This message was deleted.
# puppet
s
This message was deleted.
e
"Please see the server logs for details" What do they say?
a
Copy code
2023-05-17T17:12:06.494Z INFO  [main] [o.e.j.u.log] Logging initialized @3616ms to org.eclipse.jetty.util.log.Slf4jLog
2023-05-17T17:12:06.558Z INFO  [main] [p.t.s.w.jetty9-core] Removing buggy security provider SunPKCS11 version 17
2023-05-17T17:12:07.083Z INFO  [async-dispatch-2] [p.t.s.s.scheduler-service] Initializing Scheduler Service
2023-05-17T17:12:07.110Z INFO  [async-dispatch-2] [o.q.i.StdSchedulerFactory] Using default implementation for ThreadExecutor
2023-05-17T17:12:07.119Z INFO  [async-dispatch-2] [o.q.c.SchedulerSignalerImpl] Initialized Scheduler Signaller of type: class org.quartz.core.SchedulerSignalerImpl
2023-05-17T17:12:07.119Z INFO  [async-dispatch-2] [o.q.c.QuartzScheduler] Quartz Scheduler v.2.3.2 created.
2023-05-17T17:12:07.119Z INFO  [async-dispatch-2] [o.q.s.RAMJobStore] RAMJobStore initialized.
2023-05-17T17:12:07.120Z INFO  [async-dispatch-2] [o.q.c.QuartzScheduler] Scheduler meta-data: Quartz Scheduler (v2.3.2) '1a0b1b87-de74-42f1-a2e6-96ca05156b82' with instanceId 'NON_CLUSTERED'
  Scheduler class: 'org.quartz.core.QuartzScheduler' - running locally.
  NOT STARTED.
  Currently in standby mode.
  Number of jobs executed: 0
  Using thread pool 'org.quartz.simpl.SimpleThreadPool' - with 10 threads.
  Using job-store 'org.quartz.simpl.RAMJobStore' - which does not support persistence. and is not clustered.

2023-05-17T17:12:07.120Z INFO  [async-dispatch-2] [o.q.i.StdSchedulerFactory] Quartz scheduler '1a0b1b87-de74-42f1-a2e6-96ca05156b82' initialized from an externally provided properties instance.
2023-05-17T17:12:07.120Z INFO  [async-dispatch-2] [o.q.i.StdSchedulerFactory] Quartz scheduler version: 2.3.2
2023-05-17T17:12:07.120Z INFO  [async-dispatch-2] [o.q.c.QuartzScheduler] Scheduler 1a0b1b87-de74-42f1-a2e6-96ca05156b82_$_NON_CLUSTERED started.
2023-05-17T17:12:07.122Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-service] Initializing web server(s).
2023-05-17T17:12:07.143Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'puppet-profiler', version 8.0.0
2023-05-17T17:12:07.145Z INFO  [async-dispatch-2] [p.s.j.jruby-puppet-service] Initializing the JRuby service
2023-05-17T17:12:07.152Z INFO  [async-dispatch-2] [p.s.j.jruby-pool-manager-service] Initializing the JRuby service
2023-05-17T17:12:07.156Z INFO  [async-dispatch-2] [p.s.j.jruby-puppet-service] JRuby version info: jruby 9.4.2.0 (3.1.0) 2023-03-08 90d2913fda OpenJDK 64-Bit Server VM 17.0.7+7-Ubuntu-0ubuntu122.04.2 on 17.0.7+7-Ubuntu-0ubuntu122.04.2 +jit [x86_64-linux]
2023-05-17T17:12:07.161Z INFO  [clojure-agent-send-pool-0] [p.s.j.i.jruby-internal] Creating JRubyInstance with id 1.
2023-05-17T17:12:07.177Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'jruby-metrics', version 8.0.0
2023-05-17T17:12:07.178Z INFO  [async-dispatch-2] [p.s.v.versioned-code-service] No code-id-command set for versioned-code-service. Code-id will be nil.
2023-05-17T17:12:07.179Z INFO  [async-dispatch-2] [p.s.v.versioned-code-service] No code-content-command set for versioned-code-service. Attempting to fetch code content will fail.
2023-05-17T17:12:07.182Z INFO  [async-dispatch-2] [p.t.s.m.jolokia] Metrics access control using trapperkeeper-authorization is enabled.
2023-05-17T17:12:13.781Z INFO  [clojure-agent-send-pool-0] [puppetserver] Puppet Puppet settings initialized; run mode: server
2023-05-17T17:12:16.341Z INFO  [clojure-agent-send-pool-0] [p.s.j.i.jruby-agents] Finished creating JRubyInstance 1 of 2
2023-05-17T17:12:16.342Z INFO  [clojure-agent-send-pool-0] [p.s.j.i.jruby-internal] Creating JRubyInstance with id 2.
2023-05-17T17:12:16.347Z INFO  [async-dispatch-2] [p.s.c.puppet-server-config-core] Initializing webserver settings from core Puppet
2023-05-17T17:12:16.378Z INFO  [async-dispatch-2] [p.p.certificate-authority] CA already initialized for SSL
2023-05-17T17:12:16.388Z INFO  [async-dispatch-2] [p.s.c.certificate-authority-service] CA Service adding a ring handler
2023-05-17T17:12:16.432Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'ca', version 8.0.0
2023-05-17T17:12:16.617Z INFO  [async-dispatch-2] [p.p.certificate-authority] Master already initialized for SSL
2023-05-17T17:12:16.627Z INFO  [async-dispatch-2] [p.s.m.master-service] Master Service adding ring handlers
2023-05-17T17:12:16.631Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'master', version 8.0.0
2023-05-17T17:12:16.634Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'server', version 8.0.0
2023-05-17T17:12:16.644Z INFO  [async-dispatch-2] [p.s.p.puppet-admin-service] Starting Puppet Admin web app
2023-05-17T17:12:16.648Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-service] Starting web server(s).
2023-05-17T17:12:16.656Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-core] webserver config overridden for key 'ssl-cert'
2023-05-17T17:12:16.656Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-core] webserver config overridden for key 'ssl-key'
2023-05-17T17:12:16.657Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-core] webserver config overridden for key 'ssl-ca-cert'
2023-05-17T17:12:16.658Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-core] webserver config overridden for key 'ssl-crl-path'
2023-05-17T17:12:16.798Z INFO  [async-dispatch-2] [p.t.s.w.jetty9-core] Starting web server.
2023-05-17T17:12:16.805Z INFO  [async-dispatch-2] [o.e.j.s.Server] jetty-9.4.51.v20230217; built: 2023-02-17T08:19:37.309Z; git: b45c405e4544384de066f814ed42ae3dceacdd49; jvm 17.0.7+7-Ubuntu-0ubuntu122.04.2
2023-05-17T17:12:16.848Z INFO  [async-dispatch-2] [o.e.j.s.session] DefaultSessionIdManager workerName=node0
2023-05-17T17:12:16.848Z INFO  [async-dispatch-2] [o.e.j.s.session] No SessionScavenger set, using defaults
2023-05-17T17:12:16.849Z INFO  [async-dispatch-2] [o.e.j.s.session] node0 Scavenging every 660000ms
2023-05-17T17:12:16.872Z INFO  [async-dispatch-2] [p.t.s.m.jolokia] Using policy access restrictor classpath:/jolokia-access.xml
2023-05-17T17:12:16.907Z INFO  [async-dispatch-2] [o.e.j.s.h.ContextHandler] Started o.e.j.s.ServletContextHandler@16c936d9{/metrics/v2,null,AVAILABLE}
2023-05-17T17:12:16.908Z INFO  [async-dispatch-2] [o.e.j.s.h.ContextHandler] Started o.e.j.s.h.ContextHandler@7a1f94e7{/puppet-ca,null,AVAILABLE}
2023-05-17T17:12:16.909Z INFO  [async-dispatch-2] [o.e.j.s.h.ContextHandler] Started o.e.j.s.h.ContextHandler@4f7f5d9a{/puppet,null,AVAILABLE}
2023-05-17T17:12:16.909Z INFO  [async-dispatch-2] [o.e.j.s.h.ContextHandler] Started o.e.j.s.h.ContextHandler@1eca7aad{/puppet-admin-api,null,AVAILABLE}
2023-05-17T17:12:16.943Z INFO  [async-dispatch-2] [o.e.j.u.s.SslContextFactory] x509=X509@1e63459b(private key,h=[puppet, puppet2.],a=[],w=[]) for InternalSslContextFactory@37a1e638[provider=null,keyStore=null,trustStore=null]
2023-05-17T17:12:17.088Z INFO  [async-dispatch-2] [o.e.j.s.AbstractConnector] Started ServerConnector@75442d82{SSL, (ssl, http/1.1)}{0.0.0.0:8140}
2023-05-17T17:12:17.088Z INFO  [async-dispatch-2] [o.e.j.s.Server] Started @14212ms
2023-05-17T17:12:17.150Z INFO  [async-dispatch-2] [p.t.s.s.status-core] Starting background monitoring of cpu usage metrics
2023-05-17T17:12:17.162Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status callback function for service 'status-service', version 1.1.1
2023-05-17T17:12:17.162Z INFO  [async-dispatch-2] [p.t.s.s.status-service] Registering status service HTTP API at /status
2023-05-17T17:12:17.173Z INFO  [async-dispatch-2] [o.e.j.s.h.ContextHandler] Started o.e.j.s.h.ContextHandler@94a6719{/status,null,AVAILABLE}
2023-05-17T17:12:17.185Z INFO  [async-dispatch-2] [p.s.a.analytics-service] Puppet Server Update Service has successfully started and will run in the background
2023-05-17T17:12:17.189Z INFO  [async-dispatch-2] [p.s.m.master-service] Puppet Server has successfully started and is now ready to handle requests
2023-05-17T17:12:17.812Z ERROR [1a0b1b87-de74-42f1-a2e6-96ca05156b82_Worker-3] [p.s.a.analytics-service] Failed to check for product updates
2023-05-17T17:12:19.579Z INFO  [clojure-agent-send-pool-0] [puppetserver] Puppet Puppet settings initialized; run mode: server
2023-05-17T17:12:21.299Z INFO  [clojure-agent-send-pool-0] [p.s.j.i.jruby-agents] Finished creating JRubyInstance 2 of 2
2023-05-17T17:13:01.767Z ERROR [qtp1847757902-55] [p.t.a.rules] Forbidden request: puppet2.(91.107.216.1) access to /puppet/v3/catalog/puppet2. (method :post) (authenticated: true) denied by rule 'puppetlabs v3 catalog from agents'.
2023-05-17T17:13:01.803Z ERROR [qtp1847757902-53] [p.t.a.rules] Forbidden request: puppet2.(91.107.216.1) access to /puppet/v3/report/puppet2. (method :put) (authenticated: true) denied by rule 'puppetlabs report'.
thank you 🙂
e
The 2 last records show there are 'p.t.a.rules' (which I have no idea what they are) blocking agent requests to the server. I'd start reviewing those rules.
a
ok, lets find these stuff, its a pity there is nothing stated in the docs 😞
do you know any good tutorial aka https://phoenixnap.com/kb/install-puppet-ubuntu for installing puppet ? the link just shows puppet6 which is a little bit outdated, but with puppet8 i am running into this issue, which i am investigating
n
On your Puppetserver, open up
/etc/puppetlabs/puppetserver/conf.d/auth.conf
That's where the rules are that define access to the API endpoints.
In that file, search for "puppetlabs v3 catalog from agents". There's probably an allow list in that rule. What does it say?
a
i found it
the main problem was
that in puppet6 it was allowed that server and agent can run on the same host
in puppet8 it changed
and then this error is thrown
but now i am stuck with host certificates -,-
n
The agent and server can absolutely be run on the same host; in all versions of Puppet.
a
then its kinda weird XD
n
Did you do an in-place upgrade of the operating system to focal?
a
nope
fresh install
do you have time for teams ?
n
No, sorry.
Slack only
a
ok its a fresh install ubuntu 22.04
n
What Puppet repo are you using for the packages?
a
let me get you the wget command give me a sec
then dpkg -i ... apt install puppetserver fixing wrong permissions in /opt adding ip puppetmaster puppet to host start server
then restart puppet agent --test 403 error meeee
grr i do not get it -.-
more or less following this tut but only with puppet8 https://phoenixnap.com/kb/install-puppet-ubuntu any ideas @natemccurdy?
s
You're trying to use the 20.04 (Focal Fossa) packages on a 22.04 (Jammy Jellyfish) server?
a
yes spp 🙂 with puppet6 it was working just got stuck with puppetdb
then i realized the tut was puppet6
and i wanted to upgrade 🙂
started fresh vservers
s
you can't use 20.04 packages on a 22.04 server. It isn't supported.
a
give me 15 minutes, then i am at home and i can start a 20.04 machine and i can test it 🙂
@spp, .. the first programm on ubuntu i had in my lifetime that was not compatible, so i was lucky, that the puppet6 version was running, but then it misleaded me. nice 😉 may i ask you a second thing to puppetdb ?
s
You can always ask. I may not know the answer, but someone should....
🙌 1
a
ok 🙌 after following https://www.puppet.com/docs/puppetdb/8/install_via_module.html and some research it was possible to run puppetdb with a hsql backend, this i added to the database.ini:
Copy code
subname = file:/etc/puppetlabs/puppetdb/;hsqldb.tx=mvcc;sql.syntax_pgs=true
but after starting the puppetdb i get following error:
Copy code
2023-05-17T19:12:46.185Z INFO  [o.q.i.StdSchedulerFactory] Quartz scheduler '231cf5fd-8eba-479e-b266-6af535d33edb' initialized from an externally provided properties instance.
2023-05-17T19:12:46.185Z INFO  [o.q.i.StdSchedulerFactory] Quartz scheduler version: 2.3.2
2023-05-17T19:12:46.186Z INFO  [o.q.c.QuartzScheduler] Scheduler 231cf5fd-8eba-479e-b266-6af535d33edb_$_NON_CLUSTERED started.
2023-05-17T19:12:46.195Z INFO  [p.t.s.n.nrepl-service] nREPL service disabled, not starting
2023-05-17T19:12:46.217Z ERROR [p.t.internal] Error during service init!!!
java.lang.AssertionError: Assert failed: (:user config)
        at puppetlabs.puppetdb.config$ensure_migrator_info.invokeStatic(config.clj:422)
        at puppetlabs.puppetdb.config$ensure_migrator_info.invoke(config.clj:419)
        at puppetlabs.puppetdb.config$fix_up_db_settings.invokeStatic(config.clj:442)
        at puppetlabs.puppetdb.config$fix_up_db_settings.invoke(config.clj:438)
        at puppetlabs.puppetdb.config$configure_dbs$fn__18983.invoke(config.clj:485)
        at clojure.core$update.invokeStatic(core.clj:6231)
        at clojure.core$update.invoke(core.clj:6223)
        at puppetlabs.puppetdb.config$configure_dbs.invokeStatic(config.clj:485)
        at puppetlabs.puppetdb.config$configure_dbs.invoke(config.clj:475)
        at puppetlabs.puppetdb.config$convert_config.invokeStatic(config.clj:536)
        at puppetlabs.puppetdb.config$convert_config.invoke(config.clj:532)
        at puppetlabs.puppetdb.config$process_config_BANG_.invokeStatic(config.clj:694)
        at puppetlabs.puppetdb.config$process_config_BANG_.invoke(config.clj:690)
        at puppetlabs.puppetdb.config$init_config_service.invokeStatic(config.clj:727)
        at puppetlabs.puppetdb.config$init_config_service.invoke(config.clj:725)
        at puppetlabs.puppetdb.config$create_defaulted_config_service$reify__19193$service_fnk__16819__auto___positional$reify__19202$fn__19203.invoke(config.clj:756)
        at puppetlabs.puppetdb.utils$call_unless_shutting_down.invokeStatic(utils.clj:394)
        at puppetlabs.puppetdb.utils$call_unless_shutting_down.invoke(utils.clj:391)
        at puppetlabs.puppetdb.config$create_defaulted_config_service$reify__19193$service_fnk__16819__auto___positional$reify__19202.init(config.clj:754)
        at puppetlabs.trapperkeeper.services$fn__16643$G__16635__16646.invoke(services.clj:9)
        at puppetlabs.trapperkeeper.services$fn__16643$G__16634__16650.invoke(services.clj:9)
        at puppetlabs.trapperkeeper.internal$fn__17157$run_lifecycle_fn_BANG___17164$fn__17165.invoke(internal.clj:196)
        at puppetlabs.trapperkeeper.internal$fn__17157$run_lifecycle_fn_BANG___17164.invoke(internal.clj:179)
        at puppetlabs.trapperkeeper.internal$fn__17186$run_lifecycle_fns__17191$fn__17192.invoke(internal.clj:229)
        at puppetlabs.trapperkeeper.internal$fn__17186$run_lifecycle_fns__17191.invoke(internal.clj:206)
        at puppetlabs.trapperkeeper.internal$fn__17816$build_app_STAR___17825$fn$reify__17837.init(internal.clj:614)
        at puppetlabs.trapperkeeper.internal$fn__17866$boot_services_for_app_STAR__STAR___17873$fn__17874$fn__17876.invoke(internal.clj:648)
        at puppetlabs.trapperkeeper.internal$fn__17866$boot_services_for_app_STAR__STAR___17873$fn__17874.invoke(internal.clj:647)
        at puppetlabs.trapperkeeper.internal$fn__17866$boot_services_for_app_STAR__STAR___17873.invoke(internal.clj:641)
        at clojure.core$partial$fn__5910.invoke(core.clj:2647)
        at puppetlabs.trapperkeeper.internal$fn__17231$initialize_lifecycle_worker__17242$fn__17243$fn__17406$state_machine__10377__auto____17431$fn__17434.invoke(internal.clj:249)
        at puppetlabs.trapperkeeper.internal$fn__17231$initialize_lifecycle_worker__17242$fn__17243$fn__17406$state_machine__10377__auto____17431.invoke(internal.clj:249)
        at clojure.core.async.impl.ioc_macros$run_state_machine.invokeStatic(ioc_macros.clj:978)
        at clojure.core.async.impl.ioc_macros$run_state_machine.invoke(ioc_macros.clj:977)
        at clojure.core.async.impl.ioc_macros$run_state_machine_wrapped.invokeStatic(ioc_macros.clj:982)
        at clojure.core.async.impl.ioc_macros$run_state_machine_wrapped.invoke(ioc_macros.clj:980)
        at clojure.core.async$ioc_alts_BANG_$fn__10606.invoke(async.clj:421)
        at clojure.core.async$do_alts$fn__10545$fn__10548.invoke(async.clj:288)
        at clojure.core.async.impl.channels.ManyToManyChannel$fn__5218$fn__5219.invoke(channels.clj:99)
        at clojure.lang.AFn.run(AFn.java:22)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
        at clojure.core.async.impl.concurrent$counted_thread_factory$reify__5121$fn__5122.invoke(concurrent.clj:29)
        at clojure.lang.AFn.run(AFn.java:22)
        at java.base/java.lang.Thread.run(Thread.java:833)
2023-05-17T19:12:46.220Z INFO  [p.t.internal] Beginning shutdown sequence
2023-05-17T19:12:46.230Z INFO  [p.p.c.services] Shutdown request received; puppetdb exiting.
2023-05-17T19:12:46.234Z INFO  [p.t.s.s.scheduler-service] Shutting down Scheduler Service
2023-05-17T19:12:46.237Z INFO  [o.q.c.QuartzScheduler] Scheduler 231cf5fd-8eba-479e-b266-6af535d33edb_$_NON_CLUSTERED shutting down.
2023-05-17T19:12:46.237Z INFO  [o.q.c.QuartzScheduler] Scheduler 231cf5fd-8eba-479e-b266-6af535d33edb_$_NON_CLUSTERED paused.
2023-05-17T19:12:46.676Z INFO  [o.q.c.QuartzScheduler] Scheduler 231cf5fd-8eba-479e-b266-6af535d33edb_$_NON_CLUSTERED shutdown complete.
2023-05-17T19:12:46.677Z INFO  [p.t.s.s.scheduler-service] Scheduler Service shutdown complete.
2023-05-17T19:12:46.680Z INFO  [p.t.s.w.jetty9-service] Shutting down web server(s).
2023-05-17T19:12:46.689Z INFO  [p.t.internal] Finished shutdown sequence
s
We haven't supported HSQLDB since Puppet 4 (or maybe 5). I don't believe you can use it with P8.
n
PuppetDB should only be using a Postgresql backend.
a
spp to the rescue 🙂 so i go for postgres 🙂 thanks again, i will come back tomorrow ( gmt +1) to check 🙂 thanks natem also to you 🙂
c
If you are just kicking the tires, try puppetserver without puppetdb first. You can add pupeptdb later.
a
@spp @natemccurdy thanks a lot it is working now . @Corporate Gadfly i do have some experience with puppet6 only, i just was stuck at instaling v8 with puppetdb 🙂 But definitely I agree 🙂 Thanks a lot guys !