NS8 Update WebServer failed

LayLow · February 13, 2024, 11:40pm

As per title…

{"context":{"action":"update-module","data":{"instances":["webserver1"],"module_url":"ghcr.io/nethserver/webserver:1.0.13"},"extra":{"description":"Updating to version 1.0.13","eventId":"0ce47848-54a1-4f39-b2c5-081dbbba7bed","title":"Update Myflix.es"},"id":"4704e3e5-4f36-40f3-a7f0-af8a47c94923","parent":"","queue":"cluster/tasks","timestamp":"2024-02-13T23:38:43.313612Z","user":"admin"},"status":"aborted","progress":73,"subTasks":[{"context":{"action":"list-actions","data":{},"extra":{},"id":"8368b06c-ba7c-48d8-9f99-7cb3dcac0413","parent":"4704e3e5-4f36-40f3-a7f0-af8a47c94923"},"status":"completed","progress":100,"subTasks":[],"result":{"error":"","exit_code":0,"file":"task/module/webserver1/8368b06c-ba7c-48d8-9f99-7cb3dcac0413","output":["restore-module","clone-module","create-module","list-service-providers","list-volumes","transfer-state","update-module","configure-backup","destroy-module","get-status","destroy-vhost","import-module","run-backup","set-name","get-configuration","update-vhost","get-name","configure-module","create-vhost","list-actions","cancel-task"]}},{"context":{"action":"update-module","data":{"force":false,"module_url":"ghcr.io/nethserver/webserver:1.0.13"},"extra":{},"id":"85f9b3e7-70ee-4fe8-9bf7-253c9d0a8446","parent":"4704e3e5-4f36-40f3-a7f0-af8a47c94923"},"status":"aborted","progress":67,"subTasks":[],"result":{"error":"<7>podman-pull-missing ghcr.io/nethserver/webserver:1.0.13\n<7>podman-pull-missing docker.io/nginx:1.25.3-alpine docker.io/drakkan/sftpgo:v2.5.5-alpine\nTrying to pull docker.io/library/nginx:1.25.3-alpine...\nGetting image source signatures\nCopying blob sha256:4ea31a8fb8756a19d3e7710cb8be2b66aea4e678cc836b88c8c8daa4b564d55b\nCopying blob sha256:6c866301bd2c1af4fb61766a45a078102eedab8c7b910c0796eab6ea99b14577\nCopying blob sha256:619be1103602d98e1963557998c954c892b3872986c27365e9f651f5bc27cab8\nCopying blob sha256:a3a550dcd38681a0c4c41afd0f4977260b70ceec241359a0b35f443e865bdaff\nCopying blob sha256:d18780149b8172369a5d5194091eb33adc7fcbfd32056d7eb3cedde75725bf82\nCopying blob sha256:9e03973bc8036b5eecce7b2d9996cc16108ad4fe366bafd5e0b972c57339404e\nCopying blob sha256:e57ebb3e206791646f52f35d99488b64a61ab4a1d39b7be52b15d82bd3b12988\nCopying blob sha256:efb7d60b16cfcd8e0daecf965b6f5575423bf03ac868cbd7def5803501b311b1\nCopying config sha256:2b70e4aaac6b5370bf3a556f5e13156692351696dd5d7c5530d117aa21772748\nWriting manifest to image destination\n2b70e4aaac6b5370bf3a556f5e13156692351696dd5d7c5530d117aa21772748\n<7>extract-image ghcr.io/nethserver/webserver:1.0.13\n'.imageroot.lst' -> '.imageroot.lst~'\nExtracting container filesystem imageroot to /home/webserver1/.config\nTotal bytes read: 8704000 (8.4MiB, 171MiB/s)\nimageroot/actions/\nimageroot/actions/clone-module/\nimageroot/actions/clone-module/50traefik\nimageroot/actions/clone-module/60pull-php-image\nimageroot/actions/configure-module/\nimageroot/actions/configure-module/01_validate_web_path\nimageroot/actions/configure-module/02_validate_sftp_port\nimageroot/actions/configure-module/05Firewall\nimageroot/actions/configure-module/10settings\nimageroot/actions/configure-module/20traefik\nimageroot/actions/configure-module/50start_services\nimageroot/actions/configure-module/60sftpgo_create_secret\nimageroot/actions/configure-module/validate-input.json\nimageroot/actions/create-module/\nimageroot/actions/create-module/10configure\nimageroot/actions/create-module/50start_services\nimageroot/actions/create-vhost/\nimageroot/actions/create-vhost/01_validate_domain\nimageroot/actions/create-vhost/10base\nimageroot/actions/create-vhost/30SystemdServices\nimageroot/actions/create-vhost/40traefik\nimageroot/actions/create-vhost/validate-input.json\nimageroot/actions/destroy-module/\nimageroot/actions/destroy-module/20destroy\nimageroot/actions/destroy-module/90Firewall\nimageroot/actions/destroy-vhost/\nimageroot/actions/destroy-vhost/10base\nimageroot/actions/destroy-vhost/30restart_services\nimageroot/actions/destroy-vhost/40traefik\nimageroot/actions/destroy-vhost/validate-input.json\nimageroot/actions/get-configuration/\nimageroot/actions/get-configuration/20read\nimageroot/actions/get-configuration/validate-output.json\nimageroot/actions/restore-module/\nimageroot/actions/restore-module/06copyenv\nimageroot/actions/restore-module/50traefik\nimageroot/actions/restore-module/60systemd\nimageroot/actions/update-vhost/\nimageroot/actions/update-vhost/01_validate_domain\nimageroot/actions/update-vhost/10base\nimageroot/actions/update-vhost/30SystemdServices\nimageroot/actions/update-vhost/40traefik\nimageroot/actions/update-vhost/50MovePhpfpmCustom\nimageroot/actions/update-vhost/validate-input.json\nimageroot/bin/\nimageroot/bin/download-php-fpm\nimageroot/bin/expand-vhosts\nimageroot/etc/\nimageroot/etc/state-include.conf\nimageroot/state/\nimageroot/state/conf.d/\nimageroot/state/conf.d/.gitkeep\nimageroot/state/databases/\nimageroot/state/databases/NextFpmPort\nimageroot/state/databases/vhosts/\nimageroot/state/databases/vhosts/.gitkeep\nimageroot/state/sftpgo.conf.d/\nimageroot/state/sftpgo.conf.d/admin.json\nimageroot/systemd/\nimageroot/systemd/user/\nimageroot/systemd/user/nginx.service\nimageroot/systemd/user/phpfpm@.service\nimageroot/systemd/user/sftpgo.service\nimageroot/systemd/user/webserver.service\nimageroot/templates/\nimageroot/templates/php-fpm-pool.conf\nimageroot/templates/vhost-nginx.conf\nimageroot/update-module.d/\nimageroot/update-module.d/20restart\nchown: changing ownership of './state/conf.d/dyn-9001.custom': Operation not permitted\n5583284b91a02fd6484fe098a1225de804edb7ef1bcb2d5bad61ac8a9133829c\nTraceback (most recent call last):\n  File \"/usr/local/agent/actions/update-module/05pullimages\", line 85, in <module>\n    ).check_returncode()\n      ^^^^^^^^^^^^^^^^^^\n  File \"/usr/lib64/python3.11/subprocess.py\", line 502, in check_returncode\n    raise CalledProcessError(self.returncode, self.args, self.stdout,\nsubprocess.CalledProcessError: Command '('extract-image', 'ghcr.io/nethserver/webserver:1.0.13')' returned non-zero exit status 1.\n","exit_code":1,"file":"task/module/webserver1/85f9b3e7-70ee-4fe8-9bf7-253c9d0a8446","output":""}}],"validated":true,"result":{"error":"<7>podman-pull-missing ghcr.io/nethserver/webserver:1.0.13\n<3>Module instance \"webserver1\" update failed with code 1\nAssertion failed\n  File \"/var/lib/nethserver/cluster/actions/update-module/50update\", line 141, in <module>\n    agent.assert_exp(errors == 0)\n","exit_code":2,"file":"task/cluster/4704e3e5-4f36-40f3-a7f0-af8a47c94923","output":""}}

LayLow · February 14, 2024, 12:08pm

<7>podman-pull-missing Package webserver · GitHub
<3>Module instance “webserver1” update failed with code 1
Assertion failed
File “/var/lib/nethserver/cluster/actions/update-module/50update”, line 141, in
agent.assert_exp(errors == 0)

@stephdl

stephdl · February 14, 2024, 1:29pm

Not guilty because on holidays but the changes pushed by @davidep is just translation changes so harmless

Repository down or no connectivity to your server ?

stephdl · February 14, 2024, 2:11pm

Will try to reproduce on monday i f I can come back from spain…#farmeranger

LayLow · February 15, 2024, 12:17pm

This error came up in the logs:

chown: changing ownership of ‘./state/conf.d/dyn-9001.custom’: Operation not permitted

It appears that this file is owned by root:root and not webserver1:webserver1, so I changed the ownership to webserver1.

Now the upgrade works like a charm but I have NO idea why that file was owned by root. I know I did not touch it, I swear!!

HTH

stephdl · February 15, 2024, 6:21pm

Thanks a lot to take time for inspecting the issue

stephdl · February 19, 2024, 8:20am

well sorry but the file is not created automatically, so you manually did it and did not chown the file permission, but I think the documentation stated to not did it, so you are not fully guilty

github.com

NethServer/ns8-webserver/blob/main/imageroot/bin/expand-vhosts

#!/usr/bin/env python3

#
# Copyright (C) 2022 Nethesis S.r.l.
# http://www.nethesis.it - nethserver@nethesis.it
#
# This script is part of NethServer.
#
# NethServer is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License,
# or any later version.
#
# NethServer is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with NethServer.  If not, see COPYING.

This file has been truncated. show original

hucky · February 19, 2024, 8:42am

is the webserver still not ready? if i try to make it ready for virtual hosts i got this:
<7>dump_env() is deprecated and implemented as a no-op <7>systemctl --user restart webserver.service <7>systemctl --user enable sftpgo.service <7>systemctl --user restart sftpgo.service Job for sftpgo.service failed because the control process exited with error code. See "systemctl --user status sftpgo.service" and "journalctl --user -xeu sftpgo.service" for details. Traceback (most recent call last): File "/home/webserver1/.config/actions/configure-module/50start_services", line 14, in <module> agent.run_helper("systemctl", "--user", "restart", "sftpgo.service").check_returncode() File "/usr/lib64/python3.11/subprocess.py", line 502, in check_returncode raise CalledProcessError(self.returncode, self.args, self.stdout, subprocess.CalledProcessError: Command '('systemctl', '--user', 'restart', 'sftpgo.service')' returned non-zero exit status 1.
Error, maybe i do somthing wrong? I installed it from the softwarecenter and give it a name like /ns8 but it ended always with this error above. It stopps at 60%

stephdl · February 19, 2024, 9:53am

stephdl · February 19, 2024, 9:54am

check what is wrong in the log page, you can filter by the module_id, probably webserver1

We have no clue why the service failed to start

LayLow · February 20, 2024, 7:26am

If so, than now my question is WHY I would have done this, for what reason?

stephdl · February 20, 2024, 7:29am

Add custom nginx directive for wordpress for example like I did for the howto on gow to install wordpress ns8 webserver

LayLow · February 20, 2024, 7:37am

Ah the unsecure mixed content (http/https) I guess

LayLow · February 20, 2024, 7:44am

Is this bound to webserver1 only? (I saw the change from web server* to webserver1)

GG_jr · February 20, 2024, 10:13am

I don’t know if the problem I am reporting is related to the one raised here, but it is related to the Webserver Module.
Is the status of the two services correct?

nginx: active but disabled
phpfpm: inactive but enabled

TIA,
Gabriel

stephdl · February 20, 2024, 12:04pm

You can have plenty of webserver webserver1 is the first installed