Missing extensions directory after upgrade 4.21.0

[levindecaro]

problem

When upgrade ACS from 4.20.1 to 4.21.0, management server fail to restart and compliant a directory is missing.

2025-09-05 23:43:14,355 ERROR [o.a.c.h.e.p.ExternalPathPayloadProvisioner] (main:[]) (logid:) Unable to create extensions data directory [/var/lib/cloudstack/management/extensions] java.nio.file.AccessDeniedException: /var/lib/cloudstack

after manually create that directory, management will able to start

mkdir -p /var/lib/cloudstack/management/extensions 
chown -R cloud:cloud /var/lib/cloudstack

versions

ACS: 4.21.0
OS: OL9 x86_64
hypervisors: KVM
storage: NFS(SharedMountPoint)
network: vxlan

The steps to reproduce the bug

1. Have 4.20.1 installed
2. yum upgrade cloudstack-management
3. systemctl start cloudstack-management
4. examine /var/log/cloudstack/management/management-server.log

What to do about it?

No response

[kiranchavala]

@levindecaro followed the same steps

Not able to reproduce the issue with Ol8 and Ol9 , the upgrade was successful

The only difference was the network isolation was VLAN

2025-09-08 05:41:52,335 INFO  [o.a.c.h.e.p.ExternalPathPayloadProvisioner] (main:[]) (logid:) Extensions directory path: /usr/share/cloudstack-management/extensions
2025-09-08 05:41:52,339 INFO  [o.a.c.h.e.p.ExternalPathPayloadProvisioner] (main:[]) (logid:) Extensions data directory path: /var/lib/cloudstack/management/extensions

[levindecaro]

@kiranchavala thanks.

i checked with my few backup snapshot, the /var/lib/cloudstack is never exist before 4.20.1, would you mind to double check "cloud" user home directory is /var/cloudstack or /var/lib/cloudstack. I think this directory had been missing somewhere from rpm since a long time.

[rastopato]

Hi, I have multiple environments and I run into exactly the same problem on majority of them during upgrade to 4.21 - let's say on 4 from 5.
Environments was successfully updated multiple times from 4.19.x to 4.20.1. During update to 4.21, this error occurred and website shows only: HTTP ERROR 503 Service Unavailable.
I tried to change sudoers file to cloud ALL=(ALL) NOPASSWD:ALL, but nothing changed.
After creating directories manually and grant permissions, server started normally.

mkdir -p /var/lib/cloudstack/management/extensions
chown -R cloud:cloud /var/lib/cloudstack

There was no /var/lib/cloudstack directory before.

I can share cloudstack-management.log

[shwstppr]

@levindecaro @rastopato I created PR #11723, which I guess should fix this issue