Just adding to my own email: My problem was the "mkisofs" on RHEL9 ist actualy using xorriso instead of genisoimage. The created ISO differs when using Debian mkisofs and "file" output show the difference:
When using Debian mkisofs: setup-v1.33.1-calico-x86_64.iso: ISO 9660 CD-ROM filesystem data 'CDROM' When using RHEL 9 mkisofs: setup-v1.33.1-calico-x86_64.iso: ISO 9660 CD-ROM filesystem data 'ISOIMAGE' Am Wed, Mar 04, 2026 at 10:18:20PM +0100 schrieb Wei ZHOU: > You can create your own ISO with newer versions, please refer to > https://docs.cloudstack.apache.org/en/latest/plugins/cloudstack-kubernetes-service.html#kubernetes-supported-versions > > If you face any issue with the newer versions, please report as a github > issue. Hello Wei, can you maybe share which containerd/ctr Version where used to build the images at https://download.cloudstack.org/cks/ ? I've built several images myself and they all seem fine at first glance, but even when building the exact same versions as in the "setup-v1.33.1-calico-x86_64.iso" image, all my self-made images simply don't work. I've used containerd.io-2.2.1 on RHEL 9 to build setup-v1.33.1-calico-x86_64.iso myself (command line copied from the https://docs.cloudstack.apache.org/en/latest/plugins/cloudstack-kubernetes-service.html), and I just keep getting a SSL handshake exception when trying to create a new cks cluster: 2026-03-05 18:27:08,877 INFO [c.c.k.c.a.KubernetesClusterStartWorker] (API-Job-Executor-99:[ctx-29727cb0, job-15897, ctx-7af41086, ctx-b400bb16]) (logid:3e567244) Attached binaries ISO for VM: VM instance {"id":731,"instanceName":"i-4-731-VM","state":"Running","type":"User","uuid":"762d5fc8-5664-44bb-951d-4bd141e1d03e"} in cluster: KubernetesCluster {"id":46,"name":"sp2-test","uuid":"d3af2f6a-643e-43a3-9636-978b517b75e6"} {...} 2026-03-05 18:27:08,881 WARN [c.c.k.c.u.KubernetesClusterUtil] (API-Job-Executor-99:[ctx-29727cb0, job-15897, ctx-7af41086]) (logid:3e567244) API endpoint for Kubernetes cluster KubernetesCluster {"id":46,"name":"sp2-test","uuid":"d3af2f6a-643e-43a3-9636-978b517b75e6"} not available javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake 2026-03-05 18:27:23,885 WARN [c.c.k.c.u.KubernetesClusterUtil] (API-Job-Executor-99:[ctx-29727cb0, job-15897, ctx-7af41086]) (logid:3e567244) API endpoint for Kubernetes cluster KubernetesCluster {"id":46,"name":"sp2-test","uuid":"d3af2f6a-643e-43a3-9636-978b517b75e6"} not available javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake 2026-03-05 18:27:38,889 WARN [c.c.k.c.u.KubernetesClusterUtil] (API-Job-Executor-99:[ctx-29727cb0, job-15897, ctx-7af41086]) (logid:3e567244) API endpoint for Kubernetes cluster KubernetesCluster {"id":46,"name":"sp2-test","uuid":"d3af2f6a-643e-43a3-9636-978b517b75e6"} not available javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake 2026-03-05 18:27:53,891 WARN [c.c.k.c.u.KubernetesClusterUtil] (API-Job-Executor-99:[ctx-29727cb0, job-15897, ctx-7af41086]) (logid:3e567244) API endpoint for Kubernetes cluster KubernetesCluster {"id":46,"name":"sp2-test","uuid":"d3af2f6a-643e-43a3-9636-978b517b75e6"} not available javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake I also made some 1.34 and 1.35 images but all show the same result. Only the images directly from https://download.cloudstack.org/cks/ work.
