Sandro Bonazzola has submitted this change and it was merged. Change subject: packaging: setup: libvirt and system PKI ...................................................................... packaging: setup: libvirt and system PKI Copy generated vdsm pki also to libvirt. Copy generated vdsm cacert to system-wide /etc/pki/CA/cacert.pem . Reorder so that vdsm pki generation happens before configuring libvirt for vdsm, so that it's configured with tls. Fix selinux contexts for libvirt-spice pki if enabled. Bug-Url: https://bugzilla.redhat.com/1034634 Change-Id: I74f44c46e6720ca8c62af1afa6df4a5d7c013b49 Signed-off-by: Yedidyah Bar David <didi(a)redhat.com&gt; --- M src/ovirt_hosted_engine_setup/constants.py M src/ovirt_hosted_engine_setup/mixins.py M src/plugins/ovirt-hosted-engine-setup/core/conf.py M src/plugins/ovirt-hosted-engine-setup/pki/vdsmpki.py M src/plugins/ovirt-hosted-engine-setup/system/vdsmenv.py 5 files changed, 143 insertions(+), 22 deletions(-) Approvals: Sandro Bonazzola: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/25142 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I74f44c46e6720ca8c62af1afa6df4a5d7c013b49 Gerrit-PatchSet: 6 Gerrit-Project: ovirt-hosted-engine-setup Gerrit-Branch: master Gerrit-Owner: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: Greg Padgett <gpadgett(a)redhat.com&gt; Gerrit-Reviewer: Martin Sivák <msivak(a)redhat.com&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt; Gerrit-Reviewer: Simone Tiraboschi <simone.tiraboschi(a)gmail.com&gt; Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: oVirt Jenkins CI Server