Hi, While trying to add a new host to a locally deployed ovirt-engine(gluster-enabled) ansible runner fails to restart vdsm owing to its dependency on ovirt-imageio.service. ``` "ansible_loop_var" : "item", "_ansible_no_log" : false, "item" : "vdsmd.service", "failed" : true, "msg" : "Unable to start service vdsmd.service: A dependency job for vdsmd.service failed. See 'journalctl -xe' for details.\n", "changed" : false, ``` Checking less /var/log/ovirt-imageio/daemon.log ``` 2020-04-21 06:46:21,539 INFO (MainThread) [server] Starting (pid=25592, version=2.0.5) 2020-04-21 06:46:21,546 ERROR (MainThread) [server] Server failed Traceback (most recent call last): File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", line 37, in main server = Server(cfg) File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", line 76, in __init__ self.remote_service = services.RemoteService(self.config, self.auth) File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", line 79, in __init__ self._secure_server() File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", line 104, in _secure_server enable_tls1_1=self._config.tls.enable_tls1_1) File "/usr/lib64/python3.6/site-packages/ovirt_imageio/ssl.py", line 18, in server_context purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile) File "/usr/lib64/python3.6/ssl.py", line 468, in create_default_context context.load_verify_locations(cafile, capath, cadata) ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3771 ``` Is there a workaround or am I doing something wrong?

Hi, Yes I did try this but even after updating it does not work. I see the same issue. On Tue, 21 Apr, 2020, 4:06 PM Vojtech Juranek, <vjuranek(a)redhat.com&gt; wrote: > On úterý 21. dubna 2020 8:49:01 CEST Kaustav Majumder wrote: > > Hi, > > While trying to add a new host to a locally deployed > > ovirt-engine(gluster-enabled) ansible runner fails to restart vdsm owing > > to > > > its dependency on ovirt-imageio.service. > > ``` > > "ansible_loop_var" : "item", > > > > "_ansible_no_log" : false, > > "item" : "vdsmd.service", > > "failed" : true, > > "msg" : "Unable to start service vdsmd.service: A dependency > > job > > > for vdsmd.service failed. See 'journalctl -xe' for details.\n", > > > > "changed" : false, > > > > ``` > > Checking less /var/log/ovirt-imageio/daemon.log > > ``` > > 2020-04-21 06:46:21,539 INFO (MainThread) [server] Starting > > (pid=25592, > > > version=2.0.5) > > 2020-04-21 06:46:21,546 ERROR (MainThread) [server] Server failed > > > > Traceback (most recent call last): > > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", > > line > > > > 37, in main > > > > server = Server(cfg) > > > > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/server.py", > > line > > > > 76, in __init__ > > > > self.remote_service = services.RemoteService(self.config, self.auth) > > > > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", > > line > > > 79, in __init__ > > > > self._secure_server() > > > > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/services.py", > > line > > > 104, in _secure_server > > > > enable_tls1_1=self._config.tls.enable_tls1_1) > > > > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/ssl.py", line > > 18, > > > in server_context > > > > purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile) > > > > File "/usr/lib64/python3.6/ssl.py", line 468, in > > create_default_context > > > > context.load_verify_locations(cafile, capath, cadata) > > > > ssl.SSLError: [X509] no certificate or crl found (_ssl.c:3771 > > ``` > > Is there a workaround or am I doing something wrong? > > there's installed too old vdm version. You need to run > dnf update > and restart ovirt-imageio and vdsmd services