4.4 HCI Install Failure - Missing /etc/pki/CA/cacert.pem

Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file. The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"} journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS <cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon. From a fresh CentOS 8.1 minimal install, I've installed the following: - The 4.4 repo - cockpit - ovirt-cockpit-dashboard - vdsm-gluster (providing glusterfs-server and allowing the Gluster Wizard to complete) - gluster-ansible-roles (only on the bootstrap host) I'm not exactly sure what that initial bit of the playbook does. Comparing the bootstrap node with another that has yet to be touched, both /etc/libvirt/libvirtd.conf and /etc/sysconfig/libvirtd are the same on both hosts. Yet the bootstrap host can no longer start libvirtd while the other host can. Neither host has the /etc/pki/CA/cacert.pem file. Please let me know if I can provide any more information. Thanks!

Dear all: After I restart the server, the log will appear every 15 minutes,But all nodes and vms are worrking normally. Is anyone knows what it means? zhouhao@vip.friendtimes.net

On May 22, 2020 8:30:34 AM GMT+03:00, "zhouhao@vip.friendtimes.net" <zhouhao@vip.friendtimes.net> wrote:
Dear all: After I restart the server, the log will appear every 15 minutes,But all nodes and vms are worrking normally. Is anyone knows what it means?
zhouhao@vip.friendtimes.net
According to https://access.redhat.com/solutions/3251541 (you can view it with a free red hat developer subscription) it could be duplicate entries in 'dwh_history_timekeeping' table. What is the output of: /usr/share/ovirt-engine/dbscripts/engine-psql.sh -c "SELECT * FROM dwh_history_timekeeping;" Best Regards, Strahil Nikolov

.Hello, The ETL is the service that manages the history data warehouse and updates the dashboard in the admin portal. The service status can be checked with systemctl status ovirt-engine-dwhd and the logs are in /var/log/ovirt-engine-dwh/ovirt-engine-dwhd.log Regards, Paul S. ________________________________ From: zhouhao@vip.friendtimes.net <zhouhao@vip.friendtimes.net> Sent: 22 May 2020 06:30 To: users <users@ovirt.org> Subject: [ovirt-users]What's mean about this "ETL service sampling has encountered an error. Please consult the service log for more details.‘’ Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Dear all: After I restart the server, the log will appear every 15 minutes,But all nodes and vms are worrking normally. Is anyone knows what it means? [cid:_Foxmail.1@a2523b17-f9fa-07e9-3116-2437a772d782] [cid:_Foxmail.1@91aef2fe-09c4-51c7-6384-e262591238fe] [cid:_Foxmail.1@b199cf9d-37ef-b8de-5d28-aa5fa5fd401f] [cid:_Foxmail.1@17742991-92c8-5873-0256-f166b73d6a5b] ________________________________ zhouhao@vip.friendtimes.net To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/

Hi, On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS <cbs@centos.org <mailto:cbs@centos.org>>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon. Can you please share journalctl logs for vdsmd and supervdsmd?
Regards, Marcin
From a fresh CentOS 8.1 minimal install, I've installed the following: - The 4.4 repo - cockpit - ovirt-cockpit-dashboard - vdsm-gluster (providing glusterfs-server and allowing the Gluster Wizard to complete) - gluster-ansible-roles (only on the bootstrap host)
I'm not exactly sure what that initial bit of the playbook does. Comparing the bootstrap node with another that has yet to be touched, both /etc/libvirt/libvirtd.conf and /etc/sysconfig/libvirtd are the same on both hosts. Yet the bootstrap host can no longer start libvirtd while the other host can. Neither host has the /etc/pki/CA/cacert.pem file.
Please let me know if I can provide any more information. Thanks!
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/XNW4HWUQUTN44V...

Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings. Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried." I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue. On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS <cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
Regards, Marcin
From a fresh CentOS 8.1 minimal install, I've installed the following: - The 4.4 repo - cockpit - ovirt-cockpit-dashboard - vdsm-gluster (providing glusterfs-server and allowing the Gluster Wizard to complete) - gluster-ansible-roles (only on the bootstrap host)
I'm not exactly sure what that initial bit of the playbook does. Comparing the bootstrap node with another that has yet to be touched, both /etc/libvirt/libvirtd.conf and /etc/sysconfig/libvirtd are the same on both hosts. Yet the bootstrap host can no longer start libvirtd while the other host can. Neither host has the /etc/pki/CA/cacert.pem file.
Please let me know if I can provide any more information. Thanks!
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/XNW4HWUQUTN44V...

The issue is the "Drop vdsm config statements" task from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml I'm not sure how those config statements got there in the first place... maybe a scriptlet from a vdsm rpm install? Either way, the task removes the following section from the bottom of /etc/libvirt/libvirtd.conf, causing it to look for the default ca_file, /etc/pki/CA/cacert.pem. ## beginning of configuration section by vdsm-4.40.0 auth_unix_rw="sasl" ca_file="/etc/pki/vdsm/certs/cacert.pem" cert_file="/etc/pki/vdsm/certs/vdsmcert.pem" host_uuid="9def7285-9ed9-4a94-8a7d-ed1f05a9a224" keepalive_interval=-1 key_file="/etc/pki/vdsm/keys/vdsmkey.pem" ## end of configuration section by vdsm-4.40.0 If I re-add this section to my bootstrap node's libvirtd.conf, I can start the libvirtd service again. I'll try to comment out the "Drop vdsm config statements" task from the playbook and see if I can proceed. On Fri, May 22, 2020 at 11:59 AM Stephen Panicho <s.panicho@gmail.com> wrote:
Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings.
Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried."
I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue.
On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS <cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
Regards, Marcin
From a fresh CentOS 8.1 minimal install, I've installed the following: - The 4.4 repo - cockpit - ovirt-cockpit-dashboard - vdsm-gluster (providing glusterfs-server and allowing the Gluster Wizard to complete) - gluster-ansible-roles (only on the bootstrap host)
I'm not exactly sure what that initial bit of the playbook does. Comparing the bootstrap node with another that has yet to be touched, both /etc/libvirt/libvirtd.conf and /etc/sysconfig/libvirtd are the same on both hosts. Yet the bootstrap host can no longer start libvirtd while the other host can. Neither host has the /etc/pki/CA/cacert.pem file.
Please let me know if I can provide any more information. Thanks!
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/XNW4HWUQUTN44V...

On 22-5-2020 17:59, Stephen Panicho wrote:
Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings.
Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried."
I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue.
On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com <mailto:msobczyk@redhat.com>> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS <cbs@centos.org <mailto:cbs@centos.org>>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
I hate it when I have to say: me too. BUT during test week I think Simone had the same problem and did a /usr/sbin/ovirt-hosted-engine-cleanup?? and then you can retry the deply from the wizard. To recapitulate: Follow the HCI cockpit wizard until you get the error then open a terminal and cleanup and then retry the deployment. It will succeed. Did this yesterday and it worked. Even tried to run cleanup before starting the wizard but thats a no success. Greetings Joop

That fixed it! Thanks so much for the help, Joop. On Fri, May 22, 2020 at 1:07 PM Joop <jvdwege@xs4all.nl> wrote:
On 22-5-2020 17:59, Stephen Panicho wrote:
Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings.
Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried."
I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue.
On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS < <cbs@centos.org>cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
I hate it when I have to say: me too.
BUT during test week I think Simone had the same problem and did a /usr/sbin/ovirt-hosted-engine-cleanup?? and then you can retry the deply from the wizard. To recapitulate: Follow the HCI cockpit wizard until you get the error then open a terminal and cleanup and then retry the deployment. It will succeed. Did this yesterday and it worked. Even tried to run cleanup before starting the wizard but thats a no success.
Greetings
Joop
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4PUIES2JGAFHJY...

Looks like I spoke too soon. I can get to the point where HostedEngineLocal comes up, but it fails to run engine-setup. The ansible output: [ INFO ] TASK [ovirt.engine-setup : Run engine-setup with answerfile] [ ERROR ] fatal: [localhost -> engine.ovirt.trashnet.xyz]: FAILED! => {"changed": true, "cmd": ["engine-setup", "--accept-defaults", "--config-append=/root/ovirt-engine-answers"], "delta": "0:00:01.396490", "end": "2020-05-22 18:32:41.965984", "msg": "non-zero return code", "rc": 1, "start": "2020-05-22 18:32:40.569494", "stderr": "", "stderr_lines": [], "stdout": "[ INFO ] Stage: Initializing\n[ ERROR ] Failed to execute stage 'Initializing': '%' must be followed by '%' or '(', found: '%JUUj'\n[ INFO ] Stage: Clean up\n Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log\n[ ERROR ] Failed to execute stage 'Clean up': 'NoneType' object has no attribute 'cleanup'\n[ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf'\n[ INFO ] Stage: Pre-termination\n[ INFO ] Stage: Termination\n[ ERROR ] Execution of setup failed", "stdout_lines": ["[ INFO ] Stage: Initializing", "[ ERROR ] Failed to execute stage 'Initializing': '%' must be followed by '%' or '(', found: '%JUUj'", "[ INFO ] Stage: Clean up", " Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log", "[ ERROR ] Failed to execute stage 'Clean up': 'NoneType' object has no attribute 'cleanup'", "[ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf'", "[ INFO ] Stage: Pre-termination", "[ INFO ] Stage: Termination", "[ ERROR ] Execution of setup failed"]} SSHing to the HostedEngineLocal to get the logs... /var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf: # OTOPI answer file, generated by human dialog [environment:default] /var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log: I'll attach this one because it's huge. On Fri, May 22, 2020 at 2:11 PM Stephen Panicho <s.panicho@gmail.com> wrote:
That fixed it! Thanks so much for the help, Joop.
On Fri, May 22, 2020 at 1:07 PM Joop <jvdwege@xs4all.nl> wrote:
On 22-5-2020 17:59, Stephen Panicho wrote:
Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings.
Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried."
I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue.
On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS < <cbs@centos.org>cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
I hate it when I have to say: me too.
BUT during test week I think Simone had the same problem and did a /usr/sbin/ovirt-hosted-engine-cleanup?? and then you can retry the deply from the wizard. To recapitulate: Follow the HCI cockpit wizard until you get the error then open a terminal and cleanup and then retry the deployment. It will succeed. Did this yesterday and it worked. Even tried to run cleanup before starting the wizard but thats a no success.
Greetings
Joop
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4PUIES2JGAFHJY...

Fixed the above in https://lists.ovirt.org/archives/list/users@ovirt.org/thread/6QODLB6J5Z74YCV... On Fri, May 22, 2020 at 2:43 PM Stephen Panicho <s.panicho@gmail.com> wrote:
Looks like I spoke too soon. I can get to the point where HostedEngineLocal comes up, but it fails to run engine-setup.
The ansible output: [ INFO ] TASK [ovirt.engine-setup : Run engine-setup with answerfile] [ ERROR ] fatal: [localhost -> engine.ovirt.trashnet.xyz]: FAILED! => {"changed": true, "cmd": ["engine-setup", "--accept-defaults", "--config-append=/root/ovirt-engine-answers"], "delta": "0:00:01.396490", "end": "2020-05-22 18:32:41.965984", "msg": "non-zero return code", "rc": 1, "start": "2020-05-22 18:32:40.569494", "stderr": "", "stderr_lines": [], "stdout": "[ INFO ] Stage: Initializing\n[ ERROR ] Failed to execute stage 'Initializing': '%' must be followed by '%' or '(', found: '%JUUj'\n[ INFO ] Stage: Clean up\n Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log\n[ ERROR ] Failed to execute stage 'Clean up': 'NoneType' object has no attribute 'cleanup'\n[ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf'\n[ INFO ] Stage: Pre-termination\n[ INFO ] Stage: Termination\n[ ERROR ] Execution of setup failed", "stdout_lines": ["[ INFO ] Stage: Initializing", "[ ERROR ] Failed to execute stage 'Initializing': '%' must be followed by '%' or '(', found: '%JUUj'", "[ INFO ] Stage: Clean up", " Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log", "[ ERROR ] Failed to execute stage 'Clean up': 'NoneType' object has no attribute 'cleanup'", "[ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf'", "[ INFO ] Stage: Pre-termination", "[ INFO ] Stage: Termination", "[ ERROR ] Execution of setup failed"]}
SSHing to the HostedEngineLocal to get the logs...
/var/lib/ovirt-engine/setup/answers/20200522183241-setup.conf: # OTOPI answer file, generated by human dialog [environment:default]
/var/log/ovirt-engine/setup/ovirt-engine-setup-20200522183241-c7d1kh.log: I'll attach this one because it's huge.
On Fri, May 22, 2020 at 2:11 PM Stephen Panicho <s.panicho@gmail.com> wrote:
That fixed it! Thanks so much for the help, Joop.
On Fri, May 22, 2020 at 1:07 PM Joop <jvdwege@xs4all.nl> wrote:
On 22-5-2020 17:59, Stephen Panicho wrote:
Hey Marcin. There aren't any logs for those services as they haven't been started yet. This failure happens very early in the deploy, just after the page where you configure the engine VM settings.
Unfortunately, I can't try a redeploy on the same node because libvirtd is now in a bad state and can't come up at all. I now get the following error once we get past the Gluster Wizard and move on the the Hosted Engine Deploy: "libvirt is not running! Please ensure it is running before starting the wizard, so system capabilities can be queried."
I'll sift through the ansible to see what it changed and report back. But I'd still like to get past this /etc/pki/CA/cacert.pem issue.
On Fri, May 22, 2020 at 4:45 AM Marcin Sobczyk <msobczyk@redhat.com> wrote:
Hi,
On 5/22/20 7:06 AM, Stephen Panicho wrote:
Hi all! I'm using Cockpit to perform an HCI install, and it fails at the hosted engine deploy. Libvirtd can't restart because of a missing /etc/pki/CA/cacert.pem file.
The log (tasks seemingly from /usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/initial_clean.yml): [ INFO ] TASK [ovirt.hosted_engine_setup : Stop libvirt service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop vdsm config statements] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial abrt config files] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restart abrtd service] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Drop libvirt sasl2 configuration by vdsm] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Stop and disable services] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Restore initial libvirt default network configuration] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Start libvirt] [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Unable to start service libvirtd: Job for libvirtd.service failed because the control process exited with error code.\nSee \"systemctl status libvirtd.service\" and \"journalctl -xe\" for details.\n"}
journalctl -u libvirtd: May 22 04:33:25 node1 libvirtd[26392]: libvirt version: 5.6.0, package: 10.el8 (CBS < <cbs@centos.org>cbs@centos.org>, 2020-02-27-01:09:46, ) May 22 04:33:25 node1 libvirtd[26392]: hostname: node1 May 22 04:33:25 node1 libvirtd[26392]: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory May 22 04:33:25 node1 systemd[1]: libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED May 22 04:33:25 node1 systemd[1]: libvirtd.service: Failed with result 'exit-code'. May 22 04:33:25 node1 systemd[1]: Failed to start Virtualization daemon.
Can you please share journalctl logs for vdsmd and supervdsmd?
I hate it when I have to say: me too.
BUT during test week I think Simone had the same problem and did a /usr/sbin/ovirt-hosted-engine-cleanup?? and then you can retry the deply from the wizard. To recapitulate: Follow the HCI cockpit wizard until you get the error then open a terminal and cleanup and then retry the deployment. It will succeed. Did this yesterday and it worked. Even tried to run cleanup before starting the wizard but thats a no success.
Greetings
Joop
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/4PUIES2JGAFHJY...

On Sun, May 24, 2020 at 1:39 AM Stephen Panicho <s.panicho@gmail.com> wrote:
Fixed the above in https://lists.ovirt.org/archives/list/users@ovirt.org/thread/6QODLB6J5Z74YCV...
I I remember correctly it happened to me during the beta cycle and the only "strange" character I used for the admin password was the @ Donna if it related with what you reported for the % character Gianluca

The https web access is ok,but I cant login the ovirt-engine,how to config a https web? zhouhao@vip.friendtimes.net

Hi, have you used the default certificate created by engine-setup? Or have you provided your custom HTTPS certificate as described below? https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html Anyway in both cases please make sure you are accessing oVirt engine using the same FQDN which you have provided in engine-setup Regards, Martin On Fri, Jun 19, 2020 at 6:06 AM zhouhao@vip.friendtimes.net < zhouhao@vip.friendtimes.net> wrote:
The https web access is ok,but I cant login the ovirt-engine,how to config a https web?
------------------------------ zhouhao@vip.friendtimes.net
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/43UGIBIJ23HSAD...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

I replaced my Certificate follow https://myhomelab.gr/linux/2020/01/20/replacing_ovirt_ssl.html Then I cant upload image files THE LOGS BELOW ———————— 2020-08-03 13:37:42,276+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-28) [272b83fa-1d1a-473e-b72a-19886433801e] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2020-08-03 13:37:43,679+08 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-27) [] User yuanqing@ft.com successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2020-08-03 13:37:43,773+08 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-27) [1e6c5da4] Running command: CreateUserSessionCommand internal: false. 2020-08-03 13:37:43,814+08 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-27) [1e6c5da4] EVENT_ID: USER_VDC_LOGIN(30), User yuanqing@ft.com@ft.com connecting from '192.168.16.199' using session 'AkdaHSmXHYlF3v53VoJRWVCIp0VYjFJPcR/vbRs0tfT20Qq9zylnacmSQKJJ8kwkWmj392Lq8j6EFcz22BKdTg==' logged in. 2020-08-03 13:37:44,428+08 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Command 'AddDisk' id: '0f22fdf1-6016-40f3-9768-b436b5c83972' child commands '[abaa6f3d-82a1-4317-857e-0c32e3ffeca1]' executions were completed, status 'SUCCEEDED' 2020-08-03 13:37:44,428+08 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Command 'AddDisk' id: '0f22fdf1-6016-40f3-9768-b436b5c83972' Updating status to 'SUCCEEDED', The command end method logic will be executed by one of its parent commands. 2020-08-03 13:37:44,488+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Successfully added Upload disk 'vyos-1.1.8-amd64.iso' (disk id: '2720658b-c1cb-4021-810c-8333e80858eb', image id: '6a61dee5-fc07-4afb-af81-3672b9077a3a') for image transfer command '900b725e-d409-4192-bb52-c52cb29b37ee' 2020-08-03 13:37:44,524+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.PrepareImageVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, PrepareImageVDSCommand(HostName = 192.168.4.23, PrepareImageVDSCommandParameters:{hostId='b6142941-cc9e-4da3-b66d-5132f359edb5'}), log id: 4bfe1a2c 2020-08-03 13:37:44,640+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.PrepareImageVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, PrepareImageVDSCommand, return: PrepareImageReturn:{status='Status [code=0, message=Done]'}, log id: 4bfe1a2c 2020-08-03 13:37:44,641+08 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SetVolumeLegalityVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, SetVolumeLegalityVDSCommand( SetVolumeLegalityVDSCommandParameters:{storagePoolId='17fae97b-4a94-4de5-88c0-0743ab2b9ab8', ignoreFailoverLimit='false', storageDomainId='0d707e2b-42ed-48d4-9675-2021a3840f40', imageGroupId='2720658b-c1cb-4021-810c-8333e80858eb', imageId='6a61dee5-fc07-4afb-af81-3672b9077a3a'}), log id: 31d7b9fe 2020-08-03 13:37:44,658+08 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SetVolumeLegalityVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, SetVolumeLegalityVDSCommand, return: , log id: 31d7b9fe 2020-08-03 13:37:44,659+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.AddImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, AddImageTicketVDSCommand(HostName = 192.168.4.23, AddImageTicketVDSCommandParameters:{hostId='b6142941-cc9e-4da3-b66d-5132f359edb5', ticketId='de8fa245-78ca-4d0a-b0b3-b7897aec7af6', timeout='300', operations='[write]', size='241172480', url='file:///rhev/data-center/mnt/_vmdata/0d707e2b-42ed-48d4-9675-2021a3840f40/images/2720658b-c1cb-4021-810c-8333e80858eb/6a61dee5-fc07-4afb-af81-3672b9077a3a', filename='null', sparse='true', transferId='900b725e-d409-4192-bb52-c52cb29b37ee'}), log id: 1687202b 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.AddImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, AddImageTicketVDSCommand, return: StatusOnlyReturn [status=Status [code=0, message=Done]], log id: 1687202b 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Started transfer session with ticket id de8fa245-78ca-4d0a-b0b3-b7897aec7af6, timeout 300 seconds 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Adding image ticket to ovirt-imageio-proxy, id de8fa245-78ca-4d0a-b0b3-b7897aec7af6 2020-08-03 13:37:44,679+08 ERROR [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Failed to add image ticket to ovirt-imageio-proxy: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching vdesk.bojoy.net found. at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) [jsse.jar:1.8.0_212] at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) [rt.jar:1.8.0_212] at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) [rt.jar:1.8.0_212] at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1334) [rt.jar:1.8.0_212] at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1309) [rt.jar:1.8.0_212] at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:259) [rt.jar:1.8.0_212] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.addImageTicketToProxy(TransferDiskImageCommand.java:988) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.startImageTransferSession(TransferDiskImageCommand.java:911) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleImageIsReadyForTransfer(TransferDiskImageCommand.java:554) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleInitializing(TransferDiskImageCommand.java:525) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.executeStateHandler(TransferDiskImageCommand.java:460) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.proceedCommandExecution(TransferDiskImageCommand.java:447) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferImageCommandCallback.doPolling(TransferImageCommandCallback.java:21) [bll.jar:] at org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethodsImpl(CommandCallbacksPoller.java:175) [bll.jar:] at org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethods(CommandCallbacksPoller.java:109) [bll.jar:] at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [rt.jar:1.8.0_212] at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [rt.jar:1.8.0_212] at org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.access$201(ManagedScheduledThreadPoolExecutor.java:383) [javax.enterprise.concurrent-1.0.jar:] at org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.run(ManagedScheduledThreadPoolExecutor.java:534) [javax.enterprise.concurrent-1.0.jar:] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [rt.jar:1.8.0_212] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [rt.jar:1.8.0_212] at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_212] at org.glassfish.enterprise.concurrent.ManagedThreadFactoryImpl$ManagedThread.run(ManagedThreadFactoryImpl.java:250) [javax.enterprise.concurrent-1.0.jar:] at org.jboss.as.ee.concurrent.service.ElytronManagedThreadFactory$ElytronManagedThread.run(ElytronManagedThreadFactory.java:78) Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching vdesk.bojoy.net found. at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:214) [rt.jar:1.8.0_212] at sun.security.util.HostnameChecker.match(HostnameChecker.java:96) [rt.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:455) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:436) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:200) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1621) [jsse.jar:1.8.0_212] ... 30 more 2020-08-03 13:37:44,680+08 ERROR [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Failed to add image ticket to ovirt-imageio-proxy 2020-08-03 13:37:44,691+08 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] EVENT_ID: TRANSFER_IMAGE_STOPPED_BY_SYSTEM_FAILED_TO_ADD_TICKET_TO_PROXY(1,070), Transfer was stopped by system. Reason: failed to add image ticket to ovirt-imageio-proxy. 2020-08-03 13:37:44,693+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Updating image transfer 900b725e-d409-4192-bb52-c52cb29b37ee (image 2720658b-c1cb-4021-810c-8333e80858eb) phase to Paused by System 2020-08-03 13:37:44,700+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Returning from proceedCommandExecution after starting transfer session for image transfer command '900b725e-d409-4192-bb52-c52cb29b37ee' 2020-08-03 13:37:44,751+08 ERROR [org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-28) [d1ae3442-a241-458f-a0cc-1a9ee9a3d0aa] Query execution failed due to insufficient permissions. 2020-08-03 13:37:44,752+08 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-28) [] Operation Failed: query execution failed due to insufficient permissions. 2020-08-03 13:37:45,760+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-90) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Transfer was paused by system. Upload disk 'vyos-1.1.8-amd64.iso' (disk id: '2720658b-c1cb-4021-810c-8333e80858eb', image id: '6a61dee5-fc07-4afb-af81-3672b9077a3a') 2020-08-03 13:37:46,263+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-32) [86b6811a-69a1-4771-b7dc-decaee05edf2] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2020-08-03 13:37:49,107+08 INFO [org.ovirt.engine.core.bll.AttachUserToVmFromPoolAndRunCommand] (default task-32) [97b00c94-904c-454e-bd5e-b4500a3e4a89] Lock Acquired to object 'EngineLock:{exclusiveLocks='[513a013e-7a92-4a28-801c-b1ceefcb551d=VM, 05230164-af26-468d-b1c9-32f2e4d64569=USER_VM_POOL]', sharedLocks=''}' 2020-08-03 13:37:49,196+08 INFO [org.ovirt.engine.core.bll.AttachUserToVmFromPoolAndRunCommand] (default task-32) [97b00c94-904c-454e-bd5e-b4500a3e4a89] Running command: AttachUserToVmFromPoolAndRunCommand internal: false. Entities affected : ID: 77584b78-82a4-48de-8b75-78ff3628a5b7 Type: VmPoolAction group VM_POOL_BASIC_OPERATIONS with role type USER zhouhao@vip.friendtimes.net

On Mon, Aug 3, 2020 at 8:55 AM zhouhao@vip.friendtimes.net <zhouhao@vip.friendtimes.net> wrote:
I replaced my Certificate follow https://myhomelab.gr/linux/2020/01/20/replacing_ovirt_ssl.html Then I cant upload image files
We need basic detail on this issue like oVirt version used, but this smells like this bug: https://bugzilla.redhat.com/1862107 Note that this issue is only about the proxy, you can upload images directly the host using the SDK: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/upload_di... Here is example upload on my test environment: $ ./upload_disk.py --engine-url https://engine3 \ --username admin@internal \ --password-file engine3-password \ --cafile engine3.pem \ --sd-name nfs1 \ --disk-format raw \ --disk-sparse \ /var/tmp/fedora-32.raw Checking image... Image format: raw Disk format: raw Disk content type: data Disk provisioned size: 6442450944 Disk initial size: 6442450944 Disk name: fedora-32.raw Disk backup: False Connecting... Creating disk... Disk ID: 139c29a3-b9a8-4501-836d-92417c3d2eaf Creating image transfer... Transfer ID: d50a1b50-5bd8-417e-a950-d3a19a262daa Transfer host name: host4 Uploading image... [ 100.00% ] 6.00 GiB, 3.01 seconds, 1.99 GiB/s Finalizing image transfer... Upload completed successfully Nir
THE LOGS BELOW ———————— 2020-08-03 13:37:42,276+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-28) [272b83fa-1d1a-473e-b72a-19886433801e] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2020-08-03 13:37:43,679+08 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-27) [] User yuanqing@ft.com successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2020-08-03 13:37:43,773+08 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-27) [1e6c5da4] Running command: CreateUserSessionCommand internal: false. 2020-08-03 13:37:43,814+08 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-27) [1e6c5da4] EVENT_ID: USER_VDC_LOGIN(30), User yuanqing@ft.com@ft.com connecting from '192.168.16.199' using session 'AkdaHSmXHYlF3v53VoJRWVCIp0VYjFJPcR/vbRs0tfT20Qq9zylnacmSQKJJ8kwkWmj392Lq8j6EFcz22BKdTg==' logged in. 2020-08-03 13:37:44,428+08 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Command 'AddDisk' id: '0f22fdf1-6016-40f3-9768-b436b5c83972' child commands '[abaa6f3d-82a1-4317-857e-0c32e3ffeca1]' executions were completed, status 'SUCCEEDED' 2020-08-03 13:37:44,428+08 INFO [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Command 'AddDisk' id: '0f22fdf1-6016-40f3-9768-b436b5c83972' Updating status to 'SUCCEEDED', The command end method logic will be executed by one of its parent commands. 2020-08-03 13:37:44,488+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Successfully added Upload disk 'vyos-1.1.8-amd64.iso' (disk id: '2720658b-c1cb-4021-810c-8333e80858eb', image id: '6a61dee5-fc07-4afb-af81-3672b9077a3a') for image transfer command '900b725e-d409-4192-bb52-c52cb29b37ee' 2020-08-03 13:37:44,524+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.PrepareImageVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, PrepareImageVDSCommand(HostName = 192.168.4.23, PrepareImageVDSCommandParameters:{hostId='b6142941-cc9e-4da3-b66d-5132f359edb5'}), log id: 4bfe1a2c 2020-08-03 13:37:44,640+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.PrepareImageVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, PrepareImageVDSCommand, return: PrepareImageReturn:{status='Status [code=0, message=Done]'}, log id: 4bfe1a2c 2020-08-03 13:37:44,641+08 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SetVolumeLegalityVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, SetVolumeLegalityVDSCommand( SetVolumeLegalityVDSCommandParameters:{storagePoolId='17fae97b-4a94-4de5-88c0-0743ab2b9ab8', ignoreFailoverLimit='false', storageDomainId='0d707e2b-42ed-48d4-9675-2021a3840f40', imageGroupId='2720658b-c1cb-4021-810c-8333e80858eb', imageId='6a61dee5-fc07-4afb-af81-3672b9077a3a'}), log id: 31d7b9fe 2020-08-03 13:37:44,658+08 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.SetVolumeLegalityVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, SetVolumeLegalityVDSCommand, return: , log id: 31d7b9fe 2020-08-03 13:37:44,659+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.AddImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] START, AddImageTicketVDSCommand(HostName = 192.168.4.23, AddImageTicketVDSCommandParameters:{hostId='b6142941-cc9e-4da3-b66d-5132f359edb5', ticketId='de8fa245-78ca-4d0a-b0b3-b7897aec7af6', timeout='300', operations='[write]', size='241172480', url='file:///rhev/data-center/mnt/_vmdata/0d707e2b-42ed-48d4-9675-2021a3840f40/images/2720658b-c1cb-4021-810c-8333e80858eb/6a61dee5-fc07-4afb-af81-3672b9077a3a', filename='null', sparse='true', transferId='900b725e-d409-4192-bb52-c52cb29b37ee'}), log id: 1687202b 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.AddImageTicketVDSCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] FINISH, AddImageTicketVDSCommand, return: StatusOnlyReturn [status=Status [code=0, message=Done]], log id: 1687202b 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Started transfer session with ticket id de8fa245-78ca-4d0a-b0b3-b7897aec7af6, timeout 300 seconds 2020-08-03 13:37:44,668+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Adding image ticket to ovirt-imageio-proxy, id de8fa245-78ca-4d0a-b0b3-b7897aec7af6 2020-08-03 13:37:44,679+08 ERROR [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Failed to add image ticket to ovirt-imageio-proxy: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching vdesk.bojoy.net found. at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) [jsse.jar:1.8.0_212] at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) [jsse.jar:1.8.0_212] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) [jsse.jar:1.8.0_212] at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) [rt.jar:1.8.0_212] at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) [rt.jar:1.8.0_212] at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1334) [rt.jar:1.8.0_212] at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1309) [rt.jar:1.8.0_212] at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:259) [rt.jar:1.8.0_212] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.addImageTicketToProxy(TransferDiskImageCommand.java:988) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.startImageTransferSession(TransferDiskImageCommand.java:911) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleImageIsReadyForTransfer(TransferDiskImageCommand.java:554) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.handleInitializing(TransferDiskImageCommand.java:525) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.executeStateHandler(TransferDiskImageCommand.java:460) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand.proceedCommandExecution(TransferDiskImageCommand.java:447) [bll.jar:] at org.ovirt.engine.core.bll.storage.disk.image.TransferImageCommandCallback.doPolling(TransferImageCommandCallback.java:21) [bll.jar:] at org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethodsImpl(CommandCallbacksPoller.java:175) [bll.jar:] at org.ovirt.engine.core.bll.tasks.CommandCallbacksPoller.invokeCallbackMethods(CommandCallbacksPoller.java:109) [bll.jar:] at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [rt.jar:1.8.0_212] at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [rt.jar:1.8.0_212] at org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.access$201(ManagedScheduledThreadPoolExecutor.java:383) [javax.enterprise.concurrent-1.0.jar:] at org.glassfish.enterprise.concurrent.internal.ManagedScheduledThreadPoolExecutor$ManagedScheduledFutureTask.run(ManagedScheduledThreadPoolExecutor.java:534) [javax.enterprise.concurrent-1.0.jar:] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [rt.jar:1.8.0_212] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [rt.jar:1.8.0_212] at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_212] at org.glassfish.enterprise.concurrent.ManagedThreadFactoryImpl$ManagedThread.run(ManagedThreadFactoryImpl.java:250) [javax.enterprise.concurrent-1.0.jar:] at org.jboss.as.ee.concurrent.service.ElytronManagedThreadFactory$ElytronManagedThread.run(ElytronManagedThreadFactory.java:78) Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching vdesk.bojoy.net found. at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:214) [rt.jar:1.8.0_212] at sun.security.util.HostnameChecker.match(HostnameChecker.java:96) [rt.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:455) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:436) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:200) [jsse.jar:1.8.0_212] at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124) [jsse.jar:1.8.0_212] at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1621) [jsse.jar:1.8.0_212] ... 30 more
2020-08-03 13:37:44,680+08 ERROR [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Failed to add image ticket to ovirt-imageio-proxy 2020-08-03 13:37:44,691+08 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] EVENT_ID: TRANSFER_IMAGE_STOPPED_BY_SYSTEM_FAILED_TO_ADD_TICKET_TO_PROXY(1,070), Transfer was stopped by system. Reason: failed to add image ticket to ovirt-imageio-proxy. 2020-08-03 13:37:44,693+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Updating image transfer 900b725e-d409-4192-bb52-c52cb29b37ee (image 2720658b-c1cb-4021-810c-8333e80858eb) phase to Paused by System 2020-08-03 13:37:44,700+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-35) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Returning from proceedCommandExecution after starting transfer session for image transfer command '900b725e-d409-4192-bb52-c52cb29b37ee' 2020-08-03 13:37:44,751+08 ERROR [org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-28) [d1ae3442-a241-458f-a0cc-1a9ee9a3d0aa] Query execution failed due to insufficient permissions. 2020-08-03 13:37:44,752+08 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-28) [] Operation Failed: query execution failed due to insufficient permissions. 2020-08-03 13:37:45,760+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-90) [2a5567e7-25bc-4d58-ab31-8f88f5a4a5fa] Transfer was paused by system. Upload disk 'vyos-1.1.8-amd64.iso' (disk id: '2720658b-c1cb-4021-810c-8333e80858eb', image id: '6a61dee5-fc07-4afb-af81-3672b9077a3a') 2020-08-03 13:37:46,263+08 INFO [org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default task-32) [86b6811a-69a1-4771-b7dc-decaee05edf2] Running command: TransferImageStatusCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type USER 2020-08-03 13:37:49,107+08 INFO [org.ovirt.engine.core.bll.AttachUserToVmFromPoolAndRunCommand] (default task-32) [97b00c94-904c-454e-bd5e-b4500a3e4a89] Lock Acquired to object 'EngineLock:{exclusiveLocks='[513a013e-7a92-4a28-801c-b1ceefcb551d=VM, 05230164-af26-468d-b1c9-32f2e4d64569=USER_VM_POOL]', sharedLocks=''}' 2020-08-03 13:37:49,196+08 INFO [org.ovirt.engine.core.bll.AttachUserToVmFromPoolAndRunCommand] (default task-32) [97b00c94-904c-454e-bd5e-b4500a3e4a89] Running command: AttachUserToVmFromPoolAndRunCommand internal: false. Entities affected : ID: 77584b78-82a4-48de-8b75-78ff3628a5b7 Type: VmPoolAction group VM_POOL_BASIC_OPERATIONS with role type USER
________________________________ zhouhao@vip.friendtimes.net
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/DCF53I4GOXYDMD...
participants (9)
-
Gianluca Cecchi
-
Joop
-
Marcin Sobczyk
-
Martin Perina
-
Nir Soffer
-
Staniforth, Paul
-
Stephen Panicho
-
Strahil Nikolov
-
zhouhao@vip.friendtimes.net