+++ This bug was initially created as a clone of Bug #1326887 +++ Description of problem: When SSL for horizon is enabled, the Packstack installation fails, because httpd cant get restarted. Version-Release number of selected component (if applicable): openstack-packstack.noarch 1:7.0.0-0.14.dev1702.g490e674.el7ost @OpenStack openstack-packstack-puppet.noarch 1:7.0.0-0.14.dev1702.g490e674.el7ost @OpenStack How reproducible: 100% Steps to Reproduce: 1. sudo yum install -y openstack-packstack 2. packstack --allinone --os-horizon-ssl=y Actual results: ERROR : Error appeared during Puppet run: 10.0.0.3_horizon.pp Error: /Stage[main]/Apache::Service/Service[httpd]: Failed to call refresh: Could not restart Service[httpd]: Execution of '/usr/bin/systemctl restart httpd' returned 1: Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details Workarounds: /etc/httpd/conf.d/ssl.conf has: Listen 443 https Comment the line in /etc/httpd/conf.d/ssl.conf and run packstack again The problem here is that puppet-horizon originally did not enable port 443 by default, so we created a workaround for this [1]. Recent versions now set the port correctly [2], so the workaround has to be removed from PackStack. [1] https://github.com/openstack/packstack/blob/master/packstack/puppet/templates/horizon.pp#L55 [2] https://github.com/puppetlabs/puppetlabs-apache/blob/b14c238eecb4e90d03b3c4cb841fe9b035df80c2/manifests/init.pp#L399
This has been fixed upstream, creating package
Backport ready: https://review.openstack.org/#/c/320184/
Correct backport: https://review.openstack.org/#/c/320556/
automation passed https://rhos-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/job/rhos-jenkins-rhos-8.0-puddle-rhel-7.2-multi-node-packstack-neutron-ml2-gre-rabbitmq-tempest-rpm-all/16/
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1354