Skip to content

VM cannot start on the host, prompting certificate expiration #12982

Closed

Description

@maic

How to solve the problem encountered by several machines in the production environment? Can you provide specific operating steps? Thank you

Abnormal log information:
172.17.0.2:0,password,tls,x509verify=/etc/pki/libvirt-vnc: Failed to start VNC server: The server certificate /etc/pki/libvirt-vnc/server-cert.pem has expired
at org.libvirt.ErrorHandler.processError(Unknown Source)
at org.libvirt.ErrorHandler.processError(Unknown Source)
at org.libvirt.Connect.domainCreateXML(Unknown Source)
at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.startVM(LibvirtComputingResource.java:1821)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:104)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:49)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtRequestWrapper.execute(LibvirtRequestWrapper.java:78)
at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:1853)
at com.cloud.agent.Agent.processRequest(Agent.java:662)
at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:1082)
at com.cloud.utils.nio.Task.call(Task.java:83)
at com.cloud.utils.nio.Task.call(Task.java:29)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:829)

Activity

  1. github-actions commented on Apr 8, 2026

    @github-actions

    🏷️ Issue Triaged

    Hi @maic! I've categorized this issue as question based on the following analysis:

    Reasoning: This issue seeks operational guidance on resolving an expired VNC certificate preventing VM startup in a production environment.

    View Triage Details

    Analysis

    • Keywords detected: "How to solve", "Can you provide specific operating steps", certificate expiration error
    • Issue type indicators: Request for help with operational problem, seeking specific steps to resolve certificate expiry in libvirt-vnc
    • Confidence: High

    Recommended Next Steps

    • Renew the expired certificate at /etc/pki/libvirt-vnc/server-cert.pem on the affected KVM hosts
    • Check CloudStack documentation for certificate management procedures
    • Consider posting to the CloudStack mailing list for operational support

    References: Triage run §24141413094

    Generated by Issue Triage Agent

    To install this workflow, run gh aw add github/gh-aw/.github/workflows/issue-triage-agent.md@94662b1dee8ce96c876ba9f33b3ab8be32de82a4. View source at https://github.com/github/gh-aw/tree/94662b1dee8ce96c876ba9f33b3ab8be32de82a4/.github/workflows/issue-triage-agent.md.

  2. locked and limited conversation to collaborators on Apr 8, 2026
  3. converted this issue into a discussion #12984 on Apr 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions