添加节点显示installfailed
先说添加ovirt节点最近遇到了添加失败，ovirt engine上会显示installfailed，查看日志后发现，有下述信息
代码语言：javascript复制Error: Failed to download metadata for repo 'ovirt-4.4-centos-gluster8': Cannot prepare internal mirrorlist: No URLs in mirrorlist在失败节点上执行
代码语言：javascript复制dnf makecache也有类似的报错
代码语言：javascript复制[root@localhost ~]# dnf makecache
Ceph packages for x86_64 3.9 kB/s | 3.0 kB 00:00
oVirt Node Optional packages from CentOS Stream 8 - BaseOS 6.5 kB/s | 3.9 kB 00:00
oVirt Node Optional packages from CentOS Stream 8 - AppStream 5.9 kB/s | 4.4 kB 00:00
Latest oVirt 4.4 Release 3.9 kB/s | 3.0 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 38 kB/s | 8.6 kB 00:00
CentOS-8 - Gluster 8 69 B/s | 38 B 00:00
Error: Failed to download metadata for repo 'ovirt-4.4-centos-gluster8': Cannot prepare internal mirrorlist: No URLs in mirrorlist由此可知是源的问题，这是因为centos8在2022年后已经停止了，因此需要安装第三方源的ovirt-release，可以使用下述命令进行替换。
代码语言：javascript复制dnf --disablerepo=ovirt-4.4-centos-gluster8,ovirt-4.4-centos-opstools,ovirt-4.4-openstack-victoria install -y http://mirror.massclouds.com/ovirt/yum-repo/ovirt-release44.rpm节点证书创建失败
我在添加节点后还是失败，发现相关证书失败，查看日志显示下述信息
代码语言：javascript复制...
"results" : [ {
"msg" : "non-zero return code",
"cmd" : [ "/usr/share/ovirt-engine/bin/pki-enroll-request.sh", "--name=10.10.50.138", "--subject=/O=********/CN=10.10.50.138", "--san=IP:10.10.50.138", "--days=398", "--timeout=30", "--ca-file=ca", "--cert-dir=certs", "--req-dir=requests" ],
"stdout" : "",
"stderr" : "Using configuration from openssl.confnunable to load number from serial.txtnerror while loading serial numbern140631516194624:error:0D066096:asn1 encoding routines:a2i_ASN1_INTEGER:short line:crypto/asn1/f_int.c:140:nCannot sign certificate",
"rc" : 1,
"start" : "2022-09-03 09:00:49.661484",
"end" : "2022-09-03 09:00:49.682199",
"delta" : "0:00:00.020715",
"changed" : true,
"failed" : true,
"invocation" : {
"module_args" : {
"_raw_params" : ""/usr/share/ovirt-engine/bin/pki-enroll-request.sh"n"--name=10.10.50.138"n"--subject=/O=********/CN=10.10.50.138"n"--san=IP:10.10.50.138"n"--days=398"n"--timeout=30"n"--ca-file=ca"n"--cert-dir=certs"n"--req-dir=requests"n",
"warn" : true,
"_uses_shell" : false,
"stdin_add_newline" : true,
"strip_empty_ends" : true,
"argv" : null,
"chdir" : null,
"executable" : null,
"creates" : null,
"removes" : null,
"stdin" : null
}
},
"stdout_lines" : [ ],
"stderr_lines" : [ "Using configuration from openssl.conf", "unable to load number from serial.txt", "error while loading serial number", "140631516194624:error:0D066096:asn1 encoding routines:a2i_ASN1_INTEGER:short line:crypto/asn1/f_int.c:140:", "Cannot sign certificate" ],
"_ansible_no_log" : false,
"item" : {
...发现是engine上的serial.txt文件缺失，按道理在/etc/pki/ovirt-engine上应该存在一个serial.txt文件的，这里我不知道为什么丢失了
查看这个request，有相似的情况，最后是重新创建该文件并写入1013到文件内。
代码语言：javascript复制cd /etc/pki/ovirt-engine
touch serial.txt
echo "1013" >> serial.txt
chown ovirt:ovirt serial.txt
