[D] VM cannot start on the host, prompting certificate expiration [cloudstack]

["maic (via GitHub)" <gi...@apache.org>]

GitHub user maic created a discussion: VM cannot start on the host, prompting certificate expiration

How to solve the problem encountered by several machines in the production environment? Can you provide specific operating steps? Thank you

Abnormal log information：
172.17.0.2:0,password,tls,x509verify=/etc/pki/libvirt-vnc: Failed to start VNC server: The server certificate /etc/pki/libvirt-vnc/server-cert.pem has expired
        at org.libvirt.ErrorHandler.processError(Unknown Source)
        at org.libvirt.ErrorHandler.processError(Unknown Source)
        at org.libvirt.Connect.domainCreateXML(Unknown Source)
        at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.startVM(LibvirtComputingResource.java:1821)
        at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:104)
        at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:49)
        at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtRequestWrapper.execute(LibvirtRequestWrapper.java:78)
        at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:1853)
        at com.cloud.agent.Agent.processRequest(Agent.java:662)
        at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:1082)
        at com.cloud.utils.nio.Task.call(Task.java:83)
        at com.cloud.utils.nio.Task.call(Task.java:29)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
        at java.base/java.lang.Thread.run(Thread.java:829)

GitHub link: https://github.com/apache/cloudstack/discussions/12984

----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org

Re: [D] VM cannot start on the host, prompting certificate expiration [cloudstack]

["github-actions[bot] (via GitHub)" <gi...@apache.org>]

GitHub user github-actions[bot] added a comment to the discussion: VM cannot start on the host, prompting certificate expiration

### 🏷️ Issue Triaged

Hi `@maic`! I've categorized this issue as **question** based on the following analysis:

**Reasoning**: This issue seeks operational guidance on resolving an expired VNC certificate preventing VM startup in a production environment.

<details>
<summary><b>View Triage Details</b></summary>

#### Analysis
- **Keywords detected**: "How to solve", "Can you provide specific operating steps", certificate expiration error
- **Issue type indicators**: Request for help with operational problem, seeking specific steps to resolve certificate expiry in libvirt-vnc
- **Confidence**: High

#### Recommended Next Steps
- Renew the expired certificate at `/etc/pki/libvirt-vnc/server-cert.pem` on the affected KVM hosts
- Check CloudStack documentation for certificate management procedures
- Consider posting to the CloudStack mailing list for operational support

</details>

**References**: [Triage run §24141413094](https://github.com/apache/cloudstack/actions/runs/24141413094)

> Generated by [Issue Triage Agent](https://github.com/apache/cloudstack/actions/runs/24141413094)
>
> To install this workflow, run `gh aw add github/gh-aw/.github/workflows/issue-triage-agent.md@94662b1dee8ce96c876ba9f33b3ab8be32de82a4`. View source at [https://github.com/github/gh-aw/tree/94662b1dee8ce96c876ba9f33b3ab8be32de82a4/.github/workflows/issue-triage-agent.md](https://github.com/github/gh-aw/tree/94662b1dee8ce96c876ba9f33b3ab8be32de82a4/.github/workflows/issue-triage-agent.md).

<!-- gh-aw-agentic-workflow: Issue Triage Agent, run: https://github.com/apache/cloudstack/actions/runs/24141413094 -->

GitHub link: https://github.com/apache/cloudstack/discussions/12984#discussioncomment-16490839

----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org