On Mon, Mar 15, 2021 at 10:15 PM Nir Soffer <nsoffer@redhat.com> wrote:
On Mon, Mar 15, 2021 at 7:17 PM Jason Alexander Hazen Valliant-Saunders <hazenvs@altignus.com> wrote:
 
  Loaded: loaded (/usr/lib/systemd/system/ovirt-imageio.service; disabled; vendor preset: disabled)
   Active: activating (start) since Mon 2021-03-15 13:06:24 EDT; 3ms ago
 Main PID: 57738 ((-imageio))
    Tasks: 0 (limit: 616123)
   Memory: 0B
   CGroup: /system.slice/ovirt-imageio.service
           └─57738 (-imageio)
tail
==> /var/log/ovirt-imageio/daemon.log <==
    self.remote_service = services.RemoteService(self.config, self.auth)
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/services.py", line 79, in __init__
    self._secure_server()
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/services.py", line 102, in _secure_server
    enable_tls1_1=self._config.tls.enable_tls1_1)
  File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/ssl.py", line 16, in server_context
    purpose=ssl.Purpose.CLIENT_AUTH, cafile=cafile)
  File "/usr/lib64/python3.6/ssl.py", line 468, in create_default_context
    context.load_verify_locations(cafile, capath, cadata)
FileNotFoundError: [Errno 2] No such file or directory

This means that cafile does not exist.

What do you see in /var/log/ovirt-imageio/daemon.log?

Can you share the content of /etc/ovirt-imageio/ ?

    tar czf etc-ovirt-imageio.tar.gz /etc/ovirt-imageio

Did you change engine certificates? Maybe you forgot to update imageio
configuration after the change?

Note that you should not change /etc/ovirt-imageio/conf.d/50-engine.conf.
This file belongs to engine and will be replaced when updating engine.

If you need to change configuration add you own file like:
/etc/ovirt-imageio/conf.d/99-local.conf

For reference, this is the default configuration taken from engine 4.4.5:

# ovirt-imageio --show-config | jq .tls
{
  "ca_file": "/etc/pki/ovirt-engine/apache-ca.pem",
  "cert_file": "/etc/pki/ovirt-engine/certs/apache.cer",
  "enable": true,
  "enable_tls1_1": false,
  "key_file": "/etc/pki/ovirt-engine/keys/apache.key.nopass"
}

Nir


Heres the error when set to started / Enabled. 
ovirt-imageio.service: Start request repeated too quickly.
CODE_FILE../src/core/unit.c
CODE_FUNCunit_start_limit_test
CODE_LINE1669
INVOCATION_ID7d226e2e792c473c9d34725ec4b625ce
PRIORITY4
SYSLOG_FACILITY3
SYSLOG_IDENTIFIERsystemd
UNITovirt-imageio.service
_BOOT_ID4bd6b8dcfcc04655bb96228bbc07e371
_CAP_EFFECTIVE3fffffffff
_CMDLINE/usr/lib/systemd/systemd --switched-root --system --deserialize 17
_COMMsystemd
_EXE/usr/lib/systemd/systemd
_GID0
_HOSTNAMEovirt1.altignus.com
_MACHINE_ID0d2ee365ebc64b03982bae07fe190e25
_PID1
_SELINUX_CONTEXTsystem_u:system_r:init_t:s0
_SOURCE_REALTIME_TIMESTAMP1615828262063499
_SYSTEMD_CGROUP/init.scope
_SYSTEMD_SLICE-.slice
_SYSTEMD_UNITinit.scope
_TRANSPORTjournal
_UID0
__CURSORs=896394b4edaf41349024e42366d9e760;i=69e5;b=4bd6b8dcfcc04655bb96228bbc07e371;m=66f373e9;t=5bd9655940e25;x=94ca32742879524f
__MONOTONIC_TIMESTAMP1727230953
__REALTIME_TIMESTAMP1615828262063653
Mar 15 13:06:24 ovirt1.altignus.com systemd[1]: Starting oVirt ImageIO Daemon...

On Mon, Mar 15, 2021 at 1:06 PM Derek Atkins <derek@ihtfp.com> wrote:
I'm sure more knowledgeable people will reply, but from me:
what does "systemctl status -l ovirt-imageio" give you?
It should give a bit more log data about the failure.

Is there any log data about the startup?  Anything in
/var/log/ovirt-imageio-daemon/daemon.log?  Anything happen if you try to
start it manually?

-derek


On Mon, March 15, 2021 12:56 pm, Jason Alexander Hazen Valliant-Saunders
wrote:
> Failed to start oVirt ImageIO Daemon.
> CODE_FILE ../src/core/job.c
> CODE_FUNC job_log_done_status_message
> CODE_LINE 933
> INVOCATION_ID 4c19d99e2caf48a39b4d3c79b290c214
> JOB_RESULT failed
> JOB_TYPE start
> MESSAGE_ID be02cf6855d2428ba40df7e9d022f03d
> PRIORITY 3
> SYSLOG_FACILITY 3
> SYSLOG_IDENTIFIER systemd
> UNIT ovirt-imageio.service
> _BOOT_ID 4bd6b8dcfcc04655bb96228bbc07e371
> _CAP_EFFECTIVE 3fffffffff
> _CMDLINE /usr/lib/systemd/systemd --switched-root --system --deserialize
> 17
> _COMM systemd
> _EXE /usr/lib/systemd/systemd
> _GID 0
> _HOSTNAME ovirt1.altignus.com
> _MACHINE_ID 0d2ee365ebc64b03982bae07fe190e25
> _PID 1
> _SELINUX_CONTEXT system_u:system_r:init_t:s0
> _SOURCE_REALTIME_TIMESTAMP 1615827351504037
> _SYSTEMD_CGROUP /init.scope
> _SYSTEMD_SLICE -.slice
> _SYSTEMD_UNIT init.scope
> _TRANSPORT journal
> _UID 0
> __CURSOR
> s=896394b4edaf41349024e42366d9e760;i=3393;b=4bd6b8dcfcc04655bb96228bbc07e371;m=30ad6a7e;t=5bd961f4e04b9;x=b3fe6e1de39c7ab8
> __MONOTONIC_TIMESTAMP 816671358
> __REALTIME_TIMESTAMP 1615827351504057
> _______________________________________________
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-leave@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/DNB73ZMUB5DIMV7UK74MTFYTE7SGZ5J7/
>


--
       Derek Atkins                 617-623-3745
       derek@ihtfp.com             www.ihtfp.com
       Computer and Internet Security Consultant

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Y7HDZVJUVLNXD4PLVX7PADTHPYPB5DG4/