Bug 49695

Summary: Ошибка при создании сертификата для dashboard
Product: Branch p11 Reporter: Alexander Makeenkov <amakeenk>
Component: cephAssignee: Alexey Shabalin <shaba>
Status: NEW --- QA Contact: qa-p11 <qa-p11>
Severity: normal    
Priority: P5 CC: blinovdv
Version: unspecified   
Hardware: x86_64   
OS: Linux   

Description Alexander Makeenkov 2024-03-14 12:49:00 MSK 
Версия:
ceph-17.2.7-alt2

При выполнении команды "ceph dashboard create-self-signed-cert" (согласно инструкции https://docs.ceph.com/en/quincy/mgr/dashboard/#configuration) возникает ошибка:

# ceph dashboard create-self-signed-cert
Error EINVAL: Traceback (most recent call last):
  File "/usr/share/ceph/mgr/mgr_module.py", line 1759, in _handle_command
    return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf)
  File "/usr/share/ceph/mgr/mgr_module.py", line 462, in call
    return self.func(mgr, **kwargs)
  File "/usr/share/ceph/mgr/dashboard/module.py", line 470, in set_mgr_created_self_signed_cert
    cert, pkey = create_self_signed_cert('IT', 'ceph-dashboard')
  File "/usr/share/ceph/mgr/mgr_util.py", line 502, in create_self_signed_cert
    from OpenSSL import crypto
  File "/usr/lib/python3/site-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import SSL, crypto
  File "/usr/lib/python3/site-packages/OpenSSL/SSL.py", line 9, in <module>
    from OpenSSL._util import (
  File "/usr/lib/python3/site-packages/OpenSSL/_util.py", line 6, in <module>
    from cryptography.hazmat.bindings.openssl.binding import Binding
  File "/usr/lib64/python3/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 15, in <module>
    from cryptography.exceptions import InternalError
  File "/usr/lib64/python3/site-packages/cryptography/exceptions.py", line 9, in <module>
    from cryptography.hazmat.bindings._rust import exceptions as rust_exceptions
ImportError: PyO3 modules may only be initialized once per interpreter process
Comment 1 Блинов Денис Вячеславович 2025-12-19 11:44:19 MSK 
Воспроизвелось в p11 на версии ceph-19.2.3-alt1.x86_64
Платформа: p11-server-11.0-x86-64-minimal

# ceph dashboard create-self-signed-cert

Error EINVAL: Traceback (most recent call last):
  File "/usr/share/ceph/mgr/mgr_module.py", line 1910, in _handle_command
    return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/ceph/mgr/mgr_module.py", line 501, in call
    return self.func(mgr, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/ceph/mgr/dashboard/module.py", line 467, in set_mgr_created_self_signed_cert
    cert, pkey = create_self_signed_cert('IT', 'ceph-dashboard')
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/ceph/mgr/mgr_util.py", line 534, in create_self_signed_cert
    from OpenSSL import crypto
  File "/lib/python3/site-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import SSL, crypto
  File "/lib/python3/site-packages/OpenSSL/SSL.py", line 15, in <module>
    from cryptography import x509
  File "/lib64/python3/site-packages/cryptography/x509/__init__.py", line 7, in <module>
    from cryptography.x509 import certificate_transparency, verification
  File "/lib64/python3/site-packages/cryptography/x509/certificate_transparency.py", line 8, in <module>
    from cryptography.hazmat.bindings._rust import x509 as rust_x509
ImportError: PyO3 modules compiled for CPython 3.8 or older may only be initialized once per interpreter process