Bug 1209292 - rolctl deploy fails on Beta TC8
Summary: rolctl deploy fails on Beta TC8
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: rolekit
Version: 22
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Thomas Woerner
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: F22BetaBlocker
TreeView+ depends on / blocked
 
Reported: 2015-04-07 01:07 UTC by Dan Mossor [danofsatx]
Modified: 2015-04-07 20:42 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-04-07 20:42:09 UTC


Attachments (Terms of Use)
ipaclient-install.log (16.48 KB, text/plain)
2015-04-07 17:55 UTC, Dan Mossor [danofsatx]
no flags Details
ipaserver-install.log (1.75 MB, text/plain)
2015-04-07 17:55 UTC, Dan Mossor [danofsatx]
no flags Details
the XML file for the VM (5.01 KB, application/xml)
2015-04-07 17:57 UTC, Dan Mossor [danofsatx]
no flags Details

Description Dan Mossor [danofsatx] 2015-04-07 01:07:44 UTC
rolctl deploy domaincontroller fails on Beta TC8, with updates-testing disabled.

Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Hostname: server-btc8.test.lcl
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Realm: TEST.LCL
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: DNS Domain: test.lcl
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: IPA Server: server-btc8.test.lcl
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: BaseDN: dc=test,dc=lcl
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: New SSSD config will be created
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configured sudoers in /etc/nsswitch.conf
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configured /etc/sssd/sssd.conf
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: trying https://server-btc8.test.lcl/ipa/json
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Forwarding 'ping' to json server 'https://server-btc8.test.lcl/ipa/json'
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Cannot connect to the server due to generic error: cannot connect to 'https://server-btc8.test.lcl/ipa/json': Internal Server Error
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Installation failed. As this is IPA server, changes will not be rolled back.
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa         : DEBUG      File "/usr/lib/python2.7/site-packages/ipaserver/install/installutils.py", line 642, in run_script
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:     return_value = main_function()
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:   File "/usr/sbin/ipa-server-install", line 1333, in main
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:     sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e))
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR:
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa         : DEBUG    The ipa-server-install command failed, exception: SystemExit: Configuration of client side components failed!
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' 'test.lcl' '--server' 'server-btc8.test.lcl' '--realm' 'TEST.LCL' '--hostname' 'server-btc8.test.lcl'' returned non-zero exit status 1
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: Configuration of client side components failed!
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: ipa-client-install returned: Command ''/usr/sbin/ipa-client-install' '--on-master' '--unattended' '--domain' 'test.lcl' '--server' 'server-btc8.test.lcl' '--realm' 'TEST.LCL' '--hostname' 'server-btc8.test.lcl'' returned non-zero exit status 1
Apr 06 18:05:19 server-btc8.test.lcl roled[27527]: 2015-04-06 18:05:19 ERROR: <class 'rolekit.errors.RolekitError'>: COMMAND_FAILED: 256

Comment 1 Fedora Blocker Bugs Application 2015-04-07 01:09:58 UTC
Proposed as a Blocker for 22-beta by Fedora user dmossor using the blocker tracking app because:

 Proposing as blocker as it violates the Server Release criteria "The core functional requirements for all Featured Server Roles must be met, without any workarounds being necessary. " Domain Controller is a Featured Server Role.

Comment 2 Stephen Gallagher 2015-04-07 12:15:58 UTC
I tested installing the domain controller role on two different Server TC8 machines yesterday. Both completed successfully.

Can you please include the settings-file you used?

Comment 3 Stephen Gallagher 2015-04-07 13:45:51 UTC
I just tried again (making sure that the updates-testing repo is disabled) and it worked perfectly fine.

Looking at  "ERROR: Cannot connect to the server due to generic error: cannot connect to 'https://server-btc8.test.lcl/ipa/json': Internal Server Error", I suspect you may have hit the known issue: 
https://fedoraproject.org/w/index.php?title=Common_F22_bugs#Rolekit_fails_to_deploy_a_Domain_Controller_on_a_virtual_machine

Please attach /var/log/ipaserver-install.log and /var/log/ipaclient-install.log.

Comment 4 Dan Mossor [danofsatx] 2015-04-07 17:54:37 UTC
This was a straight install of TC8, with the only things modified in anaconda being the IP address, hostname, and root password.

Attaching the requested logs, as well as the VM XML file.

Comment 5 Dan Mossor [danofsatx] 2015-04-07 17:55:10 UTC
Created attachment 1011866 [details]
ipaclient-install.log

Comment 6 Dan Mossor [danofsatx] 2015-04-07 17:55:43 UTC
Created attachment 1011867 [details]
ipaserver-install.log

Comment 7 Dan Mossor [danofsatx] 2015-04-07 17:57:13 UTC
Created attachment 1011868 [details]
the XML file for the VM

Comment 8 Stephen Gallagher 2015-04-07 18:21:51 UTC
From the logs: "2015-04-06T23:05:08Z DEBUG WARNING: Your system is running out of entropy, you may experience long delays"

This is almost certainly https://fedoraproject.org/w/index.php?title=Common_F22_bugs#Rolekit_fails_to_deploy_a_Domain_Controller_on_a_virtual_machine rearing its head again.

-1 blocker, it's a known issue that pretty much has to be worked around. There's no secure technical way to solve it until someone invents a better entropy-gathering algorithm.

Comment 9 Dan Mossor [danofsatx] 2015-04-07 20:42:09 UTC
I need new glasses. I was testing with Alpha TC8. Beta TC8 installed without a hitch.


Note You need to log in before you can comment on or make changes to this bug.