Error encountered while attempting to add a KVM host to CloudStack: Failed to setup keystore on the KVM host: 192.168.122.10 Stack trace from management-server.log: 2025-10-03 22:36:14,828 DEBUG [c.c.h.k.d.KvmServerDiscoverer] (qtp1438988851-25:[ctx-99e0fc72, ctx-e969ec93]) (logid:a67f40bb) can't setup agent, due to com.cloud.utils.exception.CloudRuntimeException: Failed to setup keystore on the KVM host: 192.168.122.10 - Failed to setup keystore on the KVM host: 192.168.122.10 com.cloud.utils.exception.CloudRuntimeException: Failed to setup keystore on the KVM host: 192.168.122.10 at com.cloud.hypervisor.kvm.discoverer.LibvirtServerDiscoverer.setupAgentSecurity(LibvirtServerDiscoverer.java:196) at com.cloud.hypervisor.kvm.discoverer.LibvirtServerDiscoverer.find(LibvirtServerDiscoverer.java:339) at com....

This document captures the logs and analysis of a failure while attempting to add a KVM host to a CloudStack zone, due to issues setting up the agent certificate keystore. Error Summary DiscoveryException: Could not add host at [http://192.168.122.10] ... Failed to setup certificate in the KVM agent's keystore file, please see logs and configure manually! 2025-10-04 23:41:58,838 INFO [c.c.a.ApiServer] (qtp1438988851-22:[ctx-b8b55cff, ctx-2b748765]) (logid:046ec553) Could not add host at [http://192.168.122.10] with zone [Zone {"id": "2", "name": "MyAdvancedZone", "uuid": "30d1810a-9680-49c7-8926-75fcf5e4dfb8"}], pod [HostPod {"id":1,"name":"Pod1","uuid":"996b281e-a200-4a64-9cd2-9f7fc8d0d55a"}] and cluster [Cluster {id: "1", name: "Cluster1", uuid: "c6981176-f03d-45dd-aba8-bbe3ab38e6f4"}] due to: [ can't setup agent, due to com....

1. Where CloudStack Logs Live CloudStack has three main components — each with its own logs: Component Purpose Log Path Management Server UI, API, core business logic /var/log/cloudstack/management/management-server.log KVM Agent (if used) Talks to libvirt/hypervisor /var/log/cloudstack/agent/agent.log Usage Server Tracks usage for billing/stats /var/log/cloudstack/usage/usage.log Worked a lot with: /var/log/cloudstack/management/management-server.log 2. How to Explore Logs Like a Pro Read logs live (tailing) tail -f /var/log/cloudstack/management/management-server.log Use grep to filter: tail -f management-server.log | grep -i error Or generate fresh new logs (rotated):...

A quick cheat sheet for working with Apache CloudStack using Maven. Build Profiles Profile Description developer Builds components useful during development (API, mgmt, etc). systemvm Builds SystemVM templates and related artifacts. noredist Excludes non-distributable (e.g., proprietary) code. Common Maven Commands Full Build (excluding proprietary code): mvn clean install -Pdeveloper -Dnoredist Full Build with SystemVM: mvn clean install -Pdeveloper,systemvm -Dnoredist Build Specific Module: mvn -Pdeveloper -pl <module-name> -am -pl: Only build this module -am: Also build required dependencies Example:...

In CloudStack: Isolated Networks and VPCs depend on a Virtual Router (VR) for all external (north-south) connectivity. Without a VR: VMs can still talk to each other within the same network (L2/L3 via bridge) But they cannot reach outside, and nothing external can reach them (no NAT, no DHCP, no gateway, no DNS) Why? Because in both isolated networks and VPCs, the VR acts as: Default gateway for VMs DHCP server (VMs won’t even get IPs without it) DNS forwarder NAT/firewall/VPN endpoint Router for public traffic Network Flow Diagram Public Network (203....