Closed rupeshad81 closed 3 years ago
DEBU SSH command results: err: dial tcp 192.168.130.11:22: connect: no route to host, output:
Issues with networking. Can you provide the information as asked in the issue template?
Can you check virsh -c qemu:///system list --all
?
Also one point , i am using same ca-bundle configmap ,which used for older version , so is it ok? Or we had any new for 4.8.4
After then we apply
oc apply -f /tmp/amdocs-cert.yaml
oc patch proxy cluster --type merge -p '{"spec":{"trustedCA":{"name":"user-ca-bundle"}}}'
Create certificate for amdocs CA
scp -i ~/.crc/machines/crc/id_ecdsa -o StrictHostKeyChecking=no /tmp/amdocs-cert.crt core@$(crc ip):/tmp
Copy to the correct on the VM and apply.
ssh -i ~/.crc/machines/crc/id_ecdsa -o StrictHostKeyChecking=no core@$(crc ip) sudo cp /tmp/amdocs-cert.crt /etc/pki/ca-trust/source/anchors/openshift-config-user-ca-bundle.crt
ssh -i ~/.crc/machines/crc/id_ecdsa -o StrictHostKeyChecking=no core@$(crc ip) sudo update-ca-trust
ssh -i ~/.crc/machines/crc/id_ecdsa -o StrictHostKeyChecking=no core@$(crc ip) sudo systemctl restart crio
ssh -i ~/.crc/machines/crc/id_ecdsa -o StrictHostKeyChecking=no core@$(crc ip) sudo systemctl restart kubelet
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Unreachable (v4.8.4)
Disk Usage: 5.836GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
[crc@eaas-crc ~]$ virsh -c qemu:///system list --all
Id Name State
----------------------------------------------------
1 crc running
I am not really following what the issue is now. You posted an initial issue that shows networking issue, but apply changes using ssh
. Did these ever succeed?
Please follow the issue template and state clearly steps performed and the output of each.
DEBU retry loop: attempt x
DEBU Running SSH command: exit 0
DEBU Using ssh private keys: [/home/crc/.crc/cache/crc_libvirt_4.8.4/id_ecdsa_crc /home/crc/.crc/machines/crc/id_ecdsa]
DEBU SSH command results: err: dial tcp 192.168.130.11:22: i/o timeout, output:
DEBU error: Temporary error: ssh command error:
command : exit 0
err : dial tcp 192.168.130.11:22: i/o timeout\n - sleeping 1s
This would mean the mentioned ssh
commands in https://github.com/code-ready/crc/issues/2677#issuecomment-907088726 could never run successfully. Right? Or is the shown output from a restart of the same VM?
Mainly the crc status is showing the same status:
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Degraded (v4.8.4)
Disk Usage: 6.405GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
So i had shared the steps, what i had followed for installation.
So i had shared the steps, what i had followed for installation.
I am confused about your order of execution.
Did the ssh
commands return success? If so, this means the VM would have an IP address...
... but this is not reflected in the VM/CRC startup, as it states no route to host
.
Can you perform a clean start:
$ crc delete
$ crc start
and indicate what the output is.
Note; removed statement about daemon process as system mode networking is used.
Hi, Please check now:
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Degraded (v4.8.4)
Disk Usage: 6.405GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Degraded (v4.8.4)
Disk Usage: 6.427GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
[crc@eaas-crc ~]$ crc delete
Do you want to delete the OpenShift cluster? [y/N]: y
WARN open /home/crc/.crc/machines/crc/kubeconfig: no such file or directory
Deleted the OpenShift cluster
[crc@eaas-crc ~]$ crc start --cpus 12 --memory 40000
INFO Checking if running as non-root
INFO Checking if running inside WSL2
INFO Checking if crc-admin-helper executable is cached
INFO Checking for obsolete admin-helper executable
INFO Checking if running on a supported CPU architecture
INFO Checking minimum RAM requirements
INFO Checking if crc executable symlink exists
INFO Checking if Virtualization is enabled
INFO Checking if KVM is enabled
INFO Checking if libvirt is installed
INFO Checking if user is part of libvirt group
INFO Checking if active user/process is currently part of the libvirt group
INFO Checking if libvirt daemon is running
INFO Checking if a supported libvirt version is installed
INFO Checking if crc-driver-libvirt is installed
INFO Checking crc daemon systemd socket units
WARN Skipping above check...
INFO Checking if systemd-networkd is running
INFO Checking if NetworkManager is installed
INFO Checking if NetworkManager service is running
INFO Checking if /etc/NetworkManager/conf.d/crc-nm-dnsmasq.conf exists
INFO Checking if /etc/NetworkManager/dnsmasq.d/crc.conf exists
INFO Checking if libvirt 'crc' network is available
INFO Checking if libvirt 'crc' network is active
CodeReady Containers requires a pull secret to download content from Red Hat.
You can copy it from the Pull Secret section of https://cloud.redhat.com/openshift/create/local.
? Please enter the pull secret ******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************
WARN Cannot add pull secret to keyring: The name org.freedesktop.secrets was not provided by any .service files
INFO Loading bundle: crc_libvirt_4.8.4...
INFO Creating CodeReady Containers VM for OpenShift 4.8.4...
INFO Generating new SSH Key pair...
INFO Generating new password for the kubeadmin user
INFO Starting CodeReady Containers VM for OpenShift 4.8.4...
INFO CodeReady Containers instance is running with IP 192.168.130.11
INFO CodeReady Containers VM is running
INFO Updating authorized keys...
INFO Check internal and public DNS query...
INFO Check DNS query from host...
INFO Adding proxy configuration to kubelet and crio service...
INFO Verifying validity of the kubelet certificates...
INFO Starting OpenShift kubelet service
INFO Waiting for kube-apiserver availability... [takes around 2min]
INFO Adding user's pull secret to the cluster...
INFO Updating SSH key to machine config resource...
INFO Waiting for user's pull secret part of instance disk...
Failed to update pull secret on the disk: Temporary error: pull secret not updated to disk (x11)
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Unreachable (v4.8.4)
Disk Usage: 11.68GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
[crc@eaas-crc ~]$ crc daemon
INFO Checking if running as non-root
INFO Checking if running inside WSL2
INFO Checking if crc-admin-helper executable is cached
INFO Checking for obsolete admin-helper executable
INFO Checking if running on a supported CPU architecture
INFO Checking minimum RAM requirements
INFO Checking if crc executable symlink exists
INFO Checking if Virtualization is enabled
INFO Checking if KVM is enabled
INFO Checking if libvirt is installed
INFO Checking if user is part of libvirt group
INFO Checking if active user/process is currently part of the libvirt group
INFO Checking if libvirt daemon is running
INFO Checking if a supported libvirt version is installed
INFO Checking if crc-driver-libvirt is installed
INFO Checking crc daemon systemd socket units
WARN Skipping above check...
INFO Checking if systemd-networkd is running
INFO Checking if NetworkManager is installed
INFO Checking if NetworkManager service is running
INFO Checking if /etc/NetworkManager/conf.d/crc-nm-dnsmasq.conf exists
INFO Checking if /etc/NetworkManager/dnsmasq.d/crc.conf exists
INFO Checking if libvirt 'crc' network is available
INFO Checking if libvirt 'crc' network is active
INFO listening vsock://:1024
listen vsock: open /dev/vsock: permission denied
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Unreachable (v4.8.4)
Disk Usage: 11.71GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
Thanks
Failed to update pull secret on the disk: Temporary error: pull secret not updated to disk (x11)
can you please start from a clean setup. I am confused about the steps you perform.
$ crc cleanup
$ crc setup
$ crc start
Hi,
Same procedure was done and updated above comments.
[crc@eaas-crc ~]$ crc delete
Do you want to delete the OpenShift cluster? [y/N]: y
WARN open /home/crc/.crc/machines/crc/kubeconfig: no such file or directory
Deleted the OpenShift cluster
[crc@eaas-crc ~]$ crc start --cpus 12 --memory 40000
INFO Checking if running as non-root
INFO Checking if running inside WSL2
INFO Checking if crc-admin-helper executable is cached
INFO Checking for obsolete admin-helper executable
INFO Checking if running on a supported CPU architecture
INFO Checking minimum RAM requirements
INFO Checking if crc executable symlink exists
INFO Checking if Virtualization is enabled
INFO Checking if KVM is enabled
INFO Checking if libvirt is installed
INFO Checking if user is part of libvirt group
INFO Checking if active user/process is currently part of the libvirt group
INFO Checking if libvirt daemon is running
INFO Checking if a supported libvirt version is installed
INFO Checking if crc-driver-libvirt is installed
INFO Checking crc daemon systemd socket units
WARN Skipping above check...
INFO Checking if systemd-networkd is running
INFO Checking if NetworkManager is installed
INFO Checking if NetworkManager service is running
INFO Checking if /etc/NetworkManager/conf.d/crc-nm-dnsmasq.conf exists
INFO Checking if /etc/NetworkManager/dnsmasq.d/crc.conf exists
INFO Checking if libvirt 'crc' network is available
INFO Checking if libvirt 'crc' network is active
CodeReady Containers requires a pull secret to download content from Red Hat.
You can copy it from the Pull Secret section of https://cloud.redhat.com/openshift/create/local.
? Please enter the pull secret ******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************
WARN Cannot add pull secret to keyring: The name org.freedesktop.secrets was not provided by any .service files
INFO Loading bundle: crc_libvirt_4.8.4...
INFO Creating CodeReady Containers VM for OpenShift 4.8.4...
INFO Generating new SSH Key pair...
INFO Generating new password for the kubeadmin user
INFO Starting CodeReady Containers VM for OpenShift 4.8.4...
INFO CodeReady Containers instance is running with IP 192.168.130.11
INFO CodeReady Containers VM is running
INFO Updating authorized keys...
INFO Check internal and public DNS query...
INFO Check DNS query from host...
INFO Adding proxy configuration to kubelet and crio service...
INFO Verifying validity of the kubelet certificates...
INFO Starting OpenShift kubelet service
INFO Waiting for kube-apiserver availability... [takes around 2min]
INFO Adding user's pull secret to the cluster...
INFO Updating SSH key to machine config resource...
INFO Waiting for user's pull secret part of instance disk...
Failed to update pull secret on the disk: Temporary error: pull secret not updated to disk (x11)
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Unreachable (v4.8.4)
Disk Usage: 11.68GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
[crc@eaas-crc ~]$ crc daemon
INFO Checking if running as non-root
INFO Checking if running inside WSL2
INFO Checking if crc-admin-helper executable is cached
INFO Checking for obsolete admin-helper executable
INFO Checking if running on a supported CPU architecture
INFO Checking minimum RAM requirements
INFO Checking if crc executable symlink exists
INFO Checking if Virtualization is enabled
INFO Checking if KVM is enabled
INFO Checking if libvirt is installed
INFO Checking if user is part of libvirt group
INFO Checking if active user/process is currently part of the libvirt group
INFO Checking if libvirt daemon is running
INFO Checking if a supported libvirt version is installed
INFO Checking if crc-driver-libvirt is installed
INFO Checking crc daemon systemd socket units
WARN Skipping above check...
INFO Checking if systemd-networkd is running
INFO Checking if NetworkManager is installed
INFO Checking if NetworkManager service is running
INFO Checking if /etc/NetworkManager/conf.d/crc-nm-dnsmasq.conf exists
INFO Checking if /etc/NetworkManager/dnsmasq.d/crc.conf exists
INFO Checking if libvirt 'crc' network is available
INFO Checking if libvirt 'crc' network is active
INFO listening vsock://:1024
listen vsock: open /dev/vsock: permission denied
[crc@eaas-crc ~]$ crc status
CRC VM: Running
OpenShift: Unreachable (v4.8.4)
Disk Usage: 11.71GB of 32.74GB (Inside the CRC VM)
Cache Usage: 16.15GB
Cache Directory: /home/crc/.crc/cache
Note: you do not need to run crc daemon
Hi,
crc daemon , as per your request to see the output.
Thanks
That was 'my' request and was in error. I had removed the statement. You are running in system mode for networking. It does however not change anything, as I also asked to follow the issue template, let me know if the ssh
command for the CA certs was successful, etc but without this information it is hard to assess where things went wrong, as you make it sound it allows you to manuallly run ssh
commands, which is very unlikely.
Failed to update pull secret on the disk: Temporary error: pull secret not updated to disk (x11)
Which is weird, and likely one of the reasons the cluster does not work well. What is in your crc config view
? (as requested per issue template).
It might be advised to store the pull secret on disk and use the pull-secret-path
as config option to point to this file.
Can you at least answer the following?
crc setup
before starting it (Yes/No)?# Put the output of `cat /etc/os-release` in case of Linux
# put the output of `sw_vers` in case of Mac
# Put the output of `systeminfo` in case of Windows
Hi, Please check below: [crc@eaas-crc ~]$ cat /etc/redhat-release Red Hat Enterprise Linux Server release 7.8 (Maipo)
Thanks
Laptop, baremetal or a Virtual Machine?
Hi, It is Virtual Machine.
Thanks
Which I guessed. It shows erratic behavior. We do not support nested virtualization setups. While it is known to work with KVM and HyperV, some unexpected behavior has been reported. Especially in combination with VMware. We are unable to verify and test this. All you can do is gather logs and provide detailed information, but we are unable to resolve this. Try to run this without a nested setup and verify your installation works.
Hi,
We were able to install till 4.7.11 on the same VM , without any issues. How it is changed from 4.8.x , any changes in setup, we should have some workaround. Or else Redhat should provide the proper setup , which is compatible for VM. same way like 4.7.11.
So let us know the findings.
Thanks
The single node setup is not a supported setup and is only offered for development purposes in a best effort approach. We have already experienced a lot of issues just delivering 4.8 as is for this purpose as according to #2509. If you need to run a supported setup, please use the OpenShift installer.
Addition, we support native hypervisors, like KVM, HyperV and Hyperkit, as we are able to run tests for these. Anything else for the snc setup is an as-is deliverable. YMMV.
Hi,
For development purpose we need this setup, as single node. Further which customer will deploy their deployments on the cluster levels and then production clusters.
But this get failed with various different errors , so it is very difficult to troubleshoot this errors.
Thanks
we should have some workaround.
Use the OpenShift installer to setup an environment using VMware as the hypervisor of your choice. You can 'follow' (read: learn from) how to run a single node setup from the code-ready/snc repo. This will not be a one to one mapping, but would avoid any possible issues caused by a nested virtualization setup.
Hi,
Please can you share the proper steps to follow and instruction to run the setup.
Thanks
We are not able to do so. The snc repo can provide some guidance, but since this concerns VMware we could not verify any of the steps.
You would use the installer with a forced single master and worker setup, but allow to run this converged on a single node.
I can not guarantee this will even work, as we only test this setup on KVM, and using gcp. Only recently 4.8 started work on a single node setup for edge purposes, it it is still early days. So, your mileage may vary
.
Hi,
When there will be stable CRC version 4.8.x to installed it.
Thanks
CRC 4.8.x is stable for the intended use of installing on baremetal and/or laptop use, as these are our primary targets.
For use on nested virtualization your mileage may vary; tested to work on KVM+HyperV, and HyperV+KVM, HyperV+HyperV and KVM+KVM. Any other combination involving a hypervisor other than these can result in unexpected results.
For any other setup, please consider using the OpenShift installer: https://github.com/openshift/installer
Note: we might investigate this over time, but we have higher priorities issues than making this work in combination with VMware. Closing as a duplicate of #2628
If you can consistently reproduce the Failed to update pull secret on the disk: Temporary error: pull secret not updated to disk (x11)
error after crc cleanup && crc setup && crc start --log-level debug
(only these 3 commands with no additional steps or arguments), I'd be interested in the output of crc start
with debugging output.
Hi, For now we had removed the setup and installing the crc 1.29.1 with ocp version 4.7.18.
But getting this issue for the same version.
But getting this issue for the same version.
Which issue ?
Hi,
Failed to renew TLS certificates => 1.29.1
Both for 1.31.1 and 1.31.2 no route to host\n (x89) pull secret not updated to disk (x11)
the pull-secret not updating and no route to host is most likely related to not getting a connection established.
the failed TLS certificate is a timing sensitive process, so nested virtualization can interfere here. this has been reported before. so in that case, not much that can be done.
After running the command :
crc config set skip-check-daemon-systemd-unit true
andcrc config set skip-check-daemon-systemd-sockets true
It had proceeded further , but it is not able to do
crc start
.