[ovirt-users] Re: Please, Please Help - New oVirt Install/Deployment Failing - "Host is not up..."

On Tue, Oct 25, 2022 at 6:27 AM Matthew J Black <matthew(a)peregrineit.net&gt; wrote: Good. It should. At this point, the operation that is attempted and which is failing with the error you see in engine.log ("Failed to authenticate session"), is done using Java code, using the Java library apache-sshd, not the command line ssh. Some of the relevant code is here: https://github.com/oVirt/ovirt-engine/blob/master/backend/manager/modules... I do not know this code well, sorry, nor the specifics of apache-sshd vs openssh (and there are such "specifics", as can easily be seen by looking at the engine git log). I think this should work more or less like this: After running engine-setup, and when the engine is already up, we fetch the public key of the engine from it, and store it in your authorized_keys file. This is done here: https://github.com/oVirt/ovirt-ansible-collection/blob/master/roles/hoste... - name: Set Engine public key as authorized key without validating the TLS/SSL certificates I do see this in your log in dropbox. Do you see /root/.ssh/authorized_keys on the host (with a timestamp similar to the log line)? If so, you can try this, from the engine VM: ssh -v -i /etc/pki/ovirt-engine/keys/engine_id_rsa ovirt_node_1.mynet.local If this does not work, you can continue debugging this until you manage to understand/fix. Perhaps check sshd config etc. If it does work, it means the issue might be due to incompatibility between apache-sshd and openssh and/or the configuration. At this point, you should be able to log into the admin UI (the pause message provides a link) and try to manually add the host. It seems like this didn't work for you. This is because "host_result_up_check" is "failed", and we pause only if it succeeded and the host is returned with status "non_operational". Feel free to create an issue to make the code pause also if "host_result_up_check" is "failed" - not sure why we do not, perhaps we did have a reason. Anyway, you can force the code to pause after trying to add the host but before checking if this worked, by passing "--ansible-extra-vars=he_pause_host=true". You can also check/share more of engine.log - there might be more information prior to the failure (but as I said, I do not know this code well). You can try running sshd (the server) with debug info and check its own log - the issue might be due to incompatible keys on one or both of the sides, or something like that. Sorry that I do not remember if you wrote this before - is this your first attempt to install oVirt? If so, perhaps try first to start with a clean host, without any custom configuration (e.g. of sshd), and see if this works for you. If you do have access to a successful setup, you can more easily compare. Good luck and best regards, -- Didi