JoaoJandre commented on issue #8379: URL: https://github.com/apache/cloudstack/issues/8379#issuecomment-1863105278
Hello @Fozzman, The `Unsecure` state in ACS indicates that the Libvirt service has been configured to start with TCP. For the host to be marked with the `Up` state, Libvirt must be configured to start with TLS. However, during installation of the ACS Agent for KVM, some sockets are automatically masked, including the TLS socket; making it necessary to unmask them manually. To unmask the sockets and reestablish communication via TLS, the following steps are needed: 1. Unmask sockets: ```bash systemctl unmask libvirtd-admin.socket systemctl unmask libvirtd-ro.socket systemctl unmask libvirtd-tcp.socket systemctl unmask libvirtd-tls.socket systemctl unmask libvirtd.socket ``` 2. Stop the `libvirtd` service: ```bash systemctl stop libvirtd ``` 3. Start `libvirtd-tls.socket` ```bash systemctl start libvirtd-tls.socket ``` 4. Restart the ACS agent: ```bash systemctl restart cloudstack-agent ``` 5. Enable socket `libvirt-tls` ```bash systemctl enable libvirtd-tls.socket ``` With this, Libvirt should start with TLS and ACS will mark it with the status `Up`, instead of `Unsecure`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
