tempestconf fails to cirros image due to SSL: CERTIFICATE_VERIFY_FAILED issue
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
Critical
|
Unassigned |
Bug Description
https:/
```
Downloading 'https:/
2023-06-16 13:35:57.878 262771 WARNING config_
2023-06-16 13:36:01.091 262771 WARNING config_
2023-06-16 13:36:07.245 262771 WARNING config_
2023-06-16 13:36:19.407 262771 INFO config_
2023-06-16 13:36:19.513 262771 WARNING config_
2023-06-16 13:36:22.623 262771 WARNING config_
2023-06-16 13:36:28.731 262771 WARNING config_
2023-06-16 13:36:40.844 262771 CRITICAL tempest [-] Unhandled error: tenacity.
2023-06-16 13:36:40.844 262771 ERROR tempest Traceback (most recent call last):
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest shutil.
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest with open(src, 'rb') as fsrc:
2023-06-16 13:36:40.844 262771 ERROR tempest FileNotFoundError: [Errno 2] No such file or directory: '/opt/cache/
2023-06-16 13:36:40.844 262771 ERROR tempest
2023-06-16 13:36:40.844 262771 ERROR tempest During handling of the above exception, another exception occurred:
2023-06-16 13:36:40.844 262771 ERROR tempest
2023-06-16 13:36:40.844 262771 ERROR tempest Traceback (most recent call last):
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest result = fn(*args, **kwargs)
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest self._download_
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest f = self.retry_
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest return f(*args, **kwargs)
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib/
2023-06-16 13:36:40.844 262771 ERROR tempest return urllib.
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest return opener.open(url, data, timeout)
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest response = meth(req, response)
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest response = self.parent.error(
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest return self._call_
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest result = func(*args)
2023-06-16 13:36:40.844 262771 ERROR tempest File "/usr/lib64/
2023-06-16 13:36:40.844 262771 ERROR tempest raise HTTPError(
2023-06-16 13:36:40.844 262771 ERROR tempest urllib.
```
On doing curl on cirros image url, we got following:
```
❯ curl https:/
curl: (60) SSL certificate problem: certificate has expired
More details here: https:/
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
```
In our code, we used to set the image url from github [2] but somehow it is working fine:
```
- name: Set extra facts for tempestconf
vars:
set_fact:
image: "{{ featureset_
```
Here is the generated profile [3].
```
create: true
debug: true
flavor_min_mem: 128
image: /opt/cache/
network-id: 4e98d9e4-
os-cloud: standalone
out: /home/zuul/
overrides:
auth.
identity.
image.
telemetry.
validation.
retry_image: true
```
There is something wrong with tempestconf overrides may be[4] as cirros url is coming from tempestconf.
```
DEFAULT_IMAGES = [("https:/
```
[4]. https:/
Changed in tripleo: | |
status: | Triaged → Fix Released |
The ssl cert issue for the cirros image url is fixed now: https:/ /download. cirros- cloud.net/ 0.5.2/cirros- 0.5.2-x86_ 64-disk. img and centos-9 wallaby got promoted on JUn 18, 2023.