Live Migration Fails With Error "Failed to connect to remote libvirt URI

Problem

Live migration of an instance fails with the following error observed in the /var/log/pf9/ostackhost.log on the source host.

ERROR nova.virt.libvirt.driver [-] [instance: 4c36cc41-3b5f-47f1-952b-44e8485c811e] Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+tls://10.85.150.24/system?no_verify=1&pkipath=/etc/pf9/certs/libvirt: Unable to read TLS confirmation: Input/output error: libvirt.libvirtError: operation failed: Failed to connect to remote libvirt URI qemu+tls://10.85.150.24/system?no_verify=1&pkipath=/etc/pf9/certs/libvirt: Unable to read TLS confirmation: Input/output error

Environment

• Platform9 Managed OpenStack - All versions
• Nova
• Libvirt

Cause

The libvirt service is not able to setup a TLS connection with the destination host because the certificates were rotated recently. This is an upstream limitation and has been fixed in libvirt v6.2.0.

Resolution

1. Restart the libvirtd service on the destination host where the instance was being migrated.

# sudo service libvirtd restart

Additional Information

Starting v6.2.0, the libvirtd service restart will not be needed as per the libvirtrelease notes.