Re: Ovirt standalone engine ssl cert is about to expire

I believe all you should need to do is run engine-setup --offline On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users < users@ovirt.org> wrote:
Need some help with the renewal of the ssl certificate (I believe it is a self-signed cert )that is about to expire in a month, this is a standalone ovirt engine running software Version:4.3.4.3-1.el7. The certificate was good for 5 years and it is about to expire.
As I understand correctly, this certificate is for the https access for the management page.
Can this be done on a running system without affecting any hosts or VMs?
Any instructions for the standalone ovirt engine scenario that you guys can share?
Thanks a lot,
*Software Version:*4.3.4.3-1.el7
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65...

Hi, please take a look at Administration guide, there is a chapter around certificate renewals: https://www.ovirt.org/documentation/administration_guide/index.html#chap-Ren... Regards, Martin On Mon, May 27, 2024 at 2:44 PM Jayme <jaymef@gmail.com> wrote:
I believe all you should need to do is run engine-setup --offline
On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users < users@ovirt.org> wrote:
Need some help with the renewal of the ssl certificate (I believe it is a self-signed cert )that is about to expire in a month, this is a standalone ovirt engine running software Version:4.3.4.3-1.el7. The certificate was good for 5 years and it is about to expire.
As I understand correctly, this certificate is for the https access for the management page.
Can this be done on a running system without affecting any hosts or VMs?
Any instructions for the standalone ovirt engine scenario that you guys can share?
Thanks a lot,
*Software Version:*4.3.4.3-1.el7
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65...
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJ...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

Hello Martin, I did the engine-setup –offline since it is a standalone engine but I’m getting the stale zombie taks. [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: ok [ INFO ] Cleaning stale zombie tasks and commands [ ERROR ] Failed to execute stage 'Setup validation': Failed to clear zombie commands. Please access support in attempt to resolve the problem [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20240524211731-rzwc65.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20240524211757-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Not sure how to get rid of the zombie tasks. Any help would be greatly appreciated. Bogdan Dumitrescu IT Infrastructure Arrcus | 2077 Gateway Place, Suite 400 | San Jose, CA 95110 www.arrcus.com<http://www.arrcus.com/> [Arrcus Company Logo] From: Martin Perina <mperina@redhat.com> Sent: Monday, May 27, 2024 7:03 AM To: Jayme <jaymef@gmail.com>; Bogdan Dumitrescu <bogdan@arrcus.com> Cc: users@ovirt.org Subject: Re: [ovirt-users] Re: Ovirt standalone engine ssl cert is about to expire [https://members.ironscales.com/static/webapp/images/iron_icon_color_7_2021.p...] IRONSCALES couldn't recognize this email as this is the first time you received an email from this sender mperina @ redhat.com Hi, please take a look at Administration guide, there is a chapter around certificate renewals: https://www.ovirt.org/documentation/administration_guide/index.html#chap-Ren... Regards, Martin On Mon, May 27, 2024 at 2:44 PM Jayme <jaymef@gmail.com<mailto:jaymef@gmail.com>> wrote: I believe all you should need to do is run engine-setup --offline On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users <users@ovirt.org<mailto:users@ovirt.org>> wrote: Need some help with the renewal of the ssl certificate (I believe it is a self-signed cert )that is about to expire in a month, this is a standalone ovirt engine running software Version:4.3.4.3-1.el7. The certificate was good for 5 years and it is about to expire. As I understand correctly, this certificate is for the https access for the management page. Can this be done on a running system without affecting any hosts or VMs? Any instructions for the standalone ovirt engine scenario that you guys can share? Thanks a lot, Software Version:4.3.4.3-1.el7 _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65... _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJ... -- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o. [EXTERNAL]

On Mon, May 27, 2024 at 3:44 PM Jayme <jaymef@gmail.com> wrote:
I believe all you should need to do is run engine-setup --offline
Yes this is sufficient to renew the cert.
On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users < users@ovirt.org> wrote:
Need some help with the renewal of the ssl certificate (I believe it is a self-signed cert )that is about to expire in a month, this is a standalone ovirt engine running software Version:4.3.4.3-1.el7. The certificate was good for 5 years and it is about to expire.
As I understand correctly, this certificate is for the https access for the management page.
Can this be done on a running system without affecting any hosts or VMs?
Any instructions for the standalone ovirt engine scenario that you guys can share?
Thanks a lot,
*Software Version:*4.3.4.3-1.el7
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65...
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJ...

Hello, I tried the engine-setup –offline but it is giving me an error that can not kill [ INFO ] Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: ok [ INFO ] Cleaning stale zombie tasks and commands [ ERROR ] Failed to execute stage 'Setup validation': Failed to clear zombie commands. Please access support in attempt to resolve the problem [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20240524211731-rzwc65.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20240524211757-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Not sure how to get rid of the zombie tasks. Any help would be greatly appreciated. Thanks Bogdan Dumitrescu IT Infrastructure Arrcus | 2077 Gateway Place, Suite 400 | San Jose, CA 95110 www.arrcus.com<http://www.arrcus.com/> [Arrcus Company Logo] From: Alex K <rightkicktech@gmail.com> Sent: Monday, May 27, 2024 8:11 AM To: Jayme <jaymef@gmail.com> Cc: Bogdan Dumitrescu <bogdan@arrcus.com>; users@ovirt.org Subject: Re: [ovirt-users] Re: Ovirt standalone engine ssl cert is about to expire [https://members.ironscales.com/static/webapp/images/iron_icon_color_7_2021.p...] IRONSCALES couldn't recognize this email as this is the first time you received an email from this sender rightkicktech @ gmail.com On Mon, May 27, 2024 at 3:44 PM Jayme <jaymef@gmail.com<mailto:jaymef@gmail.com>> wrote: I believe all you should need to do is run engine-setup --offline Yes this is sufficient to renew the cert. On Sat, May 25, 2024 at 10:14 AM Bogdan Dumitrescu via Users <users@ovirt.org<mailto:users@ovirt.org>> wrote: Need some help with the renewal of the ssl certificate (I believe it is a self-signed cert )that is about to expire in a month, this is a standalone ovirt engine running software Version:4.3.4.3-1.el7. The certificate was good for 5 years and it is about to expire. As I understand correctly, this certificate is for the https access for the management page. Can this be done on a running system without affecting any hosts or VMs? Any instructions for the standalone ovirt engine scenario that you guys can share? Thanks a lot, Software Version:4.3.4.3-1.el7 _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4U47HFOL27EP65... _______________________________________________ Users mailing list -- users@ovirt.org<mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org<mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/VN3E2JZ4E2HSZJ... [EXTERNAL]
participants (4)
-
Alex K
-
Bogdan Dumitrescu
-
Jayme
-
Martin Perina