[ovirt-users] Failed to start service 'ovirt-imageio-proxy' after engine-setup

[Ralf Schenk]

Thank you,

i solved it by copying the websocket-proxy cert/key-pair.

Bye


Am 24.08.2016 um 22:15 schrieb Yedidyah Bar David:
> On Wed, Aug 24, 2016 at 9:57 PM, Ralf Schenk <rs at databay.de
> <mailto:rs at databay.de>> wrote:
>
>     Hello List,
>
>     After upgrading ovirt-hosted-engine setup failed with "Failed to
>     start service 'ovirt-imageio-proxy'".
>
>     If try to start it manually via
>
>     journalctl -xe shows following error:
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     self._secure_server(config, server)
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     File
>     "/usr/lib/python2.7/site-packages/ovirt_imageio_proxy/server.py", line
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     server_side=True)
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     File "/usr/lib64/python2.7/ssl.py", line 913, in wrap_socket
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     ciphers=ciphers)
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     File "/usr/lib64/python2.7/ssl.py", line 526, in __init__
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     self._context.load_cert_chain(certfile, keyfile)
>     Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
>     IOError: [Errno 2] No such file or directory
>     Aug 24 20:51:10 engine.mydomain.local systemd[1]:
>     ovirt-imageio-proxy.service: main process exited, code=exited,
>     status=1/FAILURE
>     Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed to start
>     oVirt ImageIO Proxy.
>
>     Config (/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf) points
>     to a non-existing cert
>     /etc/pki/ovirt-engine/certs/imageio-proxy.cer
>     and nonexisting key:
>     /etc/pki/ovirt-engine/keys/imageio-proxy.key.nopass
>
>
> Right, will be fixed in 4.0.3:
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1365451
>  
>
>
>     How to generate a correct cert and key for correct startup ?
>
>
> There is no simple single one-liner to do that for now.
>
> Search for "pki-enroll-pkcs12.sh" for examples if you really want to.
>
> You can copy e.g. websocket-proxy key/cert.
>
> You can use the 4.0 nightly repo - bugs in MODIFIED are already fixed
> there:
>
> http://www.ovirt.org/develop/dev-process/install-nightly-snapshot/
>
> You can answer 'no' to 'configure image i/o proxy?', if you don't need it.
> It's only needed for the new image uploader:
>
> http://www.ovirt.org/develop/release-management/features/storage/image-upload/
>
> Or you can wait for 4.0.3.
>
> Best,
>  
>
>
>     Bye
>     -- 
>
>
>     *Ralf Schenk*
>     fon +49 (0) 24 05 / 40 83 70
>     <tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%2070>
>     fax +49 (0) 24 05 / 40 83 759
>     <tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%20759>
>     mail *rs at databay.de* <mailto:rs at databay.de>
>     	  	
>     *Databay AG*
>     Jens-Otto-Krag-Straße 11
>     D-52146 Würselen
>     *www.databay.de* <http://www.databay.de>
>
>     Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
>     Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari,
>     Dipl.-Kfm. Philipp Hermanns
>     Aufsichtsratsvorsitzender: Klaus Scholzen (RA)
>
>     ------------------------------------------------------------------------
>
>     _______________________________________________
>     Users mailing list
>     Users at ovirt.org <mailto:Users at ovirt.org>
>     http://lists.ovirt.org/mailman/listinfo/users
>     <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>
>
> -- 
> Didi

-- 


*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
fax +49 (0) 24 05 / 40 83 759
mail *rs at databay.de* <mailto:rs at databay.de>
	  	
*Databay AG*
Jens-Otto-Krag-Straße 11
D-52146 Würselen
*www.databay.de* <http://www.databay.de>

Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
Philipp Hermanns
Aufsichtsratsvorsitzender: Wilhelm Dohmen

------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160825/fd1ab63c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 1250 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160825/fd1ab63c/attachment-0002.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logo_databay_email.gif
Type: image/gif
Size: 1250 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160825/fd1ab63c/attachment-0003.gif>