[ovirt-users] Re: struggling with 4.5.1 install

[Colin Coe]

Hey Chris

The 192.168.222.x address is a temporary address for the hosted engine
whale the installation completes.

Did you say "yes" to pausing the hosted engine during the install?

You should see something in the logs about being able to hit
https://your.hypervisor.name:6900/ovirt-engine or is it dying before that?

You mention DHCP, I'd strongly encourage configuring a static IP.  A bond
is also strongly recommended but it really depends on how critical this
oVirt installation is to you.

Hope this helps.

CC

On Wed, 10 Aug 2022 at 03:59, Chris Smith  wrote:

> Hello,
>
> Here's the general gist of what I've done so far:
>
>
> graphical install from el8 and el9 iso, using as few modifications as
> possible with dhcp networking.
>
> 3.6TB of disk space for ovirt install dest.
>
> system comes up, dashboard is online, i try to deploy hosted engine, no
> dice.
>
> [image: image.png]
>
> it's similar to this:
> https://bugzilla.redhat.com/show_bug.cgi?id=1946095
>
> ok, so i go for cli install
>
> i manually install ovirt-engine-appliance and that seems to go ok
>
> i kick off ovirt-hosted-engine-setup and follow the prompts
>
> i watch the logs and such and seems to be ok
>
> i have to make entry in /etc/hosts to have new hostname for not yet built
> hosted engine VM to resolve to IP address ( I don't have "real" DNS at the
> moment)
>
> that succeeds but then new engine VM is spun up in new IP subnet
> 192.168.222.0/24 that is different from primary 192.168.1.0/24 not sure
> why.
>
> i am at a point where i can't get a GUI to the hosted engine IP because
> it's only available to the internal adapter on the node.
>
> i feel like the installers in the el8 and el9 iso's is just completely
> b0rked.
>
> what am I doing wrong?
>
> oh, and where is everyone at in the IRC chat room?
>
> thanks,
>
> Chris
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/R43ATEJ3CDMAIUPSIT5QBTAZ54DLPOUK/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LJLPRULXWGQKASDLOLICN2C4XE7L3KAZ/

[ovirt-users] Re: No "Virtualization" tab on Node cockpit

[Giuliano David]

Thanks for reply.
I did was you suggested and installed 4.4.6 version. Many other troubles 
arised (i.e. Centos8 repos were EOL), but the tab "Virtualization" was 
in place :)
Too many problems with that olde vesion, so I ended installing 4.5.2  
pre-release version. The tab "Virtualization" is in place, but Engine 
depoly can't end succefully via GUI. I had to lauch it via CLI adding 
the "--4" option to exclude IPv6 configuration leading to DNS errors.


Hope it helps some other having same issues.
Regards

Giuliano

On 09/08/22 22:14, Strahil Nikolov wrote:

Most probably is a bug. Is there a newer ISO ?
If not, try with a version (or 2 older) .

Best Regards,
Strahil Nikolov

Hi. I'm new to oVirt.
Trying to install the first node with hosted engine on it.
The node bare install process from the iso image
(ovirt-node-ng-installer-4.5.1-2022062306.el9.iso) is fine on a
Fujitsu server.
Accessing via browser the node cockpit  at port 9090, on the left
panel the entry "Virtualization" is missing (installing Node
version 4.4.6 it was present and working), so I can't launch the
hosted engine setup via UI.
Trying to deploy via command line ( $ hosted-engine --deploy ),
the installation process stops with the error:

[ ERROR ] {'changed': True, 'stdout': '', 'stderr': '', 'rc': 1,
'cmd': "[ -r /etc/sysconfig/libvirtd ] && sed -i '/## beginning of
configuration section by vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of
configuration section by vdsm-4.[0-9]\\+.[0-9]\\+/d'
/etc/sysconfig/libvirtd", 'start': '2022-08-04 18:24:31.817314',
'end': '2022-08-04 18:24:31.819845', 'delta': '0:00:00.002531',
'failed': True, 'msg': 'non-zero return code', 'invocation':
{'module_args': {'warn': False, '_raw_params': "[ -r
/etc/sysconfig/libvirtd ] && sed -i '/## beginning of
configuration section by vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of
configuration section by vdsm-4.[0-9]\\+.[0-9]\\+/d'
/etc/sysconfig/libvirtd", '_uses_shell': True,
'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None,
'chdir': None, 'executable': None, 'creates': None, 'removes':
None, 'stdin': None}}, 'stdout_lines': [], 'stderr_lines': [],
'_ansible_no_log': False, 'item': '/etc/sysconfig/libvirtd',
'ansible_loop_var': 'item', '_ansible_
item_label': '/etc/sysconfig/libvirtd'}


I can't really understand what's going on ...

Can anyone please point me in the right direction to fix that? Is
it a bug?

Thanks!!!
g


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:

https://lists.ovirt.org/archives/list/users@ovirt.org/message/GXZY77N466AWB6GRM2W6SCV72VGVDYS5/



--
Giuliano David
   Systems & Networks Administration
   NV Group   Noviservice S.r.l. | Novisolution S.r.l. | idPost S.r.l.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/K4FMX3LOHNUDOAZJ5C43FKWW2NPM4GYO/

[ovirt-users] Re: how to use ovirt-engine on a new Architecture

[Strahil Nikolov via Users]

Is your engine running ?If yes, most probably you can connectto it and add the 
CPU type in the DB.
Best Regards,Strahil Nikolov 
 
 
Hello, I am using ovirt-engine-4.4.10.7 on a new Architecture(LoongArch64), 
but an error is reported during use, the error message is:

2022-08-04 12:03:30,762-04 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-72) 
[4fad3531] EVENT_ID: CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION(156), Host 
node210 moved to Non-Operational state as host CPU type is not supported in 
this cluster compatibility version or is not supported at all,

which CPUs are supported by ovirt-engine-4.4.10.7? how can i get the support 
list of CPUs, If i want to use ovirt-engine-4.4.10.7 on a new Architecture, 
what should i do, thank you

the CPU information about LoongArch just like:

system type : generic-loongson-machine
processor : 0
package : 0
core : 0
cpu family : Loongson-64bit
model name : Loongson-3A5000LL
CPU Revision : 0x11
FPU Revision : 0x00
CPU MHz : 2000.00
BogoMIPS : 4000.00
TLB entries : 2112
Address sizes : 48 bits physical, 48 bits virtual
isa : loongarch32 loongarch64
features : cpucfg lam ual fpu lsx lasx complex crypto lvz lbt_x86 lbt_arm 
lbt_mips
hardware watchpoint : yes, iwatch count: 8, dwatch count: 8

processor : 1
package : 0
core : 1
cpu family : Loongson-64bit
model name : Loongson-3A5000LL
CPU Revision : 0x11
FPU Revision : 0x00
CPU MHz : 2000.00
BogoMIPS : 4000.00
TLB entries : 2112
Address sizes : 48 bits physical, 48 bits virtual
isa : loongarch32 loongarch64
features : cpucfg lam ual fpu lsx lasx complex crypto lvz lbt_x86 lbt_arm 
lbt_mips
hardware watchpoint : yes, iwatch count: 8, dwatch count: 8
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GG3VAIHF2SALWWETBFEYMKXEZJBS6CD3/
  
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W3ZV7SNVKU5YBJN5CSCOANJCE6L7C5QZ/

[ovirt-users] Re: No "Virtualization" tab on Node cockpit

[Strahil Nikolov via Users]

Most probably is a bug. Is there a newer ISO ?If not, try with a version (or 2 
older) .
Best Regards,Strahil Nikolov 
 
 
Hi. I'm new to oVirt.
Trying to install the first node with hosted engine on it.
The node bare install process from the iso image 
(ovirt-node-ng-installer-4.5.1-2022062306.el9.iso) is fine on a Fujitsu server.
Accessing via browser the node cockpit  at port 9090, on the left panel the 
entry "Virtualization" is missing (installing Node version 4.4.6 it was present 
and working), so I can't launch the hosted engine setup via UI.
Trying to deploy via command line ( $ hosted-engine --deploy ), the 
installation process stops with the error:

[ ERROR ] {'changed': True, 'stdout': '', 'stderr': '', 'rc': 1, 'cmd': "[ -r 
/etc/sysconfig/libvirtd ] && sed -i '/## beginning of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/d' /etc/sysconfig/libvirtd", 'start': '2022-08-04 
18:24:31.817314', 'end': '2022-08-04 18:24:31.819845', 'delta': 
'0:00:00.002531', 'failed': True, 'msg': 'non-zero return code', 'invocation': 
{'module_args': {'warn': False, '_raw_params': "[ -r /etc/sysconfig/libvirtd ] 
&& sed -i '/## beginning of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/d' /etc/sysconfig/libvirtd", '_uses_shell': True, 
'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': 
None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 
'stdout_lines': [], 'stderr_lines': [], '_ansible_no_log': False, 'item': 
'/etc/sysconfig/libvirtd', 'ansible_loop_var': 'item', '_ansible_
 item_label': '/etc/sysconfig/libvirtd'}


I can't really understand what's going on ...

Can anyone please point me in the right direction to fix that? Is it a bug?

Thanks!!!
g


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GXZY77N466AWB6GRM2W6SCV72VGVDYS5/
  
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QS7D4UC2ABO7YBT2NHPYFR5TPNH7D3QX/

[ovirt-users] Re: Manager crash

[Strahil Nikolov via Users]

If the engine dies , you won't be able to start VMs or make changes like live 
VM migration or network changes. Yet, even if you shut it down, the VMs and 
their hosts will continue to work.
Best Regards,Strahil Nikolov 
 
 
  On Tue, Aug 9, 2022 at 23:00, 
teemu.saari...@netum.fi wrote:   Hi,

I was wondering If I have HA- setup of manager + 2 hosts. If manager crashes, 
does 2 host crash also or do they still continue working normally?

Thanks,
Teemu S.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/I3ZCQQ4LI3KB5AV7V6K3WK2ZXJF2HUK6/
  
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/CEXM3JCG5A6EZ6FDRRSQIPICVR7VVNMN/

[ovirt-users] how to use ovirt-engine on a new Architecture

[zhangwenlong]

Hello, I am using ovirt-engine-4.4.10.7 on a new Architecture(LoongArch64), but 
an error is reported during use, the error message is:

2022-08-04 12:03:30,762-04 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-72) 
[4fad3531] EVENT_ID: CPU_TYPE_UNSUPPORTED_IN_THIS_CLUSTER_VERSION(156), Host 
node210 moved to Non-Operational state as host CPU type is not supported in 
this cluster compatibility version or is not supported at all,

which CPUs are supported by ovirt-engine-4.4.10.7? how can i get the support 
list of CPUs, If i want to use ovirt-engine-4.4.10.7 on a new Architecture, 
what should i do, thank you

the CPU information about LoongArch just like:

system type : generic-loongson-machine
processor : 0
package : 0
core : 0
cpu family : Loongson-64bit
model name : Loongson-3A5000LL
CPU Revision : 0x11
FPU Revision : 0x00
CPU MHz : 2000.00
BogoMIPS : 4000.00
TLB entries : 2112
Address sizes : 48 bits physical, 48 bits virtual
isa : loongarch32 loongarch64
features : cpucfg lam ual fpu lsx lasx complex crypto lvz lbt_x86 lbt_arm 
lbt_mips
hardware watchpoint : yes, iwatch count: 8, dwatch count: 8

processor : 1
package : 0
core : 1
cpu family : Loongson-64bit
model name : Loongson-3A5000LL
CPU Revision : 0x11
FPU Revision : 0x00
CPU MHz : 2000.00
BogoMIPS : 4000.00
TLB entries : 2112
Address sizes : 48 bits physical, 48 bits virtual
isa : loongarch32 loongarch64
features : cpucfg lam ual fpu lsx lasx complex crypto lvz lbt_x86 lbt_arm 
lbt_mips
hardware watchpoint : yes, iwatch count: 8, dwatch count: 8
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GG3VAIHF2SALWWETBFEYMKXEZJBS6CD3/

[ovirt-users] No "Virtualization" tab on Node cockpit

[giuliano . david]

Hi. I'm new to oVirt.
Trying to install the first node with hosted engine on it.
The node bare install process from the iso image 
(ovirt-node-ng-installer-4.5.1-2022062306.el9.iso) is fine on a Fujitsu server.
Accessing via browser the node cockpit  at port 9090, on the left panel the 
entry "Virtualization" is missing (installing Node version 4.4.6 it was present 
and working), so I can't launch the hosted engine setup via UI.
Trying to deploy via command line ( $ hosted-engine --deploy ), the 
installation process stops with the error:

[ ERROR ] {'changed': True, 'stdout': '', 'stderr': '', 'rc': 1, 'cmd': "[ -r 
/etc/sysconfig/libvirtd ] && sed -i '/## beginning of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/d' /etc/sysconfig/libvirtd", 'start': '2022-08-04 
18:24:31.817314', 'end': '2022-08-04 18:24:31.819845', 'delta': 
'0:00:00.002531', 'failed': True, 'msg': 'non-zero return code', 'invocation': 
{'module_args': {'warn': False, '_raw_params': "[ -r /etc/sysconfig/libvirtd ] 
&& sed -i '/## beginning of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/,/## end of configuration section by 
vdsm-4.[0-9]\\+.[0-9]\\+/d' /etc/sysconfig/libvirtd", '_uses_shell': True, 
'stdin_add_newline': True, 'strip_empty_ends': True, 'argv': None, 'chdir': 
None, 'executable': None, 'creates': None, 'removes': None, 'stdin': None}}, 
'stdout_lines': [], 'stderr_lines': [], '_ansible_no_log': False, 'item': 
'/etc/sysconfig/libvirtd', 'ansible_loop_var': 'item', '_ansible_
 item_label': '/etc/sysconfig/libvirtd'}


I can't really understand what's going on ...

Can anyone please point me in the right direction to fix that? Is it a bug?

Thanks!!!
g


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GXZY77N466AWB6GRM2W6SCV72VGVDYS5/

[ovirt-users] Manager crash

[teemu . saarinen]

Hi,

I was wondering If I have HA- setup of manager + 2 hosts. If manager crashes, 
does 2 host crash also or do they still continue working normally?

Thanks,
Teemu S.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/I3ZCQQ4LI3KB5AV7V6K3WK2ZXJF2HUK6/

[ovirt-users] struggling with 4.5.1 install

[Chris Smith]

Hello,

Here's the general gist of what I've done so far:


graphical install from el8 and el9 iso, using as few modifications as
possible with dhcp networking.

3.6TB of disk space for ovirt install dest.

system comes up, dashboard is online, i try to deploy hosted engine, no
dice.

[image: image.png]

it's similar to this:
https://bugzilla.redhat.com/show_bug.cgi?id=1946095

ok, so i go for cli install

i manually install ovirt-engine-appliance and that seems to go ok

i kick off ovirt-hosted-engine-setup and follow the prompts

i watch the logs and such and seems to be ok

i have to make entry in /etc/hosts to have new hostname for not yet built
hosted engine VM to resolve to IP address ( I don't have "real" DNS at the
moment)

that succeeds but then new engine VM is spun up in new IP subnet
192.168.222.0/24 that is different from primary 192.168.1.0/24 not sure why.

i am at a point where i can't get a GUI to the hosted engine IP because
it's only available to the internal adapter on the node.

i feel like the installers in the el8 and el9 iso's is just completely
b0rked.

what am I doing wrong?

oh, and where is everyone at in the IRC chat room?

thanks,

Chris
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R43ATEJ3CDMAIUPSIT5QBTAZ54DLPOUK/

[ovirt-users] Failover IP on Hetzner

[Tommaso - Shellrent via Users]

Hi to all.

we want to configure a failover ip on an Hetzner host. Anyone can be 
able of make it works?


Ip failover does not include a MAC address, so it cant't work on a 
bridged network. They sauggest su confure it on a routed network.


On ovirt, how can we make it work?


Regards,
Tommaso.

--
--  
Shellrent - Il primo hosting italiano Security First

*Tommaso De Marchi*
/COO - Chief Operating Officer/
Shellrent Srl
Via dell'Edilizia, 19 - 36100 Vicenza
Tel. 0444321155 
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/U5VCKIEVSFCM4W7EUKBSYIGW5PQCWAGF/

[ovirt-users] Re: Certificates Expiration Problem - Urgent Help Needed

[Andrei Verovski]

I checked this bash vdsm-gencerts.sh, it does nothing if certificate files 
present.
Renamed old certificates to .*old, now new certificates present.

After vdsmd and vdsm-network restart:

node log:
Aug 09 12:10:44 node14.xxx vdsm[1399211]: WARN MOM not available. Error: [Errno 
111] Connection refused

Engine log:
2022-08-09 12:17:11,419+03 ERROR 
[org.ovirt.engine.core.vdsbroker.monitoring.HostMonitoring] 
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-11) [] 
Unable to RefreshCapabilities: VDSNetworkException: VDSGenericException: 
VDSNetworkException: Message timeout which can be caused by communication issues


Is this correct procedure or this new node’s certificates had to be imported 
somewhere into Engine?
I had to do a bit of hacking to get this node up and migrate accounting VM to 
another node.
Thanks.


> On 9 Aug 2022, at 11:16, Andrei Verovski  wrote:
> 
> /usr/libexec/vdsm/vdsm-gencerts.sh /etc/pki/vdsm/certs/cacert.pem 
> /etc/pki/vdsm/keys/vdsmkey.pem  /etc/pki/vdsm/certs/vdsmcert.pem
> 
> Yields nothing. No error messages, and no updated certificates in
> /etc/pki/vdsm/certs/
> 
>> On 9 Aug 2022, at 10:28, Andrei Verovski  wrote:
>> 
>> Hi,
>> 
>> Looks like this is a suitable article.
>> https://microdevsys.com/wp/get-host-capabilities-failed-general-sslengine-problem/
>> 
>> Please note I have problem with 
>> VDSM node14 command Get Host Capabilities failed: PKIX path validation 
>> failed: java.security.cert.CertPathValidatorException: validity check failed
>> 
>> only on 1 node, everything else works just fine.
>> 
>> 
>> Is this correct or outdated/obsolete ?
>> 
>> [root@mdskvm-p01 vdsm]# /usr/libexec/vdsm/vdsm-gencerts.sh 
>> /etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
>> /etc/pki/vdsm/certs/vdsmcert.pem
>> [root@mdskvm-p01 vdsm]#
>> [root@mdskvm-p01 vdsm]# ls -altri /usr/libexec/vdsm/vdsm-gencerts.sh 
>> /etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
>> /etc/pki/vdsm/certs/vdsmcert.pem
>> 67445862 -rwxr-xr-x. 1 root root 2362 Jul  9 05:36 
>> /usr/libexec/vdsm/vdsm-gencerts.sh
>>45255 -rw——-. 1 vdsm kvm  5816 Sep 28 17:48 /etc/pki/vdsm/keys/vdsmkey.pem
>> 203185926 -rw——-. 1 vdsm kvm  1127 Sep 28 17:48 
>> /etc/pki/vdsm/certs/cacert.pem
>> 203185790 -rw——-. 1 vdsm kvm  1241 Sep 28 17:48 
>> /etc/pki/vdsm/certs/vdsmcert.pem
>> [root@mdskvm-p01 vdsm]#
>> 
>> 
>> 
>> 
>>> On 9 Aug 2022, at 03:43, adam...@adagene.com.cn wrote:
>>> 
>>> Solution:
>>> https://access.redhat.com/solutions/3532921
>>> 
>>> -邮件原件-
>>> 发件人: Andrei Verovski  
>>> 发送时间: 2022年8月9日 3:14
>>> 收件人: users@ovirt.org
>>> 主题: [ovirt-users] Certificates Expiration Problem - Urgent Help Needed
>>> 
>>> Hi !
>>> 
>>> Today my hosts (engine + all nodes) certificates expired and I re-run 
>>> engine-setup to renew certificates.
>>> 
>>> Then I did for each node host:
>>> Edit host -> Advanced parameters -> Fetch SSH public key (PEM) in order to 
>>> update certificates on nodes, everything was finished just fine.
>>> 
>>> Unfortunately, one of the most crucial nodes (node14) still shows this
>>> error:
>>> 
>>> VDSM node14 command Get Host Capabilities failed: PKIX path validation
>>> failed: java.security.cert.CertPathValidatorException: validity check failed
>>> 
>>> Restarted vdsms and vdsm-network, still same, node is marked as 
>>> non-responsive, and all VM with "?" sign (unknown status).
>>> 
>>> However, node14 pings without any problem, its storage domain shown in 
>>> green (OK), and all VMs are running fine.
>>> 
>>> Service vdsm-network status is OK, vdsmd is NOT:
>>> Aug 08 22:07:27 node14.***.lv vdsm[1264164]: ERROR ssl handshake: socket 
>>> error, address: :::192.168.0.4
>>> 
>>> This node is running our accounting and stock control system, its storage 
>>> domain holds VM disk of that software. If its nonoperational after restart, 
>>> its a BIG trouble, I will not be able to migrate VM disk anywhere. 
>>> Restoring accounting DB from daily backup is a lengthy process for 2 - 3 
>>> hours.
>>> 
>>> Please advice what to do next.
>>> 
>>> Thanks in advance.
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
>>> https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct: 
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives: 
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7ERPAMDT2KO4W6VYYMNTYIMDHH7WTZGB/
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct: 
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives: 
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SLO6UKLSHM4IGYOAUVW25ZVV4B2FPCKY/
>> 
>> 

[ovirt-users]Re: 回复: Certificates Expiration Problem - Urgent Help Needed

[Andrei Verovski]

/usr/libexec/vdsm/vdsm-gencerts.sh /etc/pki/vdsm/certs/cacert.pem 
/etc/pki/vdsm/keys/vdsmkey.pem  /etc/pki/vdsm/certs/vdsmcert.pem

Yields nothing. No error messages, and no updated certificates in
/etc/pki/vdsm/certs/

> On 9 Aug 2022, at 10:28, Andrei Verovski  wrote:
> 
> Hi,
> 
> Looks like this is a suitable article.
> https://microdevsys.com/wp/get-host-capabilities-failed-general-sslengine-problem/
> 
> Please note I have problem with 
> VDSM node14 command Get Host Capabilities failed: PKIX path validation 
> failed: java.security.cert.CertPathValidatorException: validity check failed
> 
> only on 1 node, everything else works just fine.
> 
> 
> Is this correct or outdated/obsolete ?
> 
> [root@mdskvm-p01 vdsm]# /usr/libexec/vdsm/vdsm-gencerts.sh 
> /etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
> /etc/pki/vdsm/certs/vdsmcert.pem
> [root@mdskvm-p01 vdsm]#
> [root@mdskvm-p01 vdsm]# ls -altri /usr/libexec/vdsm/vdsm-gencerts.sh 
> /etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
> /etc/pki/vdsm/certs/vdsmcert.pem
>  67445862 -rwxr-xr-x. 1 root root 2362 Jul  9 05:36 
> /usr/libexec/vdsm/vdsm-gencerts.sh
> 45255 -rw——-. 1 vdsm kvm  5816 Sep 28 17:48 /etc/pki/vdsm/keys/vdsmkey.pem
> 203185926 -rw——-. 1 vdsm kvm  1127 Sep 28 17:48 /etc/pki/vdsm/certs/cacert.pem
> 203185790 -rw——-. 1 vdsm kvm  1241 Sep 28 17:48 
> /etc/pki/vdsm/certs/vdsmcert.pem
> [root@mdskvm-p01 vdsm]#
> 
> 
> 
> 
>> On 9 Aug 2022, at 03:43, adam...@adagene.com.cn wrote:
>> 
>> Solution:
>> https://access.redhat.com/solutions/3532921
>> 
>> -邮件原件-
>> 发件人: Andrei Verovski  
>> 发送时间: 2022年8月9日 3:14
>> 收件人: users@ovirt.org
>> 主题: [ovirt-users] Certificates Expiration Problem - Urgent Help Needed
>> 
>> Hi !
>> 
>> Today my hosts (engine + all nodes) certificates expired and I re-run 
>> engine-setup to renew certificates.
>> 
>> Then I did for each node host:
>> Edit host -> Advanced parameters -> Fetch SSH public key (PEM) in order to 
>> update certificates on nodes, everything was finished just fine.
>> 
>> Unfortunately, one of the most crucial nodes (node14) still shows this
>> error:
>> 
>> VDSM node14 command Get Host Capabilities failed: PKIX path validation
>> failed: java.security.cert.CertPathValidatorException: validity check failed
>> 
>> Restarted vdsms and vdsm-network, still same, node is marked as 
>> non-responsive, and all VM with "?" sign (unknown status).
>> 
>> However, node14 pings without any problem, its storage domain shown in green 
>> (OK), and all VMs are running fine.
>> 
>> Service vdsm-network status is OK, vdsmd is NOT:
>> Aug 08 22:07:27 node14.***.lv vdsm[1264164]: ERROR ssl handshake: socket 
>> error, address: :::192.168.0.4
>> 
>> This node is running our accounting and stock control system, its storage 
>> domain holds VM disk of that software. If its nonoperational after restart, 
>> its a BIG trouble, I will not be able to migrate VM disk anywhere. Restoring 
>> accounting DB from daily backup is a lengthy process for 2 - 3 hours.
>> 
>> Please advice what to do next.
>> 
>> Thanks in advance.
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
>> https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7ERPAMDT2KO4W6VYYMNTYIMDHH7WTZGB/
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct: 
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives: 
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SLO6UKLSHM4IGYOAUVW25ZVV4B2FPCKY/
> 
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FOC2BYMJVGB7BJDA4X2NT6LHAHMLLMYX/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C6WGV63BHPW5UXE7S53MI3Q6CWUQVFQ3/

[ovirt-users]Re: 回复: Certificates Expiration Problem - Urgent Help Needed

[Andrei Verovski]

Hi,

Looks like this is a suitable article.
https://microdevsys.com/wp/get-host-capabilities-failed-general-sslengine-problem/
 


Please note I have problem with 
VDSM node14 command Get Host Capabilities failed: PKIX path validation failed: 
java.security.cert.CertPathValidatorException: validity check failed

only on 1 node, everything else works just fine.


Is this correct or outdated/obsolete ?

[root@mdskvm-p01 vdsm]# /usr/libexec/vdsm/vdsm-gencerts.sh 
/etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
/etc/pki/vdsm/certs/vdsmcert.pem
[root@mdskvm-p01 vdsm]#
[root@mdskvm-p01 vdsm]# ls -altri /usr/libexec/vdsm/vdsm-gencerts.sh 
/etc/pki/vdsm/certs/cacert.pem /etc/pki/vdsm/keys/vdsmkey.pem  
/etc/pki/vdsm/certs/vdsmcert.pem
 67445862 -rwxr-xr-x. 1 root root 2362 Jul  9 05:36 
/usr/libexec/vdsm/vdsm-gencerts.sh
45255 -rw——-. 1 vdsm kvm  5816 Sep 28 17:48 /etc/pki/vdsm/keys/vdsmkey.pem
203185926 -rw——-. 1 vdsm kvm  1127 Sep 28 17:48 /etc/pki/vdsm/certs/cacert.pem
203185790 -rw——-. 1 vdsm kvm  1241 Sep 28 17:48 /etc/pki/vdsm/certs/vdsmcert.pem
[root@mdskvm-p01 vdsm]#




> On 9 Aug 2022, at 03:43, adam...@adagene.com.cn wrote:
> 
> Solution:
> https://access.redhat.com/solutions/3532921
> 
> -邮件原件-
> 发件人: Andrei Verovski  
> 发送时间: 2022年8月9日 3:14
> 收件人: users@ovirt.org
> 主题: [ovirt-users] Certificates Expiration Problem - Urgent Help Needed
> 
> Hi !
> 
> Today my hosts (engine + all nodes) certificates expired and I re-run 
> engine-setup to renew certificates.
> 
> Then I did for each node host:
> Edit host -> Advanced parameters -> Fetch SSH public key (PEM) in order to 
> update certificates on nodes, everything was finished just fine.
> 
> Unfortunately, one of the most crucial nodes (node14) still shows this
> error:
> 
> VDSM node14 command Get Host Capabilities failed: PKIX path validation
> failed: java.security.cert.CertPathValidatorException: validity check failed
> 
> Restarted vdsms and vdsm-network, still same, node is marked as 
> non-responsive, and all VM with "?" sign (unknown status).
> 
> However, node14 pings without any problem, its storage domain shown in green 
> (OK), and all VMs are running fine.
> 
> Service vdsm-network status is OK, vdsmd is NOT:
> Aug 08 22:07:27 node14.***.lv vdsm[1264164]: ERROR ssl handshake: socket 
> error, address: :::192.168.0.4
> 
> This node is running our accounting and stock control system, its storage 
> domain holds VM disk of that software. If its nonoperational after restart, 
> its a BIG trouble, I will not be able to migrate VM disk anywhere. Restoring 
> accounting DB from daily backup is a lengthy process for 2 - 3 hours.
> 
> Please advice what to do next.
> 
> Thanks in advance.
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: 
> https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/7ERPAMDT2KO4W6VYYMNTYIMDHH7WTZGB/
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/SLO6UKLSHM4IGYOAUVW25ZVV4B2FPCKY/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FOC2BYMJVGB7BJDA4X2NT6LHAHMLLMYX/