NS7 NS8 migration disaster

[ns8@c1lb ~]$ redis-cli --raw keys 'node/*/flags' | xargs -t -r -l1 -- redis-cli smembers
Traceback (most recent call last):
  File "/usr/local/bin/runagent", line 71, in <module>
    read_env(f"{home_dir}/.config/state/agent.env")
  File "/usr/local/bin/runagent", line 43, in read_env
    env = agent.read_envfile(file_path)
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/agent/pypkg/agent/__init__.py", line 91, in read_envfile
    fo = open(file_path, 'r')
         ^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/home/ns8/.config/state/agent.env'
1 Like

You need to run the commands as root

1 Like

How silly of me, it was obvious!

The banner seems to have disappeared, but the update is failing.

Actually, even when I try to install Crowdsec, I get an error message.

{"context":{"action":"update-modules","data":{"instances":["nextcloud1"]},"extra":{"description":"Aggiornamento di 1 istanza","eventId":"12b04867-187e-4e65-b614-9a461cf9708b","title":"Aggiornare le istanze di Nextcloud"},"id":"18065cbc-3760-47b9-a95b-8c84c784a95b","parent":"","queue":"cluster/tasks","timestamp":"2025-07-29T20:25:15.046796042Z","user":"admin"},"status":"aborted","progress":30,"subTasks":[{"context":{"action":"update-module","data":{"instances":["nextcloud1"],"module_url":"ghcr.io/nethserver/nextcloud:1.2.1"},"extra":{},"id":"07623330-96d0-407f-88d1-fdca7a930bf6","parent":"18065cbc-3760-47b9-a95b-8c84c784a95b"},"status":"aborted","progress":30,"subTasks":[{"context":{"action":"list-actions","data":{},"extra":{},"id":"106c2a7f-3d2c-4f81-b2ad-e7fc68ed8582","parent":"07623330-96d0-407f-88d1-fdca7a930bf6"},"status":"completed","progress":100,"subTasks":[],"result":{"error":"","exit_code":0,"file":"task/module/nextcloud1/106c2a7f-3d2c-4f81-b2ad-e7fc68ed8582","output":["list-backup-repositories","transfer-state","get-facts","configure-backup","get-name","get-status","run-backup","update-module","clone-module","destroy-module","import-module","list-volumes","restore-module","configure-module","get-configuration","list-service-providers","set-name","create-module","list-actions","cancel-task"]}}],"result":{"error":"<7>podman-pull-missing ghcr.io/nethserver/nextcloud:1.2.1\nTrying to pull ghcr.io/nethserver/nextcloud:1.2.1...\nError: initializing source docker://ghcr.io/nethserver/nextcloud:1.2.1: pinging container registry ghcr.io: Get \"https://ghcr.io/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority\nTraceback (most recent call last):\n  File \"/usr/local/agent/bin/podman-pull-missing\", line 35, in <module>\n    subprocess.run(['podman', 'pull', image_url]).check_returncode()\n  File \"/usr/lib64/python3.11/subprocess.py\", line 502, in check_returncode\n    raise CalledProcessError(self.returncode, self.args, self.stdout,\nsubprocess.CalledProcessError: Command '['podman', 'pull', 'ghcr.io/nethserver/nextcloud:1.2.1']' returned non-zero exit status 125.\nTraceback (most recent call last):\n  File \"/var/lib/nethserver/cluster/actions/update-module/50update\", line 50, in <module>\n    ).check_returncode()\n      ^^^^^^^^^^^^^^^^^^\n  File \"/usr/lib64/python3.11/subprocess.py\", line 502, in check_returncode\n    raise CalledProcessError(self.returncode, self.args, self.stdout,\nsubprocess.CalledProcessError: Command '('podman-pull-missing', 'ghcr.io/nethserver/nextcloud:1.2.1')' returned non-zero exit status 1.\n","exit_code":1,"file":"task/cluster/07623330-96d0-407f-88d1-fdca7a930bf6","output":""}}],"validated":true,"result":{"error":"<5>Ignoring update of nextcloud1 with ghcr.io/nethserver/nextcloud:1.5.0: org.nethserver.min-from 1.4.3\n<5>Ignoring update of nextcloud1 with ghcr.io/nethserver/nextcloud:1.4.3: org.nethserver.min-from 1.3.0\n<5>Ignoring update of nextcloud1 with ghcr.io/nethserver/nextcloud:1.3.0: org.nethserver.min-from 1.2.1\n<3>Failed update-module for instance nextcloud1 with ghcr.io/nethserver/nextcloud:1.2.1\n","exit_code":2,"file":"task/cluster/18065cbc-3760-47b9-a95b-8c84c784a95b","output":""}}

The NS8 thinks that ghcr.io has an invalid cert but that’s not true.

image

Is there a firewall blocking ghcr.io? See Get https://ghcr.io/v2/: x509: certificate signed by unknown authority · community · Discussion #26917 · GitHub

1 Like

It was my firewall blocking that type of SSL connection. Thanks, my friend!

1 Like