Hi,

On 4/21/20 12:46 PM, Vojtech Juranek wrote:
On úterý 21. dubna 2020 12:38:22 CEST Kaustav Majumder wrote:
Hi,
Yes I did try this but
even after updating it does not work. I see the same issue.

On Tue, 21 Apr, 2020, 4:06 PM Vojtech Juranek, <vjuranek@redhat.com> wrote:
On úterý 21. dubna 2020 8:49:01 CEST Kaustav Majumder wrote:
Hi,
While trying to add a new host to a locally deployed
ovirt-engine(gluster-enabled) ansible runner fails to restart vdsm owing
to

its dependency on ovirt-imageio.service.
```
"ansible_loop_var" : "item",

          "_ansible_no_log" : false,
          "item" : "vdsmd.service",
          "failed" : true,
          "msg" : "Unable to start service vdsmd.service: A dependency
job

for vdsmd.service failed. See 'journalctl -xe' for details.\n",

          "changed" : false,

```
Checking less /var/log/ovirt-imageio/daemon.log
```
2020-04-21 06:46:21,539 INFO    (MainThread) [server] Starting
(pid=25592,

version=2.0.5)
2020-04-21 06:46:21,546 ERROR   (MainThread) [server] Server failed

Traceback (most recent call last):
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py",
  line

37, in main

    server = Server(cfg)
  
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py",
  line

76, in __init__

    self.remote_service = services.RemoteService(self.config, self.auth)
  
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py",
line

79, in __init__

    self._secure_server()
  
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py",
line

104, in _secure_server

    enable_tls1_1=self._config.tls.enable_tls1_1)
  
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/ssl.py", line
18,

in server_context

    purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile)
  
  File "/usr/lib64/python3.6/ssl.py", line 468, in
  create_default_context
  
    context.load_verify_locations(cafile, capath, cadata)

ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3771
This is probably related to recent issues we have with ansible runner service.
Can you please paste the certificate you have on the host:

cat /etc/pki/vdsm/certs/cacert.pem


```
Is there a workaround or am I doing something wrong?
there's installed too old vdm version. You need to run
dnf update
and restart ovirt-imageio and vdsmd services
can you share your /etc/ovirt-imageio/daemon.conf and check that certificated 
configured there exists?

_______________________________________________
Devel mailing list -- devel@ovirt.org
To unsubscribe send an email to devel-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/YON4VLCFHVSLHZ4KYLNQMZLEMUZPRF4S/