Bug 1984886

Summary: Include rsyslog-openssl package on hosts
Product: Red Hat Enterprise Virtualization Manager Reporter: Ulhas Surse <usurse>
Component: ovirt-hostAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED ERRATA QA Contact: cshao <cshao>
Severity: high Docs Contact:
Priority: medium    
Version: 4.4.6CC: arachman, cshao, ddacosta, lsvaty, lveyde, mavital, michal.skrivanek, mperina, mtessun, pelauter, peyu, sbonazzo, shlei, tc.staff, weiwang, yaniwang
Target Milestone: ovirt-4.4.9Keywords: FutureFeature, Reopened, ZStream
Target Release: 4.4.9   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: ovirt-host-4.4.9-1.el8ev Doc Type: Enhancement
Doc Text:
Previously, manual installation of the rsyslog-openssl package was required to setup remote encrypted logging. In the current release, the rsyslog-openssl package is installed by default on both the oVirt Node and RHV-H.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2021-11-16 15:12:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ulhas Surse 2021-07-22 12:20:32 UTC 
Description of problem:
Need to include rsyslog-gnutls  package in RHVH repository.

Version-Release number of selected component (if applicable):
RHV 4.4.6 

How reproducible:
Always

Error while installing: 
The error "could not load module 'lmnsd_gtls'" comes up after reloading / starting rsyslog.



Additional info:
It can be installed manually but an official method through the repository is preferred. 

# rpm -qa | grep rsyslog
rsyslog-mmnormalize-8.1911.0-7.el8.x86_64
rsyslog-elasticsearch-8.1911.0-7.el8.x86_64
rsyslog-8.1911.0-7.el8.x86_64
rsyslog-mmjsonparse-8.1911.0-7.el8.x86_64



# yum install rsyslog-gnutls-8.1911.0-7.el8.x86_64.rpm 
Updating Subscription Management repositories.
Last metadata expiration check: 21:17:02 ago on Thu 08 Jul 2021 06:46:10 PM IST.
Dependencies resolved.
=====================================================================================================================================================================================================
 Package                                                     Architecture                                        Version                                                      Repository        Size
=====================================================================================================================================================================================================
Installing:
 rsyslog-gnutls                                              x86_64                                              8.1911.0-7.el8                                               @commandline      31 k

Transaction Summary
=====================================================================================================================================================================================================
Install  1 Package


# ll /usr/lib64/rsyslog/lmnsd_gtls.so 
-rwxr-xr-x. 1 root root 47408 Nov 25  2020 /usr/lib64/rsyslog/lmnsd_gtls.so



Relevant Bugs bug the customer is not using ELK:

https://bugzilla.redhat.com/show_bug.cgi?id=1926823
https://bugzilla.redhat.com/show_bug.cgi?id=1927943
Comment 12 cshao 2021-10-12 04:47:37 UTC 
Test version:
redhat-virtualization-host-4.4.9-20211011.0.el8_5

# imgbase w
You are on rhvh-4.4.9.2-0.20211011.0+1

# rpm -qa| grep  ovirt-host
ovirt-hosted-engine-ha-2.4.9-1.el8ev.noarch
ovirt-host-4.4.9-1.el8ev.x86_64
ovirt-host-dependencies-4.4.9-1.el8ev.x86_64
ovirt-hosted-engine-setup-2.5.3-1.el8ev.noarch

# rpm -qa| grep  rsyslog-openssl
rsyslog-openssl-8.2102.0-5.el8.x86_64

Test result:
RHVH image include the correct rsyslog-openssl package, so the bug is fixed, change bug status to VERIFIED.
Comment 13 tc.staff 2021-10-27 15:07:42 UTC 
This is a tangent, but want to note rsyslog-openssl is only in centos stream, so this I believe is the first package to break non-stream centos support out of the box for oVirt.
Comment 14 Sandro Bonazzola 2021-10-28 07:36:40 UTC 
(In reply to tc.staff from comment #13)
> This is a tangent, but want to note rsyslog-openssl is only in centos
> stream, so this I believe is the first package to break non-stream centos
> support out of the box for oVirt.

On CentOS 8.4 it can be installed from CentOS Virt SIG repos included in oVirt: http://mirror.centos.org/centos/8/virt/x86_64/ovirt-44/

It's also available on RHEL 8.5 beta and on Alma Linux 8.5 beta: https://alma.intercloud.co.il/8.5-beta/AppStream/x86_64/os/
Comment 19 errata-xmlrpc 2021-11-16 15:12:47 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (RHV RHEL Host (ovirt-host) [ovirt-4.4.9]), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4704