Azure Local 2503 deployment fails with MocArb exception

Question

Azure Local 2503 deployment fails with MocArb exception

Hsu, Alberto (Windows Ecosystem Engineering) 20

Azure Local 2503 deployment fails at "Clean up after OS update" with:

Type 'DeployPreRequisites' of Role 'MocArb' raised an exception: ERROR: An error occurred. Pip failed with status code 1. Use --debug for more information. at CheckAndInstall-CliExtensions,

When running the az CLI command with --debug parameter, the following is returned:

PS C:> az extension add --name arcappliance --debug

cli.knack.cli: Command arguments: ['extension', 'add', '--name', 'arcappliance', '--debug']

cli.knack.cli: init debug log:

Enable color in terminal.

Enable VT mode.

cli.knack.cli: Event: Cli.PreExecute []

cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x01582A28>, <function OutputProducer.on_global_arguments at 0x017BD5C8>, <function CLIQuery.on_global_arguments at 0x017CA0C8>]

cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []

cli.azure.cli.core: Modules found from index for 'extension': ['azure.cli.command_modules.extension']

cli.azure.cli.core: Loading command modules:

cli.azure.cli.core: Name Load Time Groups Commands

cli.azure.cli.core: extension 0.007 1 7

cli.azure.cli.core: Total (1) 0.007 1 7

cli.azure.cli.core: Loaded 1 groups, 7 commands.

cli.azure.cli.core: Found a match in the command table.

cli.azure.cli.core: Raw command : extension add

cli.azure.cli.core: Command table: extension add

cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x03758398>]

cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\Administrator.azure\commands\2025-05-04.23-05-52.extension_add.3112.log'.

az_command_data_logger: command args: extension add --name {} --debug

cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x0377F078>]

cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []

cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x0377F0C8>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x037A9118>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x037A9168>]

cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []

cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []

cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x017BD618>, <function CLIQuery.handle_query_parameter at 0x017CA118>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x037A90C8>]

urllib3.connectionpool: Starting new HTTPS connection (1): aka.ms:443

urllib3.connectionpool: https://aka.ms:443 "GET /azure-cli-extension-index-v1 HTTP/1.1" 301 0

urllib3.connectionpool: Starting new HTTPS connection (1): azcliextensionsync.blob.core.windows.net:443

urllib3.connectionpool: https://azcliextensionsync.blob.core.windows.net:443 "GET /index1/index.json HTTP/1.1" 200 5189175

cli.azure.cli.core.extension._resolve: No preview versions need to be tried.

cli.azure.cli.core.extension._resolve: Candidates ['arcappliance-1.0.0-py2.py3-none-any.whl', 'arcappliance-1.0.1-py2.py3-none-any.whl', 'arcappliance-1.0.2-py2.py3-none-any.whl', 'arcappliance-1.0.3-py2.py3-none-any.whl', 'arcappliance-1.1.0-py2.py3-none-any.whl', 'arcappliance-1.1.1-py2.py3-none-any.whl', 'arcappliance-1.2.0-py2.py3-none-any.whl', 'arcappliance-1.3.0-py2.py3-none-any.whl', 'arcappliance-1.3.1-py2.py3-none-any.whl', 'arcappliance-1.4.0-py2.py3-none-any.whl', 'arcappliance-1.4.1-py2.py3-none-any.whl']

cli.azure.cli.core.extension._resolve: Skipping 'arcappliance-1.4.1-py2.py3-none-any.whl' as not compatible with this version of the CLI. Extension compatibility result: is_compatible=False cli_core_version=2.67.0 ext_version=1.4.1 min_core_required=2.70.0 max_core_required=None min_ext_required=None

cli.azure.cli.core.extension._resolve: Candidates ['arcappliance-1.0.0-py2.py3-none-any.whl', 'arcappliance-1.0.1-py2.py3-none-any.whl', 'arcappliance-1.0.2-py2.py3-none-any.whl', 'arcappliance-1.0.3-py2.py3-none-any.whl', 'arcappliance-1.1.0-py2.py3-none-any.whl', 'arcappliance-1.1.1-py2.py3-none-any.whl', 'arcappliance-1.2.0-py2.py3-none-any.whl', 'arcappliance-1.3.0-py2.py3-none-any.whl', 'arcappliance-1.3.1-py2.py3-none-any.whl', 'arcappliance-1.4.0-py2.py3-none-any.whl']

cli.azure.cli.core.extension._resolve: Chosen {'downloadUrl': 'https://arcplatformcliextprod.z13.web.core.windows.net/arcappliance-1.4.0-py2.py3-none-any.whl', 'filename': 'arcappliance-1.4.0-py2.py3-none-any.whl', 'metadata': {'azext.minCliCoreVersion': '2.51.0', 'classifiers': ['Development Status :: 4 - Beta', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'Programming Language :: Python', 'Programming Language :: Python :: 3', 'Programming Language :: Python :: 3.6', 'Programming Language :: Python :: 3.7', 'Programming Language :: Python :: 3.8', 'License :: OSI Approved :: MIT License'], 'extensions': {'python.details': {'contacts': [{'email': 'appliance@microsoft.com', 'name': 'Microsoft Corporation', 'role': 'author'}], 'document_names': {'description': 'DESCRIPTION.rst'}, 'project_urls': {'Home': 'https://msazure.visualstudio.com/AzureArcPlatform/_git/arcappliance-cli-extensions'}}}, 'extras': [], 'generator': 'bdist_wheel (0.30.0)', 'license': 'MIT', 'metadata_version': '2.0', 'name': 'arcappliance', 'run_requires': [{'requires': ['jsonschema (==4.17.3)', 'kubernetes (==28.1.0)']}], 'summary': 'Microsoft Azure Command-Line Tools Arcappliance Extension', 'version': '1.4.0'}, 'sha256Digest': '9dad1079b0938c3163b75d1ecdaa9cb1026ee05f750cee881e93e0022a18544f'}

cli.azure.cli.core.extension.operations: Extension source is url? True

cli.azure.cli.core.extension.operations: Downloading https://arcplatformcliextprod.z13.web.core.windows.net/arcappliance-1.4.0-py2.py3-none-any.whl to C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl

urllib3.connectionpool: Starting new HTTPS connection (1): arcplatformcliextprod.z13.web.core.windows.net:443

urllib3.connectionpool: https://arcplatformcliextprod.z13.web.core.windows.net:443 "GET /arcappliance-1.4.0-py2.py3-none-any.whl HTTP/1.1" 200 243275007

cli.azure.cli.core.extension.operations: Downloaded to C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl

cli.azure.cli.core.extension.operations: Validating the extension C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl

cli.azure.cli.core.extension.operations: Checksum of C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl is OK

cli.azure.cli.core.extension.operations: Validation successful on C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl

cli.azure.cli.core.extension.operations: Executing pip with args: ['install', '--target', 'C:\CloudContent\AzCliExtensions\arcappliance', 'C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl']

cli.azure.cli.core.extension.operations: Running: ['C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe', '-m', 'pip', 'install', '--target', 'C:\CloudContent\AzCliExtensions\arcappliance', 'C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl', '-vv', '--disable-pip-version-check', '--no-cache-dir']

cli.azure.cli.core.extension.operations: Using pip 24.3.1 from C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip (python 3.12)

Non-user install due to --prefix or --target option

Created temporary directory: C:\Users\Administrator\AppData\Local\Temp\pip-target-iizx5ipt

Created temporary directory: C:\Users\Administrator\AppData\Local\Temp\pip-build-tracker-wpgbry47

Initialized build tracking at C:\Users\Administrator\AppData\Local\Temp\pip-build-tracker-wpgbry47

Created build tracker: C:\Users\Administrator\AppData\Local\Temp\pip-build-tracker-wpgbry47

Entered build tracker: C:\Users\Administrator\AppData\Local\Temp\pip-build-tracker-wpgbry47

Created temporary directory: C:\Users\Administrator\AppData\Local\Temp\pip-install-zd2ixx49

Created temporary directory: C:\Users\Administrator\AppData\Local\Temp\pip-ephem-wheel-cache-l61ozz0m

Processing c:\users\admini~1\appdata\local\temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl

1 location(s) to search for versions of jsonschema:

https://pypi.org/simple/jsonschema/

Fetching project page and analyzing links: https://pypi.org/simple/jsonschema/

Getting page https://pypi.org/simple/jsonschema/

Found index url https://pypi.org/simple/

Starting new HTTPS connection (1): pypi.org:443

Incremented Retry for (url='/simple/jsonschema/'): Retry(total=4, connect=None, read=None, redirect=None, status=None)

WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))': /simple/jsonschema/

Starting new HTTPS connection (2): pypi.org:443

Incremented Retry for (url='/simple/jsonschema/'): Retry(total=3, connect=None, read=None, redirect=None, status=None)

WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))': /simple/jsonschema/

Starting new HTTPS connection (3): pypi.org:443

Incremented Retry for (url='/simple/jsonschema/'): Retry(total=2, connect=None, read=None, redirect=None, status=None)

WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))': /simple/jsonschema/

Starting new HTTPS connection (4): pypi.org:443

Incremented Retry for (url='/simple/jsonschema/'): Retry(total=1, connect=None, read=None, redirect=None, status=None)

WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))': /simple/jsonschema/

Starting new HTTPS connection (5): pypi.org:443

Incremented Retry for (url='/simple/jsonschema/'): Retry(total=0, connect=None, read=None, redirect=None, status=None)

WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))': /simple/jsonschema/

Starting new HTTPS connection (6): pypi.org:443

Could not fetch URL https://pypi.org/simple/jsonschema/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.org', port=443): Max retries exceeded with url: /simple/jsonschema/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)'))) - skipping

Skipping link: not a file: https://pypi.org/simple/jsonschema/

Given no hashes to check 0 links for project 'jsonschema': discarding no candidates

INFO: pip is looking at multiple versions of arcappliance to determine which version is compatible with other requirements. This could take a while.

Will try a different candidate, due to conflict:

arcappliance 1.4.0 depends on jsonschema==4.17.3

ERROR: Could not find a version that satisfies the requirement jsonschema==4.17.3 (from arcappliance) (from versions: none)

ERROR: No matching distribution found for jsonschema==4.17.3

Exception information:

Traceback (most recent call last):

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\resolution\resolvelib\resolver.py", line 95, in resolve

result = self._result = resolver.resolve(

                        ^^^^^^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_vendor\resolvelib\resolvers.py", line 546, in resolve

state = resolution.resolve(requirements, max_rounds=max_rounds)

        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_vendor\resolvelib\resolvers.py", line 439, in resolve

raise ResolutionImpossible(self.state.backtrack_causes)

pip._vendor.resolvelib.resolvers.ResolutionImpossible: [RequirementInformation(requirement=SpecifierRequirement('jsonschema==4.17.3'), parent=LinkCandidate('file:///C:/Users/ADMINI~1/AppData/Local/Temp/tmp45zuc6lw/arcappliance-1.4.0-py2.py3-none-any.whl'))]

The above exception was the direct cause of the following exception:

Traceback (most recent call last):

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\cli\base_command.py", line 105, in _run_wrapper

status = _inner_run()

         ^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\cli\base_command.py", line 96, in _inner_run

return self.run(options, args)

       ^^^^^^^^^^^^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\cli\req_command.py", line 67, in wrapper

return func(self, options, args)

       ^^^^^^^^^^^^^^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\commands\install.py", line 379, in run

requirement_set = resolver.resolve(

                  ^^^^^^^^^^^^^^^^^

File "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\pip_internal\resolution\resolvelib\resolver.py", line 104, in resolve

raise error from e

pip._internal.exceptions.DistributionNotFound: No matching distribution found for jsonschema==4.17.3

Removed build tracker: 'C:\Users\Administrator\AppData\Local\Temp\pip-build-tracker-wpgbry47'

cli.azure.cli.core.extension.operations: Command '['C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe', '-m', 'pip', 'install', '--target', 'C:\CloudContent\AzCliExtensions\arcappliance', 'C:\Users\ADMINI~1\AppData\Local\Temp\tmp45zuc6lw\arcappliance-1.4.0-py2.py3-none-any.whl', '-vv', '--disable-pip-version-check', '--no-cache-dir']' returned non-zero exit status 1.

cli.azure.cli.core.extension.operations: Pip failed so deleting anything we might have installed at C:\CloudContent\AzCliExtensions\arcappliance

cli.azure.cli.core.azclierror: Traceback (most recent call last):

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 666, in execute

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 733, in _run_jobs_serially

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 703, in _run_job

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 336, in call

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 121, in handler

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/extension/custom.py", line 16, in add_extension_cmd

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/extension/operations.py", line 343, in add_extension

File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/extension/operations.py", line 172, in _add_whl_ext

knack.util.CLIError: An error occurred. Pip failed with status code 1. Use --debug for more information.

cli.azure.cli.core.azclierror: An error occurred. Pip failed with status code 1. Use --debug for more information.

az_command_data_logger: An error occurred. Pip failed with status code 1. Use --debug for more information.

cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x037584D8>]

az_command_data_logger: exit code: 1

cli.main: Command ran in 195.121 seconds (init: 0.596, invoke: 194.525)

telemetry.main: Begin splitting cli events and extra events, total events: 1

telemetry.client: Accumulated 0 events. Flush the clients.

telemetry.main: Finish splitting cli events and extra events, cli events: 1

telemetry.save: Save telemetry record of length 3713 in cache file under C:\Users\Administrator.azure\telemetry\20250504230907109

telemetry.main: Begin creating telemetry upload process.

telemetry.process: Creating upload process: "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry_init_.pyc C:\Users\Administrator.azure C:\Users\Administrator.azure\telemetry\20250504230907109"

telemetry.process: Return from creating process 9064

telemetry.main: Finish creating telemetry upload process.

Accepted answer

0 additional answers

Your answer

Answer 1

Hello Hsu, Alberto (Windows Ecosystem Engineering),

Welcome to the Microsoft Q&A and thank you for posting your questions here.

I understand that your Azure Local 2503 deployment fails with MocArb exception.

The root cause is a dependency conflict between arcappliance and Python 3.12. You can use a combination of SSL fixes, manual dependency installation, and Azure CLI upgrades to resolve the issue as listed below. If all else fails, contact Microsoft Support with the debug logs.

The SSL error (CERTIFICATE_VERIFY_FAILED) suggests missing or outdated root certificates. Fix this by:
- Download the latest CA bundle from https://curl.se/docs/caextract.html.
- Set the REQUESTS_CA_BUNDLE environment variable to point to the certificate file using PowerShell: $env:REQUESTS_CA_BUNDLE = "C:\path\to\cacert.pem"
- Bypass SSL Verification (Temporary Fix) using PowerShell: pip config set global.trusted-host "pypi.org files.pythonhosted.org"
The error shows jsonschema==4.17.3 isn’t compatible with Python 3.12. Install a newer version explicitly using PowerShell: pip install jsonschema>=4.17.3 --upgrade
- If this fails, force-install the specific version with SSL verification disabled: pip install jsonschema==4.17.3 --trusted-host pypi.org --trusted-host files.pythonhosted.org
The arcappliance extension v1.4.1 requires Azure CLI ≥2.70.0. Upgrade the CLI, you can use PowerShell: winget upgrade -e --id Microsoft.AzureCLI
Force-install the extension using --allow-preview or specify a compatible version using PowerShell: az extension add --name arcappliance --allow-preview --debug

Then isolate dependencies to avoid conflicts:

   python -m venv .venv
   .\.venv\Scripts\activate
   pip install azure-cli
   az extension add --name arcappliance

I hope this is helpful! Do not hesitate to let me know if you have any other questions or clarifications.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful.

Hsu, Alberto (Windows Ecosystem Engineering) 20 Reputation points

2025-05-06T08:43:47.53+00:00

Thank you for your help, this solved my issue.

Share via

Azure Local 2503 deployment fails with MocArb exception

0 additional answers

Your answer