Bug 829267

Summary:	listen_tls prevents libvirt (and in a consequence also ovirt-early) from starting
Product:	[Retired] oVirt	Reporter:	Fabian Deutsch <fdeutsch>
Component:	ovirt-node	Assignee:	Fabian Deutsch <fdeutsch>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	unspecified	CC:	acathrow, dyasny, jboggs, mburns, mgoldboi, ovirt-bugs, ovirt-maint
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	2.4.0	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-06-14 13:35:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	824420

Description Fabian Deutsch 2012-06-06 10:57:37 UTC

Description of problem:
Bug #810272 enabled listen_tls=1 (default) for libvort again. The problem for node is that libvrt fails to start in this case, because appropriate certificates are missing in /etc/pki/CA/
Normally those certificates are deployed when node is registering to engine.

Version-Release number of selected component (if applicable):
F17



If listen_tls requires certificates and they are not provided by default it makes no sense to enable it by default.

Comment 1 Fabian Deutsch 2012-06-06 13:07:46 UTC

libvirt is needed to detect whether we run in a virt. env. or not.

On F17 we can drop the dependency on libvirt because systemd provides way to detect if we a run in a virt. env.

http://gerrit.ovirt.org/5100