On 06/13/2015 01:37 PM, Nico Kadel-Garcia wrote: > On Sat, Jun 13, 2015 at 3:38 AM, Karanbir Singh <kbsingh at centos.org> wrote: >> hi, >> >> Can someone help debug why the ipa tests are failing when run inside a >> VM ? ref: >> https://ci.centos.org/view/AtomicApp/job/vagrant-libvirt-base/27/console >> >> I've bumped machine resources to multiple cores and 4G of ram, but >> afaict, its not failing due to running out of resources here. >> >> seems to work fine when run in the same infra, but on the bare metal >> machine. Which makes me think it might be network related ? this is the >> same test running on the bare metal: >> https://ci.centos.org/view/CentOS-Core-QA/job/CentOS-Core-QA-t_functional-c7-64/5/console >> >> >> regards > > Do the "bare metal" and the VM environment have the same OS image? I > doubt it, especially with the error: > > Configuring certificate server (pki-tomcatd): Estimated time 3 > minutes 30 seconds > > [1/27]: creating certificate server user > [2/27]: configuring certificate server instance > [3/27]: stopping certificate server instance to update CS.cfg > [4/27]: backing up CS.cfg > [5/27]: disabling nonces > [6/27]: set up CRL publishing > [7/27]: enable PKIX certificate path discovery and validation > [8/27]: starting certificate server instance > [9/27]: creating RA agent certificate database > [10/27]: importing CA chain to RA certificate database > [error] RuntimeError: Unable to retrieve CA chain: [Errno 111] > Connection refused > Unable to retrieve CA chain: [Errno 111] Connection refused > [+] Fri 12 Jun 17:42:54 EDT 2015 -> FAIL > + exit 1 > > That's hinting to me that it's failing to verify the CA chain, and > *that* may be is sensitive to current members of the existing SSL > setups for the build user. It may also be sensitive in this build > environment to the locally configured FQDN, which does not normally > match the system hostname of the build server. I've not taken apart > the IPA particular packages, so can't offer much more help than that. Can you post the contents of /var/log/ipaserver-install.log? - Jitse