[ovirt-users] Stuck at "Enrolling serial console certificate"

[Simone Tiraboschi]

On Fri, Aug 21, 2015 at 7:32 PM, Juan Hernández <jhernand at redhat.com> wrote:
> On 08/21/2015 12:22 PM, Sahina Bose wrote:
>>
>>
>> On 08/21/2015 03:50 PM, Alon Bar-Lev wrote:
>>> Interesting.
>>>
>>> Please execute manually:
>>>
>>> # /usr/share/ovirt-engine/bin/pki-enroll-openssh-cert.sh --name=rhsdev9.lab.eng.blr.redhat.com-ssh --host --id=rhsdev9.lab.eng.blr.redhat.com --principals=rhsdev9.lab.eng.blr.redhat.com --days=1825
>>
>>
>> It returns immediately with:
>> [root at dhcp43-86 ~]#
>> /usr/share/ovirt-engine/bin/pki-enroll-openssh-cert.sh
>> --name=rhsdev9.lab.eng.blr.redhat.com-ssh --host
>> --id=rhsdev9.lab.eng.blr.redhat.com
>> --principals=rhsdev9.lab.eng.blr.redhat.com --days=1825
>> Signed host key
>> /etc/pki/ovirt-engine/certs/rhsdev9.lab.eng.blr.redhat.com-ssh-cert.pub:
>> id "rhsdev9.lab.eng.blr.redhat.com" serial 0 for
>> rhsdev9.lab.eng.blr.redhat.com valid from 2015-08-21T02:51:27 to
>> 2020-08-19T03:51:27
>>
>>
>
> Check your SELinux log file. Most probably SELinux is blocking some
> access to the generated files, and then ssh-keygen is asking
> interactively, and thus blocking for ever.

We are probably experimenting a related issue on hosted-engine-setup
CI jenkins jobs:
http://jenkins-ci.eng.lab.tlv.redhat.com/job/hosted_engine_3.6_el7_staticip_nfs3_install_on_7.1/53/console
engine-setup running on the engine appliance got stuck after
|- [ INFO  ] Creating/refreshing Engine AAA database schema
but cheking engine logs
http://jenkins-ci.eng.lab.tlv.redhat.com/job/hosted_engine_3.6_el7_staticip_nfs3_install_on_7.1/53/artifact/logs/ovirt-engine-setup-20150825031708-st2evd.log
we saw that engine-setup got stuck on:
2015-08-25 03:27:57 DEBUG otopi.context context._executeMethod:142
Stage misc METHOD
otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca.Plugin._miscUpgrade
2015-08-25 03:27:57 INFO
otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca
ca._miscUpgrade:484 Upgrading CA

it could be something related to entropy on our CI environment.

>>> let's see what happens.
>>>
>>> ----- Original Message -----
>>>> From: "Sahina Bose" <sabose at redhat.com>
>>>> To: "Alon Bar-Lev" <alonbl at redhat.com>
>>>> Cc: "users" <users at ovirt.org>
>>>> Sent: Friday, August 21, 2015 1:15:03 PM
>>>> Subject: Re: [ovirt-users] Stuck at "Enrolling serial console certificate"
>>>>
>>>>
>>>>
>>>> On 08/21/2015 02:58 PM, Alon Bar-Lev wrote:
>>>>> the only thing I can think of is that your engine is out of random, so it
>>>>> waits for more to be able to generate a new key.
>>>>> please while this is happening, execute: "find /" or anything that will
>>>>> create some activity.
>>>>> if that's not helping, please send me "ps -efa" output so at least I see
>>>>> what is running.
>>>>> thanks!
>>>> output of ps -efa
>>>>
>>>> http://fpaste.org/257513/44015204/
>>>>
>>>>
>>>>> ----- Original Message -----
>>>>>> From: "Sahina Bose" <sabose at redhat.com>
>>>>>> To: "Alon Bar-Lev" <alonbl at redhat.com>
>>>>>> Cc: "users" <users at ovirt.org>
>>>>>> Sent: Friday, August 21, 2015 12:23:11 PM
>>>>>> Subject: Re: [ovirt-users] Stuck at "Enrolling serial console certificate"
>>>>>>
>>>>>> Attached engine.log and host-deploy.log
>>>>>>
>>>>>>
>>>>>> On 08/21/2015 02:29 PM, Alon Bar-Lev wrote:
>>>>>>> Log would be nice.
>>>>>>>
>>>>>>> ----- Original Message -----
>>>>>>>> From: "Sahina Bose" <sabose at redhat.com>
>>>>>>>> To: "users" <users at ovirt.org>
>>>>>>>> Sent: Friday, August 21, 2015 11:27:56 AM
>>>>>>>> Subject: [ovirt-users] Stuck at "Enrolling serial console certificate"
>>>>>>>>
>>>>>>>> Hi all,
>>>>>>>>
>>>>>>>> While installing a host to ovirt-3.6 engine, the host installation is
>>>>>>>> stuck at "Enrolling serial console certificate"
>>>>>>>>
>>>>>>>> I installed the engine from ovirt-release36, and answered No to setting
>>>>>>>> up WebConsole-proxy as well as VM Console proxy on the engine.
>>>>>>>>
>>>>>>>> Does anyone know how to debug this?
>>>>>>>>
>>>>>>>> thanks
>>>>>>>> sahina
>>>>>>>> _______________________________________________
>>>>>>>> Users mailing list
>>>>>>>> Users at ovirt.org
>>>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>>>
>>>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
> --
> Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
> 3ºD, 28016 Madrid, Spain
> Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users