[Users] Unable to add host in a development setup - "Host kernelpanic.home installation failed. Failed to decode own public key from store 'keys/engine.p12' using alias '1'."

Alon Bar-Lev alonbl at redhat.com
Mon Apr 29 08:48:04 UTC 2013



----- Original Message -----
> From: "Limor Gavish" <lgavish at gmail.com>
> To: "Alon Bar-Lev" <alonbl at redhat.com>
> Cc: "Yuval M" <yuvalme at gmail.com>, users at ovirt.org, "Nezer Zaidenberg" <nzaidenberg at mac.com>, "Vered Volansky"
> <vered at redhat.com>
> Sent: Monday, April 29, 2013 11:38:09 AM
> Subject: Re: [Users] Unable to add host in a development setup - "Host kernelpanic.home installation failed. Failed
> to decode own public key from store 'keys/engine.p12' using alias '1'."
> 
> Thank you very much for trying to help but ovirt engine still doesn't work
> - I cannot connect to the server through the web.

Thank you for testing!
However something is not behaving as expected... need to figure out what.

> 
> I have overwritten the otopi the branch like you said:
> 
> *git checkout engine_3.2*
> *git branch -D otopi*
> *git fetch https://github.com/alonbl/ovirt-engine.git otopi*
> *git checkout -b otopi FETCH_HEAD*

Should be OK

> Then I re-built:
> 
> *make clean install-dev PREFIX=$HOME/ovirt-engine
> *
> *$HOME/ovirt-engine/bin/engine-setup-2
> --jboss-home=$HOME/ovirt-engine/jboss-as-7.1.1.Final
> *
> *$HOME/ovirt-engine/share/ovirt-engine/services/ovirt-engine.py start*
> 
> But the warnings still appeared:
> 
> *2013-04-29 10:03:28,061 WARN  [org.ovirt.engine.core.utils.LocalConfig]
> (MSC service thread 1-3) The file
> "/usr/share/ovirt-engine/conf/engine.conf.defaults" doesn't exist or isn't
> readable. Will return an empty set of properties.*
> *2013-04-29 10:03:28,061 WARN  [org.ovirt.engine.core.utils.LocalConfig]
> (MSC service thread 1-3) The file "/etc/ovirt-engine/engine.conf" doesn't
> exist or isn't readable. Will return an empty set of properties.*
> 
> I tried to execute the engine-setup-2 command as root (*sudo
> $HOME/ovirt-engine/bin/engine-setup-2
> --jboss-home=$HOME/ovirt-engine/jboss-as-7.1.1.Final*) and it didn't help
> (I answered all the questions with the default answers - not sure if that
> was the right thing to do). Didn't help.

NO... do not runt his as root! this setup should be fully functioning at unprivileged context.

> So I manually created the files  "*
> /usr/share/ovirt-engine/conf/engine.conf.defaults*" and "*
> /etc/ovirt-engine/engine.conf*" as follows:
> 
> *[wil at bufferoverflow ~]$ cat
> /usr/share/ovirt-engine/conf/engine.conf.defaults*
> *JAVA_HOME=/usr/lib/jvm/jre-1.7.0-openjdk.x86_64*
> *JBOSS_HOME=/home/wil/ovirt-engine/jboss-as-7.1.1.Final*

Something is wrong... the 'PREFIX' is not set correctly. It should be handled at the generated-files rule at Makefile.

Can you please send me the output of:

$ make install-dev PREFIX=$HOME/ovirt-engine DEV_REBUILD=0

Thank you!

> *ENGINE_USER=wil*
> *ENGINE_GROUP=wil*
> *ENGINE_PROXY_ENABLED=false*
> *ENGINE_HTTP_ENABLED=true*
> *ENGINE_HTTP_PORT=8700*
> *ENGINE_HTTPS_ENABLED=false*
> *ENGINE_AJP_ENABLED=false*
> *ENGINE_DB_USER=postgres*
> *ENGINE_DB_PASSWORD=*
> *ENGINE_DEBUG_ADDRESS=0.0.0.0:8787*
> *#*
> *# For descriptions of the parameters and their default values look*
> *# at the /usr/share/ovirt-engine/conf/engine.conf.defaults file.*
> *#*
> *# Please note that the engine installation tool engine-setup will*
> *# append the modified parameters to the end of this file.*
> *#*
> 
> and I put the same contents in* /etc/ovirt-engine/engine.conf*
> 
> Still I can't connect to the ovirt through the web (http://127.0.0.1:8700/)
> I get "*This webpage is not available*".
> Full logs are attached (last attempt to run ovirt at 10:59).
> 
> Here are the last two commits in "git log" of my "otopi" branch:
> 
> *commit 98475140979ee11965154030f54825b14a1510e4*
> *Author: Alon Bar-Lev <alonbl at redhat.com>*
> *Date:   Thu Apr 25 12:39:50 2013 +0300*
> *
> *
> *    packaging: engine-setup re-write using otopi*
> *
> *
> *    Change-Id: I4d5e3ac7927802326e324c9b98ada75b421638aa*
> *    Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>*
> *    Signed-off-by: Sandro Bonazzola <sbonazzo at redhat.com>*
> *    Signed-off-by: Alex Lourie <alourie at redhat.com>*
> *
> *
> *commit 3715fda9fe88099344feef59f9c74366a6e6f48d*
> *Author: Alon Bar-Lev <alonbl at redhat.com>*
> *Date:   Mon Apr 29 02:33:44 2013 +0300*
> *
> *
> *    core: re-support broken apache proxy*
> *
> *
> *    apache proxy support was broken in:*
> *    I37156061cbdd, 'core: i18n splash screen.'*
> *
> *
> *    The changed cause invalid redirection and the following error message
> in*
> *    console log:*
> *    ---*
> *    Exception while dispatching incoming RPC call:*
> *    java.lang.SecurityException: Blocked request without GWT base path*
> *    header (XSRF attack?)*
> *    ---*
> *
> *
> *    Content:*
> *
> *
> *    1. Remove unused ovirt-engine.html (what was index.html) as it is*
> *       superseded by index.jsp*
> *
> *
> *    2. Remove redundant welcome directive from web.xml*
> *
> *
> *    3. Rename /index.jsp to /ovirt-engine.jsp to be referenced by both*
> *       apache and jboss.*
> *
> *
> *    4. Rename servlet mapping of /index to /ovirt-engine.*
> *
> *
> *    5. Modify 404.html pages to redirect to /ovirt-engine instead of*
> *       /ovirt-engine.html*
> *
> *
> *    6. Remove reference of ovirt-engine.html from the proxy.*
> *
> *
> *    Change-Id: I7ac8feb720d73f0b1107b0bf0908930c525ea542*
> *    Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>*
> 
> 
> 
> 
> 
> 
> On Mon, Apr 29, 2013 at 9:39 AM, Alon Bar-Lev <alonbl at redhat.com> wrote:
> 
> >
> >
> > ----- Original Message -----
> > > From: "Limor Gavish" <lgavish at gmail.com>
> > > To: "Alon Bar-Lev" <alonbl at redhat.com>
> > > Cc: "Yuval M" <yuvalme at gmail.com>, users at ovirt.org, "Nezer Zaidenberg" <
> > nzaidenberg at mac.com>, "Vered Volansky"
> > > <vered at redhat.com>
> > > Sent: Monday, April 29, 2013 8:28:47 AM
> > > Subject: Re: [Users] Unable to add host in a development setup - "Host
> > kernelpanic.home installation failed. Failed
> > > to decode own public key from store 'keys/engine.p12' using alias '1'."
> > >
> > > Thank you very much for your prompt response. However, according to "git
> > > rebase" (after "git fetch") there is no new change
> > >
> > > [wil at bufferoverflow repository]$ git fetch
> > > https://github.com/alonbl/ovirt-engine.git otopi
> > > From https://github.com/alonbl/ovirt-engine
> > >  * branch            otopi      -> FETCH_HEAD
> > > [wil at bufferoverflow repository]$ git rebase --merge FETCH_HEAD
> > > *Current branch otopi is up to date.*
> > > *
> > > *
> > > The latest change I see in "git log" is
> > >
> > > [wil at bufferoverflow repository]$ git show HEAD
> > > commit 99d95891ab0e814159a463d246543b08e41c746d
> > > Author: Alon Bar-Lev <alonbl at redhat.com>
> > > Date:   Thu Apr 25 12:39:50 2013 +0300
> > >
> > >     packaging: engine-setup re-write using otopi
> > >
> > >     Change-Id: I4d5e3ac7927802326e324c9b98ada75b421638aa
> > >     Signed-off-by: Alon Bar-Lev <alonbl at redhat.com>
> > >     Signed-off-by: Sandro Bonazzola <sbonazzo at redhat.com>
> > >     Signed-off-by: Alex Lourie <alourie at redhat.com>
> > >
> > > If you don't wish to push the change yet, you can send a patch and I will
> > > apply it.
> >
> > This branch is rolling rebase, forced push, so rebase will not work in
> > this regard.
> > Soon it will be merged to master so it will be easier to track.
> >
> > Please try:
> >
> > $ git checkout master
> > $ git branch -D otopi
> > $ git fetch
> > $ git checkout otopi
> >
> > You should have:
> > commit 98475140979ee11965154030f54825b14a1510e4
> >
> > Thanks!
> > Alon.
> >
> > >
> > >
> > > On Mon, Apr 29, 2013 at 1:04 AM, Alon Bar-Lev <alonbl at redhat.com> wrote:
> > >
> > > >
> > > >
> > > > ----- Original Message -----
> > > > > From: "Limor Gavish" <lgavish at gmail.com>
> > > > > To: "Alon Bar-Lev" <alonbl at redhat.com>
> > > > > Cc: "Yuval M" <yuvalme at gmail.com>, users at ovirt.org, "Nezer
> > Zaidenberg" <
> > > > nzaidenberg at mac.com>, "Vered Volansky"
> > > > > <vered at redhat.com>
> > > > > Sent: Sunday, April 28, 2013 10:56:45 PM
> > > > > Subject: Re: [Users] Unable to add host in a development setup -
> > "Host
> > > > kernelpanic.home installation failed. Failed
> > > > > to decode own public key from store 'keys/engine.p12' using alias
> > '1'."
> > > > >
> > > > > Hi,
> > > > >
> > > > > Thank you very much for your help but I do not succeed to start the
> > > > engine
> > > > > after compiling your version.
> > > > >
> > > > > I switched to the otopi branch like you said.
> > > > > git fetch https://github.com/alonbl/ovirt-engine.git otopi
> > > > > git checkout -b otopi FETCH_HEAD
> > > > >
> > > > > I followed the instructions in
> > > > > https://github.com/alonbl/ovirt-engine/blob/otopi/README.developer
> > > > > *So here are the last 3 commands I used:*
> > > > > make clean install-dev PREFIX=$HOME/ovirt-engine
> > > > > $HOME/ovirt-engine/bin/engine-setup-2
> > > > > --jboss-home=$HOME/ovirt-engine/jboss-as-7.1.1.Final
> > > > > $HOME/ovirt-engine/share/ovirt-engine/services/ovirt-engine.py start
> > > > >
> > > > > However, the last command
> > > > > ($HOME/ovirt-engine/share/ovirt-engine/services/ovirt-engine.py
> > start)
> > > > > hangs.
> > > >
> > > > This is expected... it is the service running, Ctrl-C to terminate.
> > > >
> > > > > *In server.log I see the following error:*
> > > > > 2013-04-28 22:13:40,203 ERROR [org.jboss.as] (MSC service thread
> > 1-3)
> > > > > JBAS015875: JBoss AS 7.1.1.Final "Brontes" started (with errors) in
> > > > 2788ms
> > > > > - Started 504 of 5     40 services (1 services failed or missing
> > > > > dependencies, 34 services are passive or on-demand)
> > > > > *In engine.log I see the following error:*
> > > > > 2013-04-28 22:13:40,082 ERROR
> > > > > [org.ovirt.engine.core.utils.ErrorTranslatorImpl] (MSC service thread
> > > > 1-4)
> > > > > File: bundles/VdsmErrors could not be loaded: java.util.Mis
> > > > >  singResourceException: Can't find bundle for base name
> > > > bundles/VdsmErrors,
> > > > > locale en_US
> > > > >
> > > > > Full logs are attached.
> > > >
> > > > The problem is that for some reason the PREFIX is not taken into
> > account.
> > > >
> > > > Related errors:
> > > > 2013-04-28 19:57:46,468 WARN  [org.ovirt.engine.core.utils.LocalConfig]
> > > > (MSC service thread 1-3) The file
> > > > "/usr/share/ovirt-engine/conf/engine.conf.defaults" doesn't exist or
> > isn't
> > > > readable. Will return an empty set of properties.
> > > > 2013-04-28 19:57:46,468 WARN  [org.ovirt.engine.core.utils.LocalConfig]
> > > > (MSC service thread 1-3) The file "/etc/ovirt-engine/engine.conf"
> > doesn't
> > > > exist or isn't readable. Will return an empty set of properties.
> > > >
> > > > It can be due to previous make execution without PREFIX.
> > > > I've committed a change to Makefile to force regenerate the file
> > locations
> > > > when using install-dev.
> > > > Can you please give it a try?
> > > >
> > > > Thanks!
> > > >
> > > > > Thanks,
> > > > > Limor on behalf of Yuval
> > > > >
> > > > >
> > > > > On Sun, Apr 28, 2013 at 2:51 PM, Alon Bar-Lev <alonbl at redhat.com>
> > wrote:
> > > > >
> > > > > >
> > > > > > Maybe someone can help you in this.
> > > > > >
> > > > > > I prefer people install development mode and use fully functional
> > > > product
> > > > > > within their development environment.
> > > > > >
> > > > > > Alon
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > > From: "Yuval M" <yuvalme at gmail.com>
> > > > > > > To: "Alon Bar-Lev" <alonbl at redhat.com>
> > > > > > > Cc: users at ovirt.org, "Nezer Zaidenberg" <nzaidenberg at mac.com>,
> > > > "Limor
> > > > > > Gavish" <lgavish at gmail.com>, "Vered Volansky"
> > > > > > > <vered at redhat.com>
> > > > > > > Sent: Sunday, April 28, 2013 12:45:33 PM
> > > > > > > Subject: Re: [Users] Unable to add host in a development setup -
> > > > "Host
> > > > > > kernelpanic.home installation failed. Failed
> > > > > > > to decode own public key from store 'keys/engine.p12' using alias
> > > > '1'."
> > > > > > >
> > > > > > > But is there an option to just manually install the new host?
> > > > > > >
> > > > > > > Yuval
> > > > > > >
> > > > > > >
> > > > > > > On Sun, Apr 28, 2013 at 11:46 AM, Alon Bar-Lev <
> > alonbl at redhat.com>
> > > > > > wrote:
> > > > > > >
> > > > > > > >
> > > > > > > > Development mode installation is not yet supported to perform
> > > > > > host-deploy.
> > > > > > > > There is ongoing work for fully functional development
> > environment.
> > > > > > > > You can test this if you like before it is merged upstream.
> > > > > > > > Sources available here[1], documentation is here[2].
> > > > > > > >
> > > > > > > > [1] https://github.com/alonbl/ovirt-engine/tree/otopi
> > > > > > > > [2]
> > > > https://github.com/alonbl/ovirt-engine/blob/otopi/README.developer
> > > > > > > >
> > > > > > > > ----- Original Message -----
> > > > > > > > > From: "Yuval M" <yuvalme at gmail.com>
> > > > > > > > > To: users at ovirt.org, "Nezer Zaidenberg" <nzaidenberg at mac.com
> > >,
> > > > > > "Limor
> > > > > > > > Gavish" <lgavish at gmail.com>
> > > > > > > > > Sent: Saturday, April 27, 2013 5:22:59 PM
> > > > > > > > > Subject: [Users] Unable to add host in a development setup -
> > > > "Host
> > > > > > > > kernelpanic.home installation failed. Failed to
> > > > > > > > > decode own public key from store 'keys/engine.p12' using
> > alias
> > > > '1'."
> > > > > > > > >
> > > > > > > > > I'm getting the aforementioned error message when trying to
> > > > > > reinstall a
> > > > > > > > host
> > > > > > > > > that failed to be added to the cluster.
> > > > > > > > >
> > > > > > > > > in the engine log I have:
> > > > > > > > >
> > > > > > > > > 2013-04-27 16:29:58,249 ERROR
> > > > > > > > [org.ovirt.engine.core.bll.InstallVdsCommand]
> > > > > > > > > (pool-3-thread-49) [3070670b] Host installation failed for
> > host
> > > > > > > > > cf09fb25-b8a4-4068-a
> > > > > > > > > 3c8-9869d0ba4ff9, kernelpanic.home.:
> > java.lang.RuntimeException:
> > > > > > Failed
> > > > > > > > to
> > > > > > > > > decode own public key from store 'keys/engine.p12' using
> > alias
> > > > '1'
> > > > > > > > > at
> > > > > > > > >
> > > > > > > >
> > > > > >
> > > >
> > org.ovirt.engine.core.bll.VdsDeploy._getEngineSSHPublicKey(VdsDeploy.java:227)
> > > > > > > > > [bll.jar:]
> > > > > > > > > at
> > > > org.ovirt.engine.core.bll.VdsDeploy.access$400(VdsDeploy.java:71)
> > > > > > > > > [bll.jar:]
> > > > > > > > > at
> > org.ovirt.engine.core.bll.VdsDeploy$9.call(VdsDeploy.java:334)
> > > > > > > > [bll.jar:]
> > > > > > > > > at
> > > > > > > > >
> > > > > > > >
> > > > > >
> > > >
> > org.ovirt.engine.core.bll.VdsDeploy._nextCustomizationEntry(VdsDeploy.java:476)
> > > > > > > > > [bll.jar:]
> > > > > > > > > at
> > > > > > org.ovirt.engine.core.bll.VdsDeploy._threadMain(VdsDeploy.java:687)
> > > > > > > > > [bll.jar:]
> > > > > > > > > at
> > > > org.ovirt.engine.core.bll.VdsDeploy.access$1400(VdsDeploy.java:71)
> > > > > > > > > [bll.jar:]
> > > > > > > > > at
> > org.ovirt.engine.core.bll.VdsDeploy$32.run(VdsDeploy.java:779)
> > > > > > > > [bll.jar:]
> > > > > > > > > at java.lang.Thread.run(Thread.java:722)
> > > > [rt.jar:1.7.0_09-icedtea]
> > > > > > > > > Caused by: java.io.FileNotFoundException: keys/engine.p12 (No
> > > > such
> > > > > > file
> > > > > > > > or
> > > > > > > > > directory)
> > > > > > > > > at java.io.FileInputStream.open(Native Method)
> > > > > > [rt.jar:1.7.0_09-icedtea]
> > > > > > > > > at java.io.FileInputStream.<init>(FileInputStream.java:138)
> > > > > > > > > [rt.jar:1.7.0_09-icedtea]
> > > > > > > > > at java.io.FileInputStream.<init>(FileInputStream.java:97)
> > > > > > > > > [rt.jar:1.7.0_09-icedtea]
> > > > > > > > > at
> > > > > > > > >
> > > > > > > >
> > > > > >
> > > >
> > org.ovirt.engine.core.bll.VdsDeploy._getEngineSSHPublicKey(VdsDeploy.java:206)
> > > > > > > > > [bll.jar:]
> > > > > > > > > ... 7 more
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > My setup has an all-in-one node with the engine installed
> > from
> > > > > > sources,
> > > > > > > > >
> > > > > > > > > and I'm attempting to add a seconds host (Fedora 18, vdsm
> > from
> > > > yum,
> > > > > > > > nothing
> > > > > > > > > fancy).
> > > > > > > > >
> > > > > > > > > I installed vdsm (yum install vdsm), and disabled SSL as
> > > > instructed
> > > > > > in:
> > > > > > > > > http://www.ovirt.org/OVirt_-_disable_SSL_in_VDSM
> > > > > > > > >
> > > > > > > > > I read here that the development setup (i.e engine installed
> > from
> > > > > > > > sources)
> > > > > > > > > does not support automatic deployment:
> > > > > > > > > http://www.mail-archive.com/users@ovirt.org/msg07608.html
> > > > > > > > >
> > > > > > > > > Is this still the case?
> > > > > > > > > If so, how do I deploy an additional host in such a setup?
> > > > > > > > >
> > > > > > > > > Thanks,
> > > > > > > > >
> > > > > > > > > Yuval Meir
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > _______________________________________________
> > > > > > > > > Users mailing list
> > > > > > > > > Users at ovirt.org
> > > > > > > > > http://lists.ovirt.org/mailman/listinfo/users
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> 



More information about the Users mailing list