[SOLVED] Machine not starting after Restore

[Deleted member 33567]

Recently I restored a machine, before this I updated the SSL on all nodes. And I get this errors when I try to start a machine that was restored:

kvm: -vnc unix:/var/run/qemu-server/5550.vnc,x509,password: Failed to start VNC server: The server certificate /etc/pve/local/pve-ssl.pem has expired
TASK ERROR: start failed: command '/usr/bin/kvm -id 5550 -name support.uhlhosting.ch -chardev 'socket,id=qmp,path=/var/run/qemu-server/5550.qmp,server,nowait' -mon 'chardev=qmp,mode=control' -pidfile /var/run/qemu-server/5550.pid -daemonize -smbios 'type=1,uuid=959b1bd5-3348-4a28-83dc-d0eb01b94df5' -smp '2,sockets=1,cores=2,maxcpus=2' -nodefaults -boot 'menu=on,strict=on,reboot-timeout=1000,splash=/usr/share/qemu-server/bootsplash.jpg' -vga std -vnc unix:/var/run/qemu-server/5550.vnc,x509,password -cpu host,+kvm_pv_unhalt,+kvm_pv_eoi -m 4096 -object 'memory-backend-ram,id=ram-node0,size=4096M' -numa 'node,nodeid=0,cpus=0-1,memdev=ram-node0' -device 'pci-bridge,id=pci.1,chassis_nr=1,bus=pci.0,addr=0x1e' -device 'pci-bridge,id=pci.2,chassis_nr=2,bus=pci.0,addr=0x1f' -device 'piix3-usb-uhci,id=uhci,bus=pci.0,addr=0x1.0x2' -device 'usb-tablet,id=tablet,bus=uhci.0,port=1' -chardev 'socket,path=/var/run/qemu-server/5550.qga,server,nowait,id=qga0' -device 'virtio-serial,id=qga0,bus=pci.0,addr=0x8' -device 'virtserialport,chardev=qga0,name=org.qemu.guest_agent.0' -device 'virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3' -iscsi 'initiator-name=iqn.1993-08.org.debian:01:3681fcbb6821' -drive 'if=none,id=drive-ide2,media=cdrom,aio=threads' -device 'ide-cd,bus=ide.1,unit=0,drive=drive-ide2,id=ide2,bootindex=200' -device 'virtio-scsi-pci,id=scsihw0,bus=pci.0,addr=0x5' -drive 'file=/mnt/pve/ovh-nfs-node02/images/5550/vm-5550-disk-1.raw,if=none,id=drive-scsi0,format=raw,cache=none,aio=native,detect-zeroes=on' -device 'scsi-hd,bus=scsihw0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0,id=scsi0,bootindex=100' -netdev 'type=tap,id=net0,ifname=tap5550i0,script=/var/lib/qemu-server/pve-bridge,downscript=/var/lib/qemu-server/pve-bridgedown,vhost=on' -device 'virtio-net-pci,mac=AA:CC:EE:78:4C:CA,netdev=net0,bus=pci.0,addr=0x12,id=net0,bootindex=300'' failed: exit code 1

 

[dcsapak]

you copied the ssl certificates to the wrong place, please read https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x_and_newer)

reset the certificates and read the guide carefully

(note the pveproxy-ssl filenames)

 

[Deleted member 33567]

you copied the ssl certificates to the wrong place, please read https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x_and_newer)

reset the certificates and read the guide carefully

(note the pveproxy-ssl filenames)

I followed the same guide:

cp fullchain.pem /etc/pve/nodes/<node>/pveproxy-ssl.pem
cp private-key.pem /etc/pve/nodes/<node>/pveproxy-ssl.key

Both my certificates are in above location, that had nothing to do with the error mentioned in my website.

 

[Deleted member 33567]

NOTE: In the above documentation the
/etc/pve/local/pve-ssl.pem location appears only 1 and that is not mentioning anything to copy. While the location for ANY other CA than Let's encrypt is here:

/etc/pve/nodes/<node>/ According to the documentation. Do not make documentations for internal use or specific people. Make if for everyone, and the less confusing the better.

 

[Deleted member 33567]

cp pveproxy-ssl.key pve-ssl.key && cp pveproxy-ssl.pem pve-ssl.pem The last namming and location from the documentation are confusing and needs to be updated.