On úterý 21. dubna 2020 8:49:01 CEST Kaustav Majumder wrote:
> Hi,
> While trying to add a new host to a locally deployed
> ovirt-engine(gluster-enabled) ansible runner fails to restart vdsm owing to
> its dependency on ovirt-imageio.service.
> ```
> "ansible_loop_var" : "item",
>           "_ansible_no_log" : false,
>           "item" : "vdsmd.service",
>           "failed" : true,
>           "msg" : "Unable to start service vdsmd.service: A dependency job
> for vdsmd.service failed. See 'journalctl -xe' for details.\n",
>           "changed" : false,
> ```
> Checking less /var/log/ovirt-imageio/daemon.log
> ```
> 2020-04-21 06:46:21,539 INFO    (MainThread) [server] Starting (pid=25592,
> version=2.0.5)
> 2020-04-21 06:46:21,546 ERROR   (MainThread) [server] Server failed
> Traceback (most recent call last):
>   File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", line
> 37, in main
>     server = Server(cfg)
>   File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", line
> 76, in __init__
>     self.remote_service = services.RemoteService(self.config, self.auth)
>   File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", line
> 79, in __init__
>     self._secure_server()
>   File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", line
> 104, in _secure_server
>     enable_tls1_1=self._config.tls.enable_tls1_1)
>   File "/usr/lib64/python3.6/site-packages/ovirt_imageio/ssl.py", line 18,
> in server_context
>     purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile)
>   File "/usr/lib64/python3.6/ssl.py", line 468, in create_default_context
>     context.load_verify_locations(cafile, capath, cadata)
> ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3771
> ```
> Is there a workaround or am I doing something wrong?

there's installed too old vdm version. You need to run
dnf update
and restart ovirt-imageio and vdsmd services