GitHub user tampler closed a discussion: bug: KVM agent installation removes pki certificates affecting libvirt
<!-- Verify first that your issue/request is not already reported on GitHub. Also test if the latest release and main branch are affected too. Always add information AFTER of these HTML comments, but no need to delete the comments. --> ##### ISSUE TYPE <!-- Pick one below and delete the rest --> * Bug Report ##### COMPONENT NAME <!-- Categorize the issue, e.g. API, VR, VPN, UI, etc. --> ~~~ Core, Installation ~~~ ##### CLOUDSTACK VERSION <!-- New line separated list of affected versions, commit ID for issues on main branch. --> ~~~ 4.20, 4.19 ~~~ ##### CONFIGURATION <!-- KVM --> ##### OS / ENVIRONMENT <!----> ~~~ Ubuntu 24.04.1 ~~~ ##### SUMMARY <!-- Explain the problem/feature briefly --> When ACS agent is installed, it removes PKI certs from `/etc/pki/CA`, which causes `libvirtd` failure: ``` Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory libvirtd.service: Main process exited, code=exited, status=6/NOTCONFIGURED ``` ##### STEPS TO REPRODUCE <!-- For bugs, show exactly how to reproduce the problem, using a minimal test-case. Use Screenshots if accurate. For new features, show how the feature would be used. --> <!-- Paste example playbooks or commands between quotes below --> ~~~ 1. Install Ubuntu 2. Install libvirtd 3. Download and install ACS 4.20 4. Restart libvirtd 5. Find the error: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory ~~~ <!-- You can also paste gist.github.com links for larger files --> ##### EXPECTED RESULTS <!-- What did you expect to happen when running the steps above? --> ~~~ KVM agent installed seamlessly ~~~ ##### ACTUAL RESULTS <!-- What actually happened? --> <!-- Paste verbatim command output between quotes below --> ~~~ KVM agent is installed but libvirt fails to work without certs ~~~ GitHub link: https://github.com/apache/cloudstack/discussions/9909 ---- This is an automatically sent email for users@cloudstack.apache.org. To unsubscribe, please send an email to: users-unsubscr...@cloudstack.apache.org
