Marketplace deployment in error : Client RHUI Certificate has expired

[ssirois]

How to reproduce

1. From Azure Marketplace : create a Neo4j Community Edition (Neo4j Community Plan) deployment.

2. Observe that there is an error while running the installNeo4j CustomScript.

{
  "code": "VMExtensionProvisioningError",
  "message": "VM has reported a failure when processing extension 'installNeo4j' (publisher 'Microsoft.Azure.Extensions' and type 'CustomScript'). Error message: 'Enable failed: failed to execute command: command terminated with exit status=1 […] Errors during downloading metadata for repository 'rhel-9-for-x86_64-supplementary-rhui-rpms':\n  - Status code: 400 for https://rhui4-1.microsoft.com/pulp/repos/content/dist/rhel9/rhui/9/x86_64/supplementary/os/repodata/repomd.xml (IP: 52.142.4.99)\nError: Failed to download metadata for repo 'rhel-9-for-x86_64-supplementary-rhui-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried\n'. More information on troubleshooting is available at https://aka.ms/VMExtensionCSELinuxTroubleshoot. "
}

3. The error is also observable when manually executing a yum command on the deployed Virtual Machine:

$ sudo yum update
Red Hat Enterprise Linux 9 for x86_64 - Supplementary (RPMs) from RHUI                                                366  B/s | 215  B     00:00
Errors during downloading metadata for repository 'rhel-9-for-x86_64-supplementary-rhui-rpms':
  - Status code: 400 for https://rhui4-1.microsoft.com/pulp/repos/content/dist/rhel9/rhui/9/x86_64/supplementary/os/repodata/repomd.xml (IP: 52.142.4.99)
Error: Failed to download metadata for repo 'rhel-9-for-x86_64-supplementary-rhui-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

Troubleshoot

Following instructions provided by Microsoft, running the validation script on the created Virtual Machine provided me with the information that the RHUI Certificat were expired :

$ curl -sL https://raw.githubusercontent.com/Azure/azure-support-scripts/refs/heads/master/Linux_scripts/rhui-check/rhui-check.py -o ./rhui-check.py
$ sudo python3 ./rhui-check.py
2024-11-28 16:34:19,927 - __main__ - CRITICAL - Client RHUI Certificate has expired, please update the RHUI rpm.
2024-11-28 16:34:19,927 - __main__ - CRITICAL - Refer to: https://learn.microsoft.com/troubleshoot/azure/virtual-machines/troubleshoot-linux-rhui-certificate-issues#cause-1-rhui-client-certificate-is-expired

Temporary Fix

Manually update the RHUI client package as per Microsoft's documentation :

$ sudo yum update -y --disablerepo='*' --enablerepo='*microsoft-azure*'

Fixes the problem and the installNeo4j CustomScript doesn't fail anymore when executing yum commands.

Permanent Fix

I guess that re-building the VM image following this project's documentation and making sure that the RHUI client package is up to date in the built image would properly fix this issue for the Marketplace offer.

Please, let me know if you need any more information.