Re: Problem ssl in secure_cp
"'Craig Comstock' via help-cfengine" <[email protected]>
| Newsgroups | gmane.comp.sysutils.cfengine.general |
|---|---|
| Message-ID | <CAMDw=qHmcupW3imet1O9u+vsPEuCyU6+J2+rF76bp_n6Gg2jNQ@mail.gmail.com> |
I have reproduced your situation exactly with a 5.5 GB file copied from a policy server to itself. I will log a ticket and run again with --timestamp and upload logs. Thanks for the report! -Craig On Tue, Jan 10, 2023 at 10:27 AM Craig Comstock <[email protected]> wrote: > Hi Thierry, > > Sorry to see you are having an issue. > > To get an idea of sequence of events, can you run cf-agent and cf-serverd > with timestamps enabled (--timestamp option)? > > Also, can you mention the platforms involved and versions of cfengine > involved? > > I am trying a similar policy out now to see if it works for me on some > debian 11 hosts with community 3.21.0 packages. > > Thanks, > Craig > > On Tue, Jan 10, 2023 at 9:22 AM thierry thunot <[email protected]> wrote: > >> >> Hello everyone, >> I'll tell you about the problem I just encountered. >> For my work, I want to copy a file of a substantial size 2 or 3GB in >> secure_cp from a cfengine server to a cfengine client. >> For this example i took a debian iso image. >> >> The file is well copied on the client, its MD5 is good compared to the >> source file but its name is followed by a .cfnew . >> >> the promise is a simple copy from example: >> { >> ...... >> Files: >> "/root/debian-11.2.0-amd64-DVD-1.iso" >> copy_from => >> secure_cp("/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso","$(sys.policy_hub)"), >> comment => "Copie archive ISO ##################"; >> ...} >> >> >> the client log about my problem: >> >> verbose: P: BEGIN promise 'promise_app_softs_nextcloud_cf_442' of type >> "files" (pass 1) >> verbose: P: Promiser/affected object: >> '/root/debian-11.2.0-amd64-DVD-1.iso' >> verbose: P: Part of bundle: installation_nextcloud >> verbose: P: Base context class: >> !trt_lx_nextcloud_si_paie.!trt_lx_nextcloud_si_paie_preprod.!trt_lx_nextcloud_si_paie_preprod2 >> verbose: P: Stack path: >> /default/app_softs_nextcloud/methods/'any'/default/installation_nextcloud/files/'/root/debian-11.2.0-amd64-DVD-1.iso'[1] >> verbose: P: >> verbose: P: Comment: Copie archive ISO ################## >> verbose: File '/root/debian-11.2.0-amd64-DVD-1.iso' copy_from >> '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >> verbose: FindIdle: found connection to '192.168.10.225' already open and >> ready. >> verbose: '/root/debian-11.2.0-amd64-DVD-1.iso' wasn't at destination, >> copying from '192.168.10.225: >> /opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >> verbose: Copying remote file '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso', >> expecting 3897638912 bytes >> verbose: SSL read failed: receive timeout >> verbose: SSL read failed: receive timeout >> verbose: SSL read failed: receive timeout >> verbose: SSL read failed: receive timeout >> verbose: SSL read failed: receive timeout >> error: Connection unexpectedly closed (SSL_read): socket closed >> error: Error in client-server stream, has 192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso >> shrunk? (code 0) >> verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' >> source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 >> comment 'Copie archive ISO ##################' >> error: Failed to copy file >> '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' from '192.168.10.225' >> verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' >> source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 >> comment 'Copie archive ISO ##################' >> error: Copy from '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >> failed >> error: Errors encountered when actuating files promise >> '/root/debian-11.2.0-amd64-DVD-1.iso' >> verbose: A: Promise NOT KEPT! >> ..... >> >> to debug i run cf-served -d >> debug: 192.168.10.45> Now reading from disk... >> debug: 192.168.10.45> Now reading from disk... >> debug: 192.168.10.45> Now reading from disk... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> debug: select(): 0 >> debug: Waiting at incoming select... >> .... >> >> i there any restrictions from secure via SSL. >> How can I do to correct this problem? Thanks again for taking the time to >> help me >> >> thanks lot !!!! >> >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "help-cfengine" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com >> <https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > > > -- > Craig Comstock | CFEngineer | https://cfengine.com > > Northern.tech AS <https://northern.tech> | @northerntechHQ > <https://twitter.com/northerntechhq> > -- Craig Comstock | CFEngineer | https://cfengine.com Northern.tech AS <https://northern.tech> | @northerntechHQ <https://twitter.com/northerntechhq> -- You received this message because you are subscribed to the Google Groups "help-cfengine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/CAMDw%3DqHmcupW3imet1O9u%2BvsPEuCyU6%2BJ2%2BrF76bp_n6Gg2jNQ%40mail.gmail.com.