Bug 1890018

Summary: HE deployment fails when applying OpenSCAP profile, due to nfs-utils
Product: [oVirt] ovirt-engine Reporter: Yedidyah Bar David <didi>
Component: Packaging.rpmAssignee: Yedidyah Bar David <didi>
Status: CLOSED CURRENTRELEASE QA Contact: Nikolai Sednev <nsednev>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 4.4.1CC: bugs, dfodor, lsvaty, tnisan
Target Milestone: ovirt-4.4.4Keywords: Reopened, Triaged
Target Release: 4.4.3.10Flags: pm-rhel: ovirt-4.4+
sbonazzo: devel_ack+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-engine-4.4.3.8 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-12-21 12:36:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1890635    
Bug Blocks: 1867158    

Description Yedidyah Bar David 2020-10-21 08:22:38 UTC
Description of problem:

Creating this bug as part of bug 1867158.

Applying an openscap profile removes gssproxy, which is needed by nfs-utils, which the engine requires, thus also removes the engine.

nfs-utils is not strictly needed for the engine. It was added only for being able to use 'exportfs', which is used only when creating an NFS ISO domain by engine-setup, which is depracated (and not asked about).

If exportfs is missing, engine-setup (already) emits an error, but does
not fail.

For reproduction/verification, see bug 1867158.

If it turns out that we need more changes in the engine for it, I might add them here later.

Comment 1 Yedidyah Bar David 2020-10-21 08:59:02 UTC
QE:

Now tried installing an engine with the patch applied, on a machine I already had an engine before, and then removing nfs-utils, which I already had installed as part of installing the previous engine (without the patch applied). Removing nfs-utils also removed:

- ovirt-iso-uploader - That's ok, see bug 1806655

- glusterfs-api - I think that's ok too, but please verify that glusterfs keeps working, also in hosted-engine deploy with openscap.
  I looked a bit and failed to find why it was required by my old engine. My closest guess is bug 1676405, but it was fixed too long time ago for the engine I had (which was upstream master (now 4.4) from 2020-02).

- rpcbind - I think it's only used for NFS these days, so should be ok as well

Comment 2 Yedidyah Bar David 2020-10-21 09:03:56 UTC
Setting doc text -. We'll add doc text in bug 1867158, eventually.

Comment 4 Lukas Svaty 2020-10-23 08:38:50 UTC
Re-opening for verification as it failed automation.

Comment 5 Nikolai Sednev 2020-10-26 11:46:53 UTC
Tried using OpenScap option during deployment and failed with:
[ ERROR ] fatal: [localhost]: FAILED! => {"changed": true, "cmd": ["virt-install", "-n", "HostedEngineLocal", "--os-variant", "rhel8.0", "--virt-type", "kvm", "--memory", "12701", "--vcpus", "4", "--network", "network=default,mac=00:16:3e:7b:b8:53,model=virtio", "--disk", "/var/tmp/localvmaokfg1y0/images/c488ed60-d02b-4fb3-b7c3-7105443e34f4/3bc1911e-7e70-4fc2-aa77-16ed0a6af3fd", "--import", "--disk", "path=/var/tmp/localvmaokfg1y0/seed.iso,device=cdrom", "--noautoconsole", "--rng", "/dev/random", "--graphics", "vnc", "--video", "vga", "--sound", "none", "--controller", "usb,model=none", "--memballoon", "none", "--boot", "hd,menu=off", "--clock", "kvmclock_present=yes"], "delta": "0:00:02.172946", "end": "2020-10-26 13:39:48.923821", "msg": "non-zero return code", "rc": 1, "start": "2020-10-26 13:39:46.750875", "stderr": "ERROR    End of file while reading data: Input/output error", "stderr_lines": ["ERROR    End of file while reading data: Input/output error"], "stdout": "", "stdout_lines": []}
[ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "The system may not be provisioned according to the playbook results: please check the logs for the issue, fix accordingly or re-deploy from scratch.\n"}
[ ERROR ] Failed to execute stage 'Closing up': Failed executing ansible-playbook
[ ERROR ] Hosted Engine deployment failed: please check the logs for the issue, fix accordingly or re-deploy from scratch.

Tested on:
rhvm-appliance-4.4-20200915.0.el8ev.x86_64
ovirt-hosted-engine-setup-2.4.7-3.el8ev.noarch
ovirt-hosted-engine-ha-2.4.5-1.el8ev.noarch
Linux 4.18.0-240.1.1.el8_3.x86_64 #1 SMP Fri Oct 16 13:36:46 EDT 2020 x86_64 x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux release 8.3 (Ootpa)

Latest appliance available to QA is 2020-09-15 08:01:14.

Please fill in "Fixed In Version" field before moving to ON_QA.

Comment 7 Sandro Bonazzola 2020-11-06 11:31:50 UTC
$ git tag --contains 96a13ad1677fb0940e37c06627289db6d33b937a
ovirt-engine-4.4.3.10
ovirt-engine-4.4.3.8
ovirt-engine-4.4.3.9

Marking as fixed in ovirt-engine-4.4.3.10 due to dependency on bug #1890635

Moving to QA since ovirt-engine-4.4.3.10 is already available.

Comment 8 Nikolai Sednev 2020-11-16 18:23:03 UTC
Works fine on these components on host:
nfs-utils-2.3.3-35.el8.x86_64
ovirt-hosted-engine-setup-2.4.8-1.el8ev.noarch
ovirt-hosted-engine-ha-2.4.5-1.el8ev.noarch
rhvm-appliance-4.4-20201111.0.el8ev.x86_64
Linux 4.18.0-240.4.1.el8_3.x86_64 #1 SMP Wed Nov 11 08:19:41 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux release 8.3 (Ootpa)

On engine:
rhvm-4.4.3.10-0.1.el8ev.noarch
Linux 4.18.0-240.4.1.el8_3.x86_64 #1 SMP Wed Nov 11 08:19:41 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
Red Hat Enterprise Linux release 8.3 (Ootpa)

Comment 9 Sandro Bonazzola 2020-12-21 12:36:30 UTC
This bugzilla is included in oVirt 4.4.4 release, published on December 21st 2020.

Since the problem described in this bug report should be resolved in oVirt 4.4.4 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.