Project

General

Profile

Actions

action #123421

closed

[alert] dehydrated is failing on monitor.qa.suse.de

Added by mkittler almost 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
-
Target version:
Start date:
2023-01-20
Due date:
% Done:

0%

Estimated time:

Description

Observation

martchus@openqa-monitor:~> sudo systemctl status dehydrated.service
× dehydrated.service - Certificate Update Runner for Dehydrated
     Loaded: loaded (/usr/lib/systemd/system/dehydrated.service; static)
     Active: failed (Result: exit-code) since Fri 2023-01-20 00:18:51 CET; 10h ago
TriggeredBy: ● dehydrated.timer
    Process: 29469 ExecStart=/usr/bin/dehydrated --cron (code=exited, status=1/FAILURE)
   Main PID: 29469 (code=exited, status=1/FAILURE)

Jan 20 00:18:34 openqa-monitor systemd[1]: Starting Certificate Update Runner for Dehydrated...
Jan 20 00:18:34 openqa-monitor dehydrated[29469]: # INFO: Using main config file /etc/dehydrated/config
Jan 20 00:18:34 openqa-monitor dehydrated[29469]: # INFO: Using additional config file /etc/dehydrated/config.d/suse-ca.sh
Jan 20 00:18:34 openqa-monitor curl[29485]: looking for plugins in '/usr/lib64/sasl2
Jan 20 00:18:34 openqa-monitor dehydrated[29469]: # INFO: Running /usr/bin/dehydrated as dehydrated/dehydrated
Jan 20 00:18:34 openqa-monitor sudo[29469]:     root : PWD=/ ; USER=dehydrated ; GROUP=dehydrated ; COMMAND=/usr/bin/dehydrated --cron
Jan 20 00:18:51 openqa-monitor systemd[1]: dehydrated.service: Main process exited, code=exited, status=1/FAILURE
Jan 20 00:18:51 openqa-monitor systemd[1]: dehydrated.service: Failed with result 'exit-code'.
Jan 20 00:18:51 openqa-monitor systemd[1]: Failed to start Certificate Update Runner for Dehydrated.

Further notes

  • For now I reset the unit state so the Failed systemd services alert isn't firing again
  • Restarting the service didn't help
Actions #1

Updated by nicksinger almost 2 years ago

  • Status changed from New to In Progress
Actions #3

Updated by nicksinger almost 2 years ago

  • Status changed from In Progress to Blocked
  • Assignee changed from mkittler to nicksinger

curl error code 92 seems to be related to http/2 issues. I tried with an explicit http/1.1 request by adding CURL_OPTS="--http1.1" in /etc/dehydrated/config but then get another issue so we have to assume the service at "ca-internal.suse.de" is broken. I therefore created https://sd.suse.com/servicedesk/customer/portal/1/SD-110017 with all relevant details.

Actions #4

Updated by nicksinger almost 2 years ago

  • Status changed from Blocked to Resolved

despite the first failed attempt from infra to fix the issue I checked again and realized that dehydrated operates as expected again. So we can consider this resolved.

Actions

Also available in: Atom PDF