On Mon, May 11, 2020 at 12:14 PM Sandro Bonazzola <sbonazzo(a)redhat.com>
wrote:
+Martin Perina <mperina(a)redhat.com> , +Douglas Schilling
Landgraf
<dougsland(a)gmail.com> , +Lev Veyde <lveyde(a)redhat.com> can you please
look into this?
Sure. Tried to reproduce the pki issue reported but still not able. We will
need the logs to go further.
# cat /etc/os-release
NAME="CentOS Linux"
VERSION="8 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="8"
PLATFORM_ID="platform:el8"
PRETTY_NAME="CentOS Linux 8 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:8"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"
CENTOS_MANTISBT_PROJECT="CentOS-8"
CENTOS_MANTISBT_PROJECT_VERSION="8"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="8"
# rpm -qa | grep engine
ovirt-engine-websocket-proxy-4.4.0-1.el8.noarch
ovirt-engine-4.4.0-1.el8.noarch
ovirt-engine-extension-aaa-jdbc-1.2.0-1.el8.noarch
python3-ovirt-engine-lib-4.4.0-1.el8.noarch
ovirt-engine-vmconsole-proxy-helper-4.4.0-1.el8.noarch
ovirt-engine-dwh-setup-4.4.0.2-1.el8.noarch
ovirt-engine-dbscripts-4.4.0-1.el8.noarch
ovirt-engine-tools-4.4.0-1.el8.noarch
ovirt-engine-wildfly-overlay-18.0.1-1.el8.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-4.4.0-1.el8.noarch
ovirt-engine-api-explorer-0.0.6-1.el8.noarch
ovirt-engine-setup-plugin-ovirt-engine-4.4.0-1.el8.noarch
ovirt-engine-setup-plugin-websocket-proxy-4.4.0-1.el8.noarch
ovirt-ansible-hosted-engine-setup-1.1.3-1.el8.noarch
ovirt-engine-setup-4.4.0-1.el8.noarch
ovirt-engine-webadmin-portal-4.4.0-1.el8.noarch
ovirt-engine-dwh-4.4.0.2-1.el8.noarch
ovirt-engine-metrics-1.4.0.2-1.el8.noarch
ovirt-engine-restapi-4.4.0-1.el8.noarch
ovirt-engine-ui-extensions-1.1.0-1.el8.noarch
ovirt-engine-extensions-api-1.0.1-1.el8.noarch
ovirt-engine-tools-backup-4.4.0-1.el8.noarch
ovirt-engine-setup-plugin-imageio-4.4.0-1.el8.noarch
ovirt-engine-backend-4.4.0-1.el8.noarch
ovirt-ansible-engine-setup-1.2.3-1.el8.noarch
ovirt-engine-setup-plugin-cinderlib-4.4.0-1.el8.noarch
ovirt-engine-wildfly-18.0.1-1.el8.x86_64
python3-ovirt-engine-sdk4-4.4.2-1.el8.x86_64
ovirt-engine-setup-base-4.4.0-1.el8.noarch
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.4.0-1.el8.noarch
# systemctl status ovirt-engine
● ovirt-engine.service - oVirt Engine
Loaded: loaded (/usr/lib/systemd/system/ovirt-engine.service; enabled;
vendor preset: disabled)
Active: active (running) since Mon 2020-05-11 21:06:37 EDT; 3min 23s ago
Main PID: 12392 (ovirt-engine.py)
Tasks: 172 (limit: 26213)
Memory: 1.4G
CGroup: /system.slice/ovirt-engine.service
├─12392 /usr/libexec/platform-python
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.py
--redirect-output --systemd=notify start
└─12571 ovirt-engine --add-modules java.se -server
-XX:+TieredCompilation -Xms3633M -Xmx3633M -Xss1M -Djava.awt.headless=true
-Dsun.rmi.dgc.client.gcInterval=3600000
-Dsun.rmi.dgc.server.gcInterval=3600000 -Djsse.enableSNIExtension=false
-Dresteasy.preferJacksonOverJsonB=true -Djackson.deserialization.whit>
May 11 21:06:33 rhevm44.medogz.home systemd[1]: Starting oVirt Engine...
May 11 21:06:35 rhevm44.medogz.home ovirt-engine.py[12392]: 2020-05-11
21:06:35,113-0400 ovirt-engine: INFO _detectJBossVersion:186 Detecting
JBoss version. Running:
/usr/lib/jvm/jre-11-openjdk-11.0.7.10-1.el8_1.x86_64/bin/java
['ovirt-engine-version', '--add-modules', 'java.se',
'-server',
'-XX:+TieredCompilation', >
May 11 21:06:37 rhevm44.medogz.home ovirt-engine.py[12392]: 2020-05-11
21:06:37,253-0400 ovirt-engine: INFO _detectJBossVersion:206 Return code:
0, | stdout: '['WildFly Full 18.0.1.Final (WildFly Core 10.0.3.Final)'],
| stderr: '[]'
May 11 21:06:37 rhevm44.medogz.home systemd[1]: Started oVirt Engine.
Il giorno lun 11 mag 2020 alle ore 17:05 Gianluca Cecchi <
gianluca.cecchi(a)gmail.com> ha scritto:
> On Mon, May 11, 2020 at 4:38 PM Joop <jvdwege(a)xs4all.nl> wrote:
>
>> On 8-5-2020 13:23, Sandro Bonazzola wrote:
>> > Hi,
>> > oVirt team is planning to release oVirt 4.4.0 Ga in the next couple of
>> > weeks.
>> >
>> I followed the same procedure as for the beta releases and have come
>> across a new problem.
>> Following the HCI setup using cockit in step 3 of deplying the VM
>> ansible reports an error about missing /etc/pki/CA/cacert.pem which
>> indeed does not exist.
>> Can't find where this is supposed to come from and before creating my
>> own and trying the install again I would like to know if I'm doing
>> something wrong.
>> In essence I installed Centos-8.1 from the link provided in the email.
>>
>> Regards,
>>
>> Joop
>>
>>
> I have had a similar behaviour in one of my tests, but I have not
> identified the reason.
> I re-executed the deployment, after cleaning disks, apparently with same
> parameters and all went good in the second attempt and the /etc/pki/CA/
> structure had been created.
> Unfortunately I scratched the first install to deploy over, but if you
> have yet your files you can compare contents of messages and / or send to
> developers, to compare what ewxpected by ansible and what happened actually.
> The stage where it is created is around the end of prepare VM stage when
> libvirtd is started on host.
>
> For a successful configuration you would have this line in messages of
> host
>
> May 8 16:44:50 novirt2 platform-python[27382]: ansible-command Invoked
> with _raw_params=virsh -r net-dhcp-leases default | grep -i
> 00:16:3e:79:dc:d0 | awk '{ print $5 }' | cut -f1 -d'/'
_uses_shell=True
> warn=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None
> executable=None creates=None removes=None stdin=None
>
> with the temporary ip assigned to the local vm few lines under it
>
> and around 10 minutes later you will have:
>
> May 8 16:55:11 novirt2 ansible-async_wrapper.py[28148]: 28149 still
> running (86225)
> May 8 16:55:11 novirt2 python3[53024]: ansible-file Invoked with
> dest=/etc/pki/libvirt/private state=directory owner=vdsm group=kv
> m path=/etc/pki/libvirt/private recurse=False force=False follow=True
> modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%
> m%d%H%M.%S _original_basename=None _diff_peek=None src=None
> modification_time=None access_time=None mode=None seuser=None serole=No
> ne selevel=None setype=None attributes=None content=NOT_LOGGING_PARAMETER
> backup=None remote_src=None regexp=None delimiter=None di
> rectory_mode=None unsafe_writes=None
> May 8 16:55:15 novirt2 python3[53956]: ansible-file Invoked with
> dest=/etc/pki/libvirt/../CA state=directory owner=vdsm group=kvm
> path=/etc/pki/libvirt/../CA recurse=False force=False follow=True
> modification_time_format=%Y%m%d%H%M.%S access_time_format=%Y%m%d%H%M.%S
> _original_basename=None _diff_peek=None src=None modification_time=None
> access_time=None mode=None seuser=None serole=None selevel=None setype=None
> attributes=None content=NOT_LOGGING_PARAMETER backup=None remote_src=None
> regexp=None delimiter=None directory_mode=None unsafe_writes=None
> May 8 16:55:16 novirt2 ansible-async_wrapper.py[28148]: 28149 still
> running (86220)
> May 8 16:55:17 novirt2 platform-python[54420]: ansible-ovirt_host_info
> Invoked with
pattern=name=novirt2.example.net auth={'token':
>
'Q56I1YcOPmPxQAPlXbNaB5hmXl8LcCWtSnGsrG3lTRIzo__crr_2RSKNo0e6C4TvmanadThlCCxSv5IhxOr5Ow',
> 'url': 'https://novengine2.example.net/ovirt-engine/api',
'ca_file':
> None, 'insecure': True, 'timeout': 0, 'compress': True,
'kerberos': False,
> 'headers': None} fetch_nested=False nested_attributes=[] all_content=False
> cluster_version=None
>
> In my failed run these latest lines were missing, but I didn't dig into
> why... and then libvirtd was unable to start again because of the missing
> CA
>
> Gianluca
>
>
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement:
https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
>
https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
>
https://lists.ovirt.org/archives/list/users@ovirt.org/message/NELL3ZI74MF...
>
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <
https://www.redhat.com/>
sbonazzo(a)redhat.com
<
https://www.redhat.com/>
[image: |Our code is open_] <
https://www.redhat.com/en/our-code-is-open>
*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
<
https://mojo.redhat.com/docs/DOC-1199578>*
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WGRMQ6Q6TJT...
--
Cheers
Douglas