Sandro Bonazzola has submitted this change and it was merged. Change subject: packaging: setup: libvirt and system PKI ...................................................................... packaging: setup: libvirt and system PKI Copy generated vdsm pki also to libvirt. Copy generated vdsm cacert to system-wide /etc/pki/CA/cacert.pem . Reorder so that vdsm pki generation happens before configuring libvirt for vdsm, so that it's configured with tls. Fix selinux contexts for libvirt-spice pki if enabled. Bug-Url: https://bugzilla.redhat.com/1073446 Change-Id: I74f44c46e6720ca8c62af1afa6df4a5d7c013b49 Signed-off-by: Yedidyah Bar David <didi(a)redhat.com&gt; --- M src/ovirt_hosted_engine_setup/constants.py M src/ovirt_hosted_engine_setup/mixins.py M src/plugins/ovirt-hosted-engine-setup/core/conf.py M src/plugins/ovirt-hosted-engine-setup/pki/vdsmpki.py M src/plugins/ovirt-hosted-engine-setup/system/vdsmenv.py 5 files changed, 143 insertions(+), 22 deletions(-) Approvals: Sandro Bonazzola: Looks good to me, approved Yedidyah Bar David: Verified -- To view, visit http://gerrit.ovirt.org/25473 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I74f44c46e6720ca8c62af1afa6df4a5d7c013b49 Gerrit-PatchSet: 2 Gerrit-Project: ovirt-hosted-engine-setup Gerrit-Branch: ovirt-hosted-engine-setup-1.0 Gerrit-Owner: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt; Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: oVirt Jenkins CI Server