Project

General

Profile

Actions

action #73483

closed

ipmitool from openSUSE Leap 15.2 and TW to our openQA workers fails with "no matching cipher suite", works on login.suse.de (SLES15SP1)

Added by okurz over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
-
Target version:
Start date:
2020-10-18
Due date:
2020-10-30
% Done:

0%

Estimated time:

Description

Observation

When calling ipmitool to administrate our o3/osd workers this commonly fails with errors like

Error in open session response message : no matching cipher suite

Steps to reproduce

podman run --rm -it registry.opensuse.org/home/okurz/container/containers/tumbleweed:ipmitool ipmitool -I lanplus -H openqaworker1-ipmi.suse.de -U $user -P $pass power status

Problem

This seems to happen for all openSUSE Leap 15.2 and openSUSE Tumbleweed installations, but not openSUSE Leap 15.1 or SLES15SP1 however the version of ipmitool itself seems to be the same. ipmitool -V returns 1.8.18 for me. But the build differs, e.g.

$ zypper --no-refresh info ipmitool
…
Version        : 1.8.18+git20200204.7ccea28-lp152.1.3

$ ssh login "zypper --no-refresh info ipmitool"
…
Version        : 1.8.18-7.3.1

Workaround

Use older versions of the ipmitool chain from either other machines or container


Related issues 1 (0 open1 closed)

Related to openQA Infrastructure - action #73234: ipmi management interface of openqaworker7 is inaccessible ("no matching cipher suite") and not pingableResolvedokurz2020-10-12

Actions
Actions

Also available in: Atom PDF