Azure Driver - Error creating Azure Host

I am following the documentation towards cloud bursting to Azure here http://docs.opennebula.org/5.0/advanced_components/cloud_bursting/azg.html.

Getting an Error after the host is created. I understand monitoring Azure is not supported. So went ahead creating an Azure VM Template, but the deployment fails with Error

Fri Feb 10 09:54:21 2017 [Z0][VMM][I]: /usr/local/share/gems/gems/azure-0.7.6/lib/azure/configurable.rb:184:in `rescue in management_certificate=’: Management certificate not valid. Error: PKCS12_parse: mac verify failure (ArgumentError)

I am not linux expert or Ruby. The question is before proceeding with cloud integration should i need to have the password less (SSH login) enabled?

Can some one help me?

The error you are experiencing refers to the management certificate not being correctly formed. Are you following the openssl commands to create the certificate? Could you share your /etc/one/az_driver.conf?

You don’t need password less SSH login working for the Azure integration.

Tinova,

Thanks for following up. Here is the config file. I am trying to deploy the host to east-us, so filled in only that section and the default.

Here is the az_driver.conf file. I had created the openssl cert using the root account. Will that be an issue?

proxy_uri:
regions:
default:
region_name: “East US”
# pem_management_cert --> Absolute path to pem management certificate
# Info on creating certificates:
# http://azure.microsoft.com/en-us/documentation/articles/linux-use-ssh-key/
pem_management_cert: /root/myCert.pem
subscription_id: "de870d3e-7db7-484d-bf51-2dc44de4b081"
management_endpoint: "https://management.core.windows.net"
capacity:
Small: 5
Medium: 1
Large: 0
west-europe:
region_name: "West Europe"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small: 5
Medium: 1
Large: 0
north-europe:
region_name: "North Europe"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
east-us:
region_name: "East US"
pem_management_cert: /root/myCert.pem
subscription_id: "de870d3e-7db7-484d-bf51-2dc44de4b081"
management_endpoint: "https://management.core.windows.net"
capacity:
Small: 5
Medium: 1
Large:
south-central-us:
region_name: "South Central US"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
west-us:
region_name: "West US"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
east-asia:
region_name: "East Asia"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
southeast-asia:
region_name: "Southeast Asia"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
japan-west:
region_name: "Japan West"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
brazil-south:
region_name: "Brazil South"
pem_management_cert:
subscription_id:
management_endpoint:
capacity:
Small:
Medium:
Large:
instance_types:
ExtraSmall:
cpu: 1
memory: 0.75
Small:
cpu: 1
memory: 1.75
Medium:
cpu: 2
memory: 3.5
Large:
cpu: 4
memory: 7.0
ExtraLarge:
cpu: 8
memory: 14.0
A5:
cpu: 2
memory: 14.0
A6:
cpu: 4
memory: 28.0
A7:
cpu: 8
memory: 56.0
A8:
cpu: 8
memory: 56.0
A9:
cpu: 16
memory: 112.0
A10:
cpu: 8
memory: 56.0
A11:
cpu: 16
memory: 112.0
Standard_D1:
cpu: 1
memory: 3.5
Standard_D2:
cpu: 2
memory: 7.0
Standard_D3:
cpu: 4
memory: 14.0
Standard_D4:
cpu: 8
memory: 28.0
Standard_D11:
cpu: 2
memory: 14.0
Standard_D12:
cpu: 4
memory: 28.0
Standard_D13:
cpu: 8
memory: 56.0
Standard_D14:
cpu: 16
memory: 112.0
Standard_D1_v2:
cpu: 1
memory: 3.5
Standard_D2_v2:
cpu: 2
memory: 7.0
Standard_D3_v2:
cpu: 4
memory: 14.0
Standard_D4_v2:
cpu: 8
memory: 28.0
Standard_D5_v2:
cpu: 16
memory: 56.0
Standard_D11_v2:
cpu: 2
memory: 14.0
Standard_D12_v2:
cpu: 4
memory: 28.0
Standard_D13_v2:
cpu: 8
memory: 56.0
Standard_D14_v2:
cpu: 16
memory: 112.0
Standard_D15_v2:
cpu: 20
memory: 140.0

Under which user are you running the “oned” process?

Tinova

All the process are running under one admin. I am using the virtual box trial appliance image.

Senthil

That may be the issue.

Is the “oneadmin” user able to read the /root/myCert.pem file?

Tinova,

I went ahead and recreated the VM and created the certificate again. The cluster host created still errors.

Can you provide me a sample Azure Template (full one including the context) that i could use?
The one i have deployed throws the following error message.

Error deploying virtual machine: Error creating directory /var/lib/one/datastores/0/0 at east-us: ssh: Could not resolve hostname east-us: Name or service not known

Before moving on to the creation of an Azure Template (you can find a functional sample in the documentation, you need to correctly add a configured Azure host in OpenNebula, and achieve the “on” state on it.

Let’s go step by step, please answer to the following:

  • Is the myCert.pem file readable by oneadmin?
  • Can you share the output of "onehost show -x ", where hid is the id of the host with name “east-us”