[ovirt-users] Re: Failed to execute stage 'Closing up': Command '/usr/share/ovirt-engine-keycloak/bin/kk_cli.sh' failed to execute

2022-12-07 Thread Mark R
Hi Martin,

Not OP, but I did just deploy a brand new oVirt 4.5.4 HE setup. As you 
mentioned, there's an issue during deployment with the latest 
java-11-openjdk-headless. I had to do the deploy with "hosted-engine --deploy 
--ansible-extra-vars=he_pause_before_engine_setup=true". Once the deployment 
paused, I was able to hop into the local VM and "dnf downgrade -y 
java-11-openjdk-headless-11.0.15.0.10-3.el8 && dnf versionlock add 
java-11-openjdk-headless", after which I could remove the lockfile from /tmp on 
the deploy host and everything went great.

That said, I now wonder if I need to leave java-11-openjdk-headless locked to 
that version on the HE VM, or should I remove the versionlock and allow it to 
update?  Do you know if keycloak in general is having issues with the latest 
jdk, or is it just a deploy-time problem?

Thanks!
Mark
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/WTA56ZGG5V4HCCNIWZUC2A54KV3PNCCO/


[ovirt-users] Re: Failed to execute stage 'Closing up': Command '/usr/share/ovirt-engine-keycloak/bin/kk_cli.sh' failed to execute

2022-12-05 Thread Martin Perina
Hi,

Could you please check the version of java-11-openjdk-headless package? We
have noticed a few days ago, that there is an issue with new oVirt Engine
installation on latest CentOS Stream 8 with the latest version of
java-11-openjdk-headless package.
We don't have a solution, there is just a workaround to downgrade
java-11-openjdk-headless packages before running engine-setup similar to
what we did in OST:

https://github.com/oVirt/ovirt-system-tests/pull/304

Regards,
Martin


On Sat, Dec 3, 2022 at 1:26 PM  wrote:

> engine-setup
> [ INFO  ] Stage: Initializing
> [ INFO  ] Stage: Environment setup
>   Configuration files:
> /etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf,
> /etc/ovirt-engine-setup.conf.d/10-packaging.conf
>   Log file:
> /var/log/ovirt-engine/setup/ovirt-engine-setup-20221204031123-60y1er.log
>   Version: otopi-1.10.3 (otopi-1.10.3-1.el8)
> [ INFO  ] Stage: Environment packages setup
> [ INFO  ] Stage: Programs detection
> [ INFO  ] Stage: Environment setup (late)
> [ INFO  ] Stage: Environment customization
>
>   --== PRODUCT OPTIONS ==--
>
>   Configure Cinderlib integration (Currently in tech preview)
> (Yes, No) [No]:
>   Configure Engine on this host (Yes, No) [Yes]:
>
>   Configuring ovirt-provider-ovn also sets the Default cluster's
> default network provider to ovirt-provider-ovn.
>   Non-Default clusters may be configured with an OVN after
> installation.
>   Configure ovirt-provider-ovn (Yes, No) [Yes]:
>   Configure WebSocket Proxy on this host (Yes, No) [Yes]:
>
>   * Please note * : Data Warehouse is required for the engine.
>   If you choose to not configure it on this host, you have to
> configure
>   it on a remote host, and then configure the engine on this host
> so
>   that it can access the database of the remote Data Warehouse
> host.
>   Configure Data Warehouse on this host (Yes, No) [Yes]:
>
>   * Please note * : Keycloak is now deprecating AAA/JDBC
> authentication module.
>   It is highly recommended to install Keycloak based
> authentication.
>   Configure Keycloak on this host (Yes, No) [Yes]:
>   Configure VM Console Proxy on this host (Yes, No) [Yes]:
>   Configure Grafana on this host (Yes, No) [Yes]:
>
>   --== PACKAGES ==--
>
> [ INFO  ] Checking for product updates...
> [ INFO  ] No product updates found
>
>   --== NETWORK CONFIGURATION ==--
>
>   Host fully qualified DNS name of this server [pm.local]:
> [WARNING] Failed to resolve pm.local using DNS, it can be resolved only
> locally
>
>   Setup can automatically configure the firewall on this system.
>   Note: automatic configuration of the firewall may overwrite
> current settings.
>   Do you want Setup to configure the firewall? (Yes, No) [Yes]:
> [ INFO  ] firewalld will be configured as firewall manager.
>
>   --== DATABASE CONFIGURATION ==--
>
>   Where is the DWH database located? (Local, Remote) [Local]:
>
>   Setup can configure the local postgresql server automatically
> for the DWH to run. This may conflict with existing applications.
>   Would you like Setup to automatically configure postgresql and
> create DWH database, or prefer to perform that manually? (Automatic,
> Manual) [Automatic]:
>   Where is the Keycloak database located? (Local, Remote) [Local]:
>
>   Setup can configure the local postgresql server automatically
> for the Keycloak to run. This may conflict with existing applications.
>   Would you like Setup to automatically configure postgresql and
> create Keycloak database, or prefer to perform that manually? (Automatic,
> Manual) [Automatic]:
>   Where is the Engine database located? (Local, Remote) [Local]:
>
>   Setup can configure the local postgresql server automatically
> for the engine to run. This may conflict with existing applications.
>   Would you like Setup to automatically configure postgresql and
> create Engine database, or prefer to perform that manually? (Automatic,
> Manual) [Automatic]:
>
>   --== OVIRT ENGINE CONFIGURATION ==--
>
>   Engine admin password:
>   Confirm engine admin password:
> [WARNING] Password is weak: The password is shorter than 8 characters
>   Use weak password? (Yes, No) [No]:yes
>   Application mode (Virt, Gluster, Both) [Both]:
>   Use Engine admin password as initial keycloak admin password
> (Yes, No) [Yes]:
>
>   --== STORAGE CONFIGURATION ==--
>
>   Default SAN wipe after delete (Yes, No) [No]:
>
>   --== PKI CONFIGURATION ==--
>
>   Organization name for certificate [local]:
>
>   --== APACHE CONFIGURATION ==--
>
>   Setup can configure the default page of the web server to
> present the application home page. This may conflict with