Bug 2050108
| Summary: | hosted-engine-setup fails to start ovirt-ha-broker service on RHEL-H with DISA STIG | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Virtualization Manager | Reporter: | Asaf Rachmani <arachman> |
| Component: | ovirt-hosted-engine-ha | Assignee: | Asaf Rachmani <arachman> |
| Status: | CLOSED ERRATA | QA Contact: | Wei Wang <weiwang> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 4.5.0 | CC: | emarcus, lsurette, yaniwang |
| Target Milestone: | ovirt-4.5.0 | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ovirt-hosted-engine-ha-2.5.0-1.el8ev | Doc Type: | Bug Fix |
| Doc Text: |
Previously, the ovirt-ha-broker service failed to start on a host with a DISA STIG profile.
In this release, the ovirt-ha-broker binaries were moved to /usr/libexec. As a result, the ovirt-ha-broker service succeeds to start on a host with a DISA STIG profile.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-05-26 17:22:47 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Integration | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2020620 | ||
| Bug Blocks: | |||
Test Version: ovirt-hosted-engine-ha-2.5.0-1.el8ev.noarch ovirt-ansible-collection-2.0.0-0.6.BETA.el8ev.noarch Test Steps: 1. Install RHEL8.5 iso with STIG profile 2. Remove fapolicyd 3. Upgrade to RHEL8.6 4. Install fapolicyd 5. Install rhv 6. hosted engine deploy Test Result: Hosted engine deploy successfully. Bug is fixed, move it to "VERIFIED" Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Low: RHV RHEL Host (ovirt-host) [ovirt-4.5.0] security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:4764 |
Description of problem: hosted-engine-setup fails to start ovirt-ha-broker service on RHEL-H with DISA STIG Version-Release number of selected component (if applicable): ovirt-hosted-engine-ha-2.4.9-1.el8ev.noarch ovirt-ansible-collection-1.6.5-1.el8ev.noarch ovirt-hosted-engine-setup-2.5.4-2.el8ev.noarch How reproducible: 100% Steps to Reproduce: 1. Install Rhel-h 8 with DISA STIG. 2. run hosted-engine deployment Actual results: Deployment fails on "Initialize lockspace volume" task Expected results: Deployment succeeds Additional info: 2022-01-24 09:50:07,594-0500 DEBUG ansible on_any args TASK: ovirt.ovirt.hosted_engine_setup : Initialize lockspace volume kwargs is_conditional:False 2022-01-24 09:50:07,594-0500 DEBUG ansible on_any args localhost TASK: ovirt.ovirt.hosted_engine_setup : Initialize lockspace volume kwargs 2022-01-24 09:50:09,096-0500 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f00796cb668> kwargs 2022-01-24 09:50:20,327-0500 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f0079966320> kwargs 2022-01-24 09:50:31,579-0500 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f0079966d30> kwargs 2022-01-24 09:50:43,065-0500 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f00796cb0b8> kwargs 2022-01-24 09:50:54,204-0500 DEBUG ansible on_any args <ansible.executor.task_result.TaskResult object at 0x7f0079a890f0> kwargs 2022-01-24 09:51:05,970-0500 DEBUG var changed: host "localhost" var "ansible_play_hosts" type "<class 'list'>" value: "[]" 2022-01-24 09:51:05,970-0500 DEBUG var changed: host "localhost" var "ansible_play_batch" type "<class 'list'>" value: "[]" 2022-01-24 09:51:05,970-0500 DEBUG var changed: host "localhost" var "play_hosts" type "<class 'list'>" value: "[]" 2022-01-24 09:51:05,971-0500 ERROR ansible failed { "ansible_host": "localhost", "ansible_playbook": "/usr/share/ovirt-hosted-engine-setup/ansible/trigger_role.yml", "ansible_result": { "_ansible_no_log": false, "attempts": 5, "changed": true, "cmd": [ "hosted-engine", "--reinitialize-lockspace", "--force" ], "delta": "0:00:00.801175", "end": "2022-01-24 09:51:05.444875", "invocation": { "module_args": { "_raw_params": "hosted-engine --reinitialize-lockspace --force", "_uses_shell": false, "argv": null, "chdir": null, "creates": null, "executable": null, "removes": null, "stdin": null, "stdin_add_newline": true, "strip_empty_ends": true, "warn": true } }, "msg": "non-zero return code", "rc": 1, "start": "2022-01-24 09:51:04.643700", "stderr": "Traceback (most recent call last):\n File \"/usr/lib64/python3.6/runpy.py\", line 193, in _run_module_as_main\n \"__main__\", mod_spec)\n File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code\n exec(code, run_globals)\n File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_setup/reinitialize_lockspace.py\", line 30, in <module>\n ha_cli.reset_lockspace(force)\n File \"/usr/ lib/python3.6/site-packages/ovirt_hosted_engine_ha/client/client.py\", line 286, in reset_lockspace\n stats = broker.get_stats_from_storage()\n File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_ha/ lib/brokerlink.py\", line 148, in get_stats_from_storage\n result = self._proxy.get_stats()\n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1112, in __call__\n return self.__send(self.__name, args) \n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1452, in __request\n verbose=self.__verbose\n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1154, in request\n return self.single_request(host, handler, request_body, verbose)\n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1166, in single_request\n http_conn = self.send_request(host, handler, request_body, verbose)\n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1279, in send_request\n self.send_content(connection, request_body)\n File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1309, in send_content\n connection.endheaders(request_body)\n File \"/usr/lib64/python3.6/http/client.py\", line 1264, in endheaders\n self._send_output(message_body, encode_chunked=encode_chunked)\n File \"/usr/lib64/python3.6/http/client.py\", line 1040, in _send_output\n self.send(msg)\n File \"/usr/lib64/python3.6/http/client.py\", line 978, in send\n self.connect()\n File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_ha/lib/unixrpc.py\", line 76, in connect\n self.sock.connect(base64.b16decode(self.host))\nFileNotFoundError: [Errno 2] No such file or directory", "stderr_lines": [ "Traceback (most recent call last):", " File \"/usr/lib64/python3.6/runpy.py\", line 193, in _run_module_as_main", " \"__main__\", mod_spec)", " File \"/usr/lib64/python3.6/runpy.py\", line 85, in _run_code", " exec(code, run_globals)", " File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_setup/reinitialize_lockspace.py\", line 30, in <module>", " ha_cli.reset_lockspace(force)", " File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_ha/client/client.py\", line 286, in reset_lockspace", " stats = broker.get_stats_from_storage()", " File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_ha/lib/brokerlink.py\", line 148, in get_stats_from_storage", " result = self._proxy.get_stats()", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1112, in __call__", " return self.__send(self.__name, args)", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1452, in __request", " verbose=self.__verbose", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1154, in request", " return self.single_request(host, handler, request_body, verbose)", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1166, in single_request", " http_conn = self.send_request(host, handler, request_body, verbose)", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1279, in send_request", " self.send_content(connection, request_body)", " File \"/usr/lib64/python3.6/xmlrpc/client.py\", line 1309, in send_content", " connection.endheaders(request_body)", " File \"/usr/lib64/python3.6/http/client.py\", line 1264, in endheaders", " self._send_output(message_body, encode_chunked=encode_chunked)", " File \"/usr/lib64/python3.6/http/client.py\", line 1040, in _send_output", " self.send(msg)", " File \"/usr/lib64/python3.6/http/client.py\", line 978, in send", " self.connect()", " File \"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_ha/lib/unixrpc.py\", line 76, in connect", " self.sock.connect(base64.b16decode(self.host))", "FileNotFoundError: [Errno 2] No such file or directory" ], "stdout": "", "stdout_lines": [] }, "ansible_task": "Initialize lockspace volume", "ansible_type": "task", "status": "FAILED", "task_duration": 58 }