On Mon, Mar 15, 2021 at 10:15 PM Nir Soffer <nsoffer(a)redhat.com> wrote:
On Mon, Mar 15, 2021 at 7:17 PM Jason Alexander Hazen
Valliant-Saunders <
hazenvs(a)altignus.com> wrote:
>
> Loaded: loaded (/usr/lib/systemd/system/ovirt-imageio.service;
> disabled; vendor preset: disabled)
> Active: activating (start) since Mon 2021-03-15 13:06:24 EDT; 3ms ago
> Main PID: 57738 ((-imageio))
> Tasks: 0 (limit: 616123)
> Memory: 0B
> CGroup: /system.slice/ovirt-imageio.service
> └─57738 (-imageio)
> tail
> ==> /var/log/ovirt-imageio/daemon.log <==
> self.remote_service = services.RemoteService(self.config, self.auth)
> File
> "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/services.py",
> line 79, in __init__
> self._secure_server()
> File
> "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/services.py",
> line 102, in _secure_server
> enable_tls1_1=self._config.tls.enable_tls1_1)
> File
> "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/ssl.py", line
> 16, in server_context
> purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile)
> File "/usr/lib64/python3.6/ssl.py", line 468, in create_default_context
> context.load_verify_locations(cafile, capath, cadata)
> FileNotFoundError: [Errno 2] No such file or directory
>
This means that cafile does not exist.
What do you see in /var/log/ovirt-imageio/daemon.log?
Can you share the content of /etc/ovirt-imageio/ ?
tar czf etc-ovirt-imageio.tar.gz /etc/ovirt-imageio
Did you change engine certificates? Maybe you forgot to update imageio
configuration after the change?
Note that you should not change /etc/ovirt-imageio/conf.d/50-engine.conf.
This file belongs to engine and will be replaced when updating engine.
If you need to change configuration add you own file like:
/etc/ovirt-imageio/conf.d/99-local.conf
For reference, this is the default configuration taken from engine 4.4.5:
# ovirt-imageio --show-config | jq .tls
{
"ca_file": "/etc/pki/ovirt-engine/apache-ca.pem",
"cert_file": "/etc/pki/ovirt-engine/certs/apache.cer",
"enable": true,
"enable_tls1_1": false,
"key_file": "/etc/pki/ovirt-engine/keys/apache.key.nopass"
}
Nir
> Heres the error when set to started / Enabled.
> ovirt-imageio.service: Start request repeated too quickly.
> CODE_FILE ../src/core/unit.c
> CODE_FUNC unit_start_limit_test
> CODE_LINE 1669
> INVOCATION_ID 7d226e2e792c473c9d34725ec4b625ce
> PRIORITY 4
> SYSLOG_FACILITY 3
> SYSLOG_IDENTIFIER systemd
> UNIT ovirt-imageio.service
> _BOOT_ID 4bd6b8dcfcc04655bb96228bbc07e371
> _CAP_EFFECTIVE 3fffffffff
> _CMDLINE /usr/lib/systemd/systemd --switched-root --system --deserialize
> 17
> _COMM systemd
> _EXE /usr/lib/systemd/systemd
> _GID 0
> _HOSTNAME
ovirt1.altignus.com
> _MACHINE_ID 0d2ee365ebc64b03982bae07fe190e25
> _PID 1
> _SELINUX_CONTEXT system_u:system_r:init_t:s0
> _SOURCE_REALTIME_TIMESTAMP 1615828262063499
> _SYSTEMD_CGROUP /init.scope
> _SYSTEMD_SLICE -.slice
> _SYSTEMD_UNIT init.scope
> _TRANSPORT journal
> _UID 0
> __CURSOR
>
s=896394b4edaf41349024e42366d9e760;i=69e5;b=4bd6b8dcfcc04655bb96228bbc07e371;m=66f373e9;t=5bd9655940e25;x=94ca32742879524f
> __MONOTONIC_TIMESTAMP 1727230953
> __REALTIME_TIMESTAMP 1615828262063653Mar 15 13:06:24
ovirt1.altignus.com
> systemd[1]: Starting oVirt ImageIO Daemon...
>
> On Mon, Mar 15, 2021 at 1:06 PM Derek Atkins <derek(a)ihtfp.com> wrote:
>
>> I'm sure more knowledgeable people will reply, but from me:
>> what does "systemctl status -l ovirt-imageio" give you?
>> It should give a bit more log data about the failure.
>>
>> Is there any log data about the startup? Anything in
>> /var/log/ovirt-imageio-daemon/daemon.log? Anything happen if you try to
>> start it manually?
>>
>> -derek
>>
>>
>> On Mon, March 15, 2021 12:56 pm, Jason Alexander Hazen Valliant-Saunders
>> wrote:
>> > Failed to start oVirt ImageIO Daemon.
>> > CODE_FILE ../src/core/job.c
>> > CODE_FUNC job_log_done_status_message
>> > CODE_LINE 933
>> > INVOCATION_ID 4c19d99e2caf48a39b4d3c79b290c214
>> > JOB_RESULT failed
>> > JOB_TYPE start
>> > MESSAGE_ID be02cf6855d2428ba40df7e9d022f03d
>> > PRIORITY 3
>> > SYSLOG_FACILITY 3
>> > SYSLOG_IDENTIFIER systemd
>> > UNIT ovirt-imageio.service
>> > _BOOT_ID 4bd6b8dcfcc04655bb96228bbc07e371
>> > _CAP_EFFECTIVE 3fffffffff
>> > _CMDLINE /usr/lib/systemd/systemd --switched-root --system
>> --deserialize
>> > 17
>> > _COMM systemd
>> > _EXE /usr/lib/systemd/systemd
>> > _GID 0
>> > _HOSTNAME
ovirt1.altignus.com
>> > _MACHINE_ID 0d2ee365ebc64b03982bae07fe190e25
>> > _PID 1
>> > _SELINUX_CONTEXT system_u:system_r:init_t:s0
>> > _SOURCE_REALTIME_TIMESTAMP 1615827351504037
>> > _SYSTEMD_CGROUP /init.scope
>> > _SYSTEMD_SLICE -.slice
>> > _SYSTEMD_UNIT init.scope
>> > _TRANSPORT journal
>> > _UID 0
>> > __CURSOR
>> >
>>
s=896394b4edaf41349024e42366d9e760;i=3393;b=4bd6b8dcfcc04655bb96228bbc07e371;m=30ad6a7e;t=5bd961f4e04b9;x=b3fe6e1de39c7ab8
>> > __MONOTONIC_TIMESTAMP 816671358
>> > __REALTIME_TIMESTAMP 1615827351504057
>> > _______________________________________________
>> > Users mailing list -- users(a)ovirt.org
>> > To unsubscribe send an email to users-leave(a)ovirt.org
>> > Privacy Statement:
https://www.ovirt.org/privacy-policy.html
>> > oVirt Code of Conduct:
>> >
https://www.ovirt.org/community/about/community-guidelines/
>> > List Archives:
>> >
>>
https://lists.ovirt.org/archives/list/users@ovirt.org/message/DNB73ZMUB5D...
>> >
>>
>>
>> --
>> Derek Atkins 617-623-3745
>> derek(a)ihtfp.com
www.ihtfp.com
>> Computer and Internet Security Consultant
>>
>> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement:
https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
>
https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
>
https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y7HDZVJUVLN...
>