<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr" data-setdir="false">Hi all,</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">This is my first post to this list so excuse me if I have not submitted correctly. </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">I have installed openstack Victoria manually as a multi node setup. A controller & 3 computes. Everything works fine and the way it's expected. I have secured horizon with letsencrypt certs (for now) and again all is fine. When I did a test deploy I also used those certs to load the novnc console securely and it worked.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">My problem with my new deploy is that the console will not load no matter what I try. I get the following error when I enable debug mode in nova.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false"><div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy Traceback (most recent call last):</font></div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy File "/usr/lib/python3/dist-packages/websockify/websockifyserver.py", line 691, in top_new_client</font></div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy client = self.do_handshake(startsock, address)</font></div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy File "/usr/lib/python3/dist-packages/websockify/websockifyserver.py", line 578, in do_handshake</font></div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy context.load_cert_chain(certfile=self.cert, keyfile=self.key, password=self.key_password)</font></div><div><font color="#cd232c">2021-06-04 15:54:11.004 356545 ERROR nova.console.websocketproxy PermissionError: [Errno 13] Permission denied</font></div></div><br></div><div dir="ltr" data-setdir="false">If I don't have debug enabled I just get the permission denied error. I have switched to the nova user and confirmed I can access the certs directory and read the certs. All my nova services are running fine as well.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">My controller conf is the following:</div><div dir="ltr" data-setdir="false"><font color="#cd232c">[default]</font></div><div dir="ltr" data-setdir="false"><span style="color: rgb(205, 35, 44);">ssl_only=true</span><br></div><div dir="ltr" data-setdir="false"><div><div dir="ltr" data-setdir="false"><font color="#cd232c">cert=/etc/letsencrypt/live/ <span><span style="color: rgb(205, 35, 44); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;"><MY_CONTROLLER_FQDN></span></span>/fullchain.pem</font></div><div dir="ltr" data-setdir="false"><font color="#cd232c">key=/etc/letsencrypt/live/ <span><span style="color: rgb(205, 35, 44); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;"><MY_CONTROLLER_FQDN></span></span>/privkey.pem</font></div></div><font color="#cd232c"><br></font></div><div dir="ltr" data-setdir="false"><div><div><font color="#cd232c">[vnc]</font></div><div dir="ltr" data-setdir="false"><font color="#cd232c">enabled = true</font></div><div><font color="#cd232c">server_listen = 0.0.0.0</font></div><div><font color="#cd232c">server_proxyclient_address = $my_ip</font></div><div><font color="#cd232c">novncproxy_base_url = https://<MY_CONTROLLER_FQDN>:6080/vnc_auto.html</font></div></div><div><br></div><div dir="ltr" data-setdir="false">My compute config is the following:</div><div dir="ltr" data-setdir="false"><div><div><font color="#cd232c">[vnc]</font></div><div dir="ltr" data-setdir="false"><font color="#cd232c">enabled = true</font></div><div><font color="#cd232c">server_listen = 0.0.0.0</font></div><div><font color="#cd232c">server_proxyclient_address = $my_ip</font></div><div dir="ltr" data-setdir="false"><font color="#cd232c">novncproxy_base_url = <span><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;">https://<MY_CONTROLLER_FQDN>:6080/vnc_auto.html</span></span> </font></div><div><br></div></div><br></div><div dir="ltr" data-setdir="false">If anyone could help that would be really appreciated or any advice to further troubleshoot!! I cannot see anything else in any logs but I might not be looking in the right place. Thank you in advance.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">Derek</div><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false"><br></div></div></body></html>