VM cannot start on the host, prompting certificate expiration

[maic]

How to solve the problem encountered by several machines in the production environment? Can you provide specific operating steps? Thank you

Abnormal log information：
172.17.0.2:0,password,tls,x509verify=/etc/pki/libvirt-vnc: Failed to start VNC server: The server certificate /etc/pki/libvirt-vnc/server-cert.pem has expired
at org.libvirt.ErrorHandler.processError(Unknown Source)
at org.libvirt.ErrorHandler.processError(Unknown Source)
at org.libvirt.Connect.domainCreateXML(Unknown Source)
at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.startVM(LibvirtComputingResource.java:1821)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:104)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtStartCommandWrapper.execute(LibvirtStartCommandWrapper.java:49)
at com.cloud.hypervisor.kvm.resource.wrapper.LibvirtRequestWrapper.execute(LibvirtRequestWrapper.java:78)
at com.cloud.hypervisor.kvm.resource.LibvirtComputingResource.executeRequest(LibvirtComputingResource.java:1853)
at com.cloud.agent.Agent.processRequest(Agent.java:662)
at com.cloud.agent.Agent$AgentRequestHandler.doTask(Agent.java:1082)
at com.cloud.utils.nio.Task.call(Task.java:83)
at com.cloud.utils.nio.Task.call(Task.java:29)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:829)

[github-actions]

🏷️ Issue Triaged

Hi @maic! I've categorized this issue as question based on the following analysis:

Reasoning: This issue seeks operational guidance on resolving an expired VNC certificate preventing VM startup in a production environment.

View Triage Details

Analysis

• Keywords detected: "How to solve", "Can you provide specific operating steps", certificate expiration error
• Issue type indicators: Request for help with operational problem, seeking specific steps to resolve certificate expiry in libvirt-vnc
• Confidence: High

Recommended Next Steps

• Renew the expired certificate at /etc/pki/libvirt-vnc/server-cert.pem on the affected KVM hosts
• Check CloudStack documentation for certificate management procedures
• Consider posting to the CloudStack mailing list for operational support

References: Triage run §24141413094

Generated by Issue Triage Agent

To install this workflow, run gh aw add github/gh-aw/.github/workflows/issue-triage-agent.md@94662b1dee8ce96c876ba9f33b3ab8be32de82a4. View source at https://github.com/github/gh-aw/tree/94662b1dee8ce96c876ba9f33b3ab8be32de82a4/.github/workflows/issue-triage-agent.md.