Bug #8039: Broken inventory on root server after install - Rudder - Issue Tracker

Actions

Copy link

Bug #8039

closed

Bug #7930: System technique cannot compress inventories

Broken inventory on root server after install

Added by Alexis Mousset over 8 years ago. Updated over 8 years ago.

Status:

Released

Priority:

N/A

Assignee:

Alexis Mousset

Category:

System techniques

Target version:

3.1.8

Pull Request:

https://github.com/Normation/rudder-t...

Severity:

UX impact:

User visibility:

Effort required:

Priority:

Name check:

Fix check:

Regression:

Description

[2016-03-08 09:33:45] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - New input inventory: 'server-root.ocs'
[2016-03-08 09:33:45] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - Inventory 'server-root.ocs' parsed in 274 milliseconds ms, now checking signature
[2016-03-08 09:33:45] ERROR com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - RejectiInventory 'server-root.ocs' for Node 'root' because signature is not valid, you can update the inventory key by running the following command '/opt/rudder/bin/rudder-keys change-key root <your new public key>'

Actions

Copy link

Updated by Vincent MEMBRÉ over 8 years ago

Status changed from New to In progress
Assignee changed from Alexis Mousset to Vincent MEMBRÉ

Actions

Copy link

Updated by Vincent MEMBRÉ over 8 years ago

Assignee changed from Vincent MEMBRÉ to Nicolas CHARLES
Parent task set to #7930

Found why ...

We generated two inventories in two run ( two normal runs separated by 5 minutes) but only keep the signature of first inventory ... More details:

initial promises correctly generate a signature but sometimes the inventory cannot be sent via apache to it's correct directory.

so we have a state like this in /var/rudder/inventories:

inventory1.ocs.gz
inventory1.sign

next run occurs, but promises were generated, but inventory cannot be signed ( we compress then sign, but compressing file delete the file to sign) so there a new inventory and the old signature

inventory2.ocs.gz
inventory1.sign

Then they are correctly sent to rudder, but inventory fails due to wrong signature

inverting signing and compression fix this issue

Actions

Copy link

Updated by Vincent MEMBRÉ over 8 years ago

Assignee changed from Nicolas CHARLES to Vincent MEMBRÉ

Actions

Copy link

Updated by Vincent MEMBRÉ over 8 years ago

Status changed from In progress to Pending technical review
Assignee changed from Vincent MEMBRÉ to Alexis Mousset
Pull Request set to https://github.com/Normation/rudder-techniques/pull/894

PR https://github.com/Normation/rudder-techniques/pull/894

Actions

Copy link

Updated by Vincent MEMBRÉ over 8 years ago

Status changed from Pending technical review to In progress
Assignee changed from Alexis Mousset to Nicolas CHARLES
Target version changed from 3.2.2 to 3.1.8
Pull Request deleted (~~https://github.com/Normation/rudder-techniques/pull/894~~)