11:27 a.m.
I have an Ovirt installation with a hosted engine and three hosts. Using Gluster as the
storage for the VMs.
Ovirt: 4.4.6.7
Hosts: CentOS Stream release 8 (updated to latest)
So far so good.
I am trying to add a new host to the cluster with the same OS and hardware as the others
and I cannot get it to install, it gives me all kind of errors and it will not install.
I reinstalled the OS and I am getting the same results.
DNS is configured properly and working ok for all hosts.
I can see this error in this log file ansible-runner-service.log:
2021-05-30 15:46:38,319 - runner_service.services.hosts - ERROR - SSH - NOAUTH:SSH auth
error - passwordless ssh not configured for 'ovirt4'
(sshd is configured exactly the same as all other hosts and I can login to this host
without a password from the ovirt hosted engine)
I see these errors in the log engine.log:
2021-05-30 16:22:35,166Z ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp
Reactor) [] Unable to process messages PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid
certification path to requested target
2021-05-30 16:22:35,175Z ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-32) [] EVENT_ID:
VDS_BROKER_COMMAND_FAILURE(10,802), VDSM ovirt4.net.miami.edu command Get Host
Capabilities failed: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid
certification path to requested target
2021-05-30 16:22:35,175Z ERROR [org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-32) [] Unable to
RefreshCapabilities: VDSNetworkException: VDSGenericException: VDSNetworkException: PKIX
path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target
2021-05-30 16:22:35,597Z ERROR [org.ovirt.engine.core.bll.gluster.GlusterSyncJob]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-23) [] Error while
refreshing server data for cluster 'Default' from database: null
I tried reinstalling, rebooting, put it in maintenance, enroll the certificate, check for
Upgrades, rebooted multiple times both the hosts and the ovirt engine:
nothing works.
What am I doing wrong?
Thank you in advance for your help.
12:08 p.m.
In case it is useful to anyone.
I found the problem.
The permissions on the ovirt hosted-engine for the /etc/pki/ovirt-engine were
root.root
I changed them to ovirt.ovirt and I was able to add the host without issue.
I have no idea why root ended up being the owner of that folder.
There was no hint anywhere in the logs that I could see indicating that there was a
problem with these permissions.
All is good now.
12:59 a.m.
On Tue, Jun 1, 2021 at 8:09 PM <pablo(a)miami.edu> wrote:
In case it is useful to anyone.
I found the problem.
The permissions on the ovirt hosted-engine for the /etc/pki/ovirt-engine were
root.root
I changed them to ovirt.ovirt and I was able to add the host without issue.
I have no idea why root ended up being the owner of that folder.
Thanks for the report!
Is there any chance it was due to an oVirt bug? And not something else - a human
mistake, some other software, etc.?
If so, perhaps you can still try finding out a bit more information about this,
by checking the directory's timestamp (in case you still kept it
somewhere before
fixing) and trying to find what was running during this. If you do
find anything,
please report. Thanks!
There was no hint anywhere in the logs that I could see indicating that there was a
problem with these permissions.
I didn't try to reproduce, so only guess:
One might consider this a bug in ansible - as in: ansible was told to
use some private key, it failed to read it, but the log does not
indicate this. You might want to report it (I think as an issue on
their github repo).
All is good now.
:-)
Best regards,
--
Didi
1067
days inactive
1070
days old
2 comments
2 participants
participants (2)
-
pablo＠miami.edu -
Yedidyah Bar David