我在 maas 云上安装了四台装有 Ubuntu 20.04 LTS（GNU/Linux 5.4.0-31-generic x86_64）的服务器，其主服务器也在桌面上运行 Ubuntu 20.04 LTS（GNU/Linux 5.4.0-31-generic x86_64），现在正尝试通过 juju base charm 部署 openstack。但是，ovn-central 单元和 ovn-chassis 单元处于阻塞状态，消息为'certificates' missing。Vault 已安装、未密封并正在运行。我还仔细检查了证书关系。当我 ssh 进入 ovn-central 容器并执行 时journalctl -p err -b，我得到了
May 26 22:24:26 juju-58128b-0-lxd-5 systemd[4316]: snap-snapd-7264.mount: Failed to set up kernel keyring: Required key not available
May 26 22:24:26 juju-58128b-0-lxd-5 systemd[4316]: snap-snapd-7264.mount: Failed at step KEYRING spawning /bin/mount: Required key not available
May 26 22:24:26 juju-58128b-0-lxd-5 systemd[1]: Failed to mount Mount unit for snapd, revision 7264.
May 26 22:37:48 juju-58128b-0-lxd-5 systemd-udevd[6433]: Failed to chown '/dev/net/tun' 0 0: Operation not permitted
May 26 22:37:48 juju-58128b-0-lxd-5 systemd-udevd[6433]: Failed to apply permissions on static device nodes: Operation not permitted
May 26 22:38:09 juju-58128b-0-lxd-5 systemd[1]: Failed to start Execute cloud user/final scripts.
May 27 08:56:34 juju-58128b-0-lxd-5 systemd[185756]: snap-lxd-15161.mount: Failed to link user keyring into session keyring: Required key not available
May 27 08:56:34 juju-58128b-0-lxd-5 systemd[185756]: snap-lxd-15161.mount: Failed to set up kernel keyring: Required key not available
May 27 08:56:34 juju-58128b-0-lxd-5 systemd[185756]: snap-lxd-15161.mount: Failed at step KEYRING spawning /bin/mount: Required key not available
May 27 08:56:34 juju-58128b-0-lxd-5 systemd[1]: Failed to mount Mount unit for lxd, revision 15161.
有人能理解这个错误吗？
答案1
除了打开保管库外，在它向您的部署颁发证书之前，您必须告诉它生成根 CA 或上传中间根证书。有关如何执行此操作的更多信息，请参阅 OpenStack Charms 部署指南 [1] 的证书生命周期管理 [0] 附录。
0：https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/latest/app-certificate-management.html 1：https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/latest/