Hi, Didi

 Thanks for replay!

The problem was that system administrators used symbolic links to certificates. In fact, the originals didnt include in the backup file.
There is no mistakes for programmers.

Good luck, Didi


with br, Ilya



вс, 13 дек. 2020 г. в 11:01, Yedidyah Bar David <didi@redhat.com>:
On Fri, Dec 11, 2020 at 3:34 PM Ilya Fedotov <kosha79@gmail.com> wrote:
>
> Good day,
>
> Encountered such a problem when migrating to ovirt 4.4

Which versions, exactly?

> At
> hosted-engine --deploy --restore-from-file=backup.bck
>
> Getting, error below
>
> Upgrading engine extension configuration: /etc/ovirt-engine/extensions.d/xx-xxxx.properties", "[ INFO  ] Upgrading CA", "[ INFO  ]
> Creating CA: /etc/pki/ovirt-engine/qemu-ca.pem", "[ ERROR ] Failed to execute stage 'Misc configuration': [Errno 17]
> File exists: '/etc/pki/ovirt-engine/ca.pem' -> '/etc/pki/ovirt-engine/apache-ca.pem'", "[ INFO  ]
> DNF Performing DNF transaction rollback", "[ INFO  ] Stage: Clean up",

Please share setup log from /var/log/ovirt-engine/setup on the engine machine.

If you can't access it, you might find this on the host used for
upgrade, in /var/log/ovirt-hosted-engine-setup/engine-logs-* .

>
> At setting of initial parameters I select "No" parameter in para
>
> 'Renew engine CA on restore if needed? Please notice ' 'that if you choose Yes, all hosts will have to be ' 'later manually reinstalled from the engine. ' '(@VALUES@)[@DEFAULT@]
>
> Dosnt need to renew the .ca certificate, thats upgrade and dosnt need to re-make connections with nodes!
>
> Even with this item, he still tries to create a new certificate.
> I found a similar question here:
> https://www.mail-archive.com/users@ovirt.org/msg61114.html

It's likely unrelated, but can't be sure without more information.

>
> Package Data:
> ovirt-hosted-engine-setup-2.4.8-1.el8.noarch
> ovirt-hosted-engine-ha-2.4.5-1.el8.noarch
> ovirt-engine-appliance-4.4-20201110154142.1.el8.x86_64

Is this our latest appliance (didn't check, sorry)? What engine is in
it (rpm -q ovirt-engine)? No need to check this if you can share the
setup log - it includes that.

Best regards,
--
Didi