libvirt.libvirtError: Cannot access CA certificate '/etc/pki/CA/cacert.pem'

Bug #592853 reported by brainstorm
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
vm-builder (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

It is my impression that "/etc/pki" directory is a RedHat-specific thing. Shouldn't it look under "/etc/ca-certificates" ?

Does it make sense to generate such a self-signed certificate on python-vm-builder's postinstall ?:

http://libvirt.org/remote.html#Remote_TLS_CA

-----

# vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch amd64 -o --libvirt qemu://system --user ubuntu --pass moo --addpkg unattended-upgrades --addpkg acpid
2010-06-11 22:41:16,227 INFO : Calling hook: preflight_check
2010-06-11 22:41:16,270 INFO : Calling hook: set_defaults
2010-06-11 22:41:16,271 INFO : Calling hook: bootstrap
2010-06-11 22:56:29,212 INFO : Calling hook: configure_os
2010-06-11 22:57:28,300 INFO : update-rc.d: warning: unattended-upgrades start runlevel arguments (none) do not match LSB Default-Start values (0 6)
2010-06-11 22:57:28,301 INFO : update-rc.d: warning: unattended-upgrades stop runlevel arguments (0 6) do not match LSB Default-Stop values (none)
2010-06-11 22:57:37,496 INFO :
2010-06-11 22:57:37,497 INFO : Current default time zone: 'Etc/UTC'
2010-06-11 22:57:37,503 INFO : Local time is now: Fri Jun 11 20:57:37 UTC 2010.
2010-06-11 22:57:37,503 INFO : Universal Time is now: Fri Jun 11 20:57:37 UTC 2010.
2010-06-11 22:57:37,504 INFO :
2010-06-11 22:59:21,370 INFO :
2010-06-11 22:59:21,371 INFO : Current default time zone: 'Etc/UTC'
2010-06-11 22:59:21,376 INFO : Local time is now: Fri Jun 11 20:59:21 UTC 2010.
2010-06-11 22:59:21,376 INFO : Universal Time is now: Fri Jun 11 20:59:21 UTC 2010.
2010-06-11 22:59:21,376 INFO : Run 'dpkg-reconfigure tzdata' if you wish to change it.
2010-06-11 22:59:21,376 INFO :
2010-06-11 22:59:44,243 INFO : Calling hook: post_install
2010-06-11 22:59:44,247 INFO : Calling hook: preflight_check
libvir: Remote error : Cannot access CA certificate '/etc/pki/CA/cacert.pem': No such file or directory
Traceback (most recent call last):
  File "/usr/bin/vmbuilder", line 24, in <module>
    cli.main()
  File "/usr/lib/python2.6/dist-packages/VMBuilder/contrib/cli.py", line 116, in main
    hypervisor.install_os()
  File "/usr/lib/python2.6/dist-packages/VMBuilder/hypervisor.py", line 59, in install_os
    self.call_hooks('preflight_check')
  File "/usr/lib/python2.6/dist-packages/VMBuilder/distro.py", line 66, in call_hooks
    call_hooks(self, *args, **kwargs)
  File "/usr/lib/python2.6/dist-packages/VMBuilder/util.py", line 158, in call_hooks
    getattr(plugin, func, log_no_such_method)(*args, **kwargs)
  File "/usr/lib/python2.6/dist-packages/VMBuilder/plugins/libvirt/__init__.py", line 46, in preflight_check
    self.conn = libvirt.open(libvirt_uri)
  File "/usr/lib/python2.6/dist-packages/libvirt.py", line 169, in open
    if ret is None:raise libvirtError('virConnectOpen() failed')
libvirt.libvirtError: Cannot access CA certificate '/etc/pki/CA/cacert.pem': No such file or directory

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: python-vm-builder 0.12.3-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.32-22.36-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic x86_64
Architecture: amd64
Date: Fri Jun 11 23:10:38 2010
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
PackageArchitecture: all
ProcEnviron:
 PATH=(custom, user)
 LANG=sv_SE.UTF-8
 SHELL=/bin/bash
SourcePackage: vm-builder

Revision history for this message
brainstorm (brainstorm) wrote :
Revision history for this message
Soren Hansen (soren) wrote :

Can you try again with a correct libvirt uri? :) Namely, qemu:///system (note: 3 slashes)

Changed in vm-builder (Ubuntu):
status: New → Incomplete
Revision history for this message
brainstorm (brainstorm) wrote :

Soren, indeed, I just figured it out myself right now :-S Marking invalid...

Changed in vm-builder (Ubuntu):
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.