013-07-17 16:37:28,892 ERROR [org.jboss.msc.service.fail] (MSC service<br>
> > thread 1-4) MSC00001: Failed to start service jboss.web.connector.https:<br>
> > org.jboss.msc.service.StartException in service<br>
> > jboss.web.connector.https: JBAS018007: Error starting web connector<br>
> > at<br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:271)<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > [rt.jar:1.7.0_25]<br>
> > at<br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > [rt.jar:1.7.0_25]<br>
> > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> > Caused by: LifecycleException: Protocol handler initialization failed:<br>
> > java.io.FileNotFoundException: /etc/pki/ovirt-engine/keys/apache.p12<br>
> > (Permission denied)<br>
> > at org.apache.catalina.connector.Connector.init(Connector.java:985)<br>
> > at<br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > ... 5 more<br>
> ><br>
> > 2013-07-17 16:37:28,904 INFO [org.jboss.as.server.deployment.scanner]<br>
> > (DeploymentScanner-threads - 1) JBAS015003: Found engine.ear in<br>
> > deployment directory. To trigger deployment create a file called<br>
> > engine.ear.dodeploy<br>
> > 2013-07-17 16:37:28,957 INFO<br>
> > [org.jboss.as.connector.subsystems.datasources] (MSC service thread<br>
> > 1-11) JBAS010400: Bound data source [java:/ENGINEDataSource]<br>
> > 2013-07-17 16:37:28,966 INFO [org.jboss.as.controller] (Controller Boot<br>
> > Thread) JBAS014774: Service status report<br>
> > JBAS014777: Services which failed to start: service<br>
> > jboss.web.connector.https: org.jboss.msc.service.StartException in<br>
> > service jboss.web.connector.https: JBAS018007: Error starting web connector<br>
> ><br>
> ><br>
> > the /etc/pki/ovirt-engine/keys:<br>
> ><br>
> > ls -la /etc/pki/ovirt-engine/keys/<br>
> > total 24<br>
> > drwxr-xr-x. 2 ovirt ovirt 4096 Jul 17 15:51 .<br>
> > drwxr-xr-x. 6 ovirt ovirt 4096 Jul 17 15:51 ..<br>
> > -rw-r-----. 1 apache apache 1828 Jul 17 15:51 apache.key.nopass<br>
> > -rw-r-----. 1 apache apache 2685 Jul 17 15:51 apache.p12<br>
> > -rw-------. 1 root root 1832 Jul 17 15:51 engine_id_rsa<br>
> > -rw-r-----. 1 ovirt ovirt 2685 Jul 17 15:51 engine.p12<br>
> ><br>
> ><br>
> > I've tried with setenforce 0 and no change.<br>
> ><br>
> > I've downgraded to earlier 3.2.0 versions, earlier jboss-as, beta<br>
> > allinone plugin for 3.2, no changes. At one point I added some<br>
> > additional debuggingto the allinone script to make sure that reasonable<br>
> > variables were being passed around (they are).<br>
> ><br>
> > I'm stumped.<br>
> ><br>
> > --<br>
> > --<br>
> > James P. Kinney III<br>
> > ////<br>
> > ////Every time you stop a school, you will have to build a jail. What<br>
> > you gain at one end you lose at the other. It's like feeding a dog on<br>
> > his own tail. It won't fatten the dog.<br>
> > - Speech 11/23/1900 Mark Twain<br>
> > ////<br>
> > <a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br>
> > <a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
> > ////<br>
> ><br>
> ><br>
> > _______________________________________________<br>
> > Users mailing list<br>
> > <a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
> > <a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
> ><br>
><br>
><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br></div></div><i><i><i><i><br><a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
</i></i></i></i>
</div>
</blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
</i></i></i></i>
</div>