Re: Problem ssl in secure_cp
"'Craig Comstock' via help-cfengine" <[email protected]>
| Newsgroups | gmane.comp.sysutils.cfengine.general |
|---|---|
| Message-ID | <CAMDw=qFdhcvT91kSzJ0b2uE4fyDBmdc7-mEgkytqctk3RrRTog@mail.gmail.com> |
Here is the ticket: https://tracker.mender.io/browse/CFE-4132 I didn't see anything obviously wrong yet. We will take a look at this as we can and get back. -Craig On Tue, Jan 10, 2023 at 10:35 AM Craig Comstock <[email protected]> wrote: > I have reproduced your situation exactly with a 5.5 GB file copied from a > policy server to itself. I will log a ticket and run again with --timestamp > and upload logs. > > Thanks for the report! > -Craig > > On Tue, Jan 10, 2023 at 10:27 AM Craig Comstock > <[email protected]> wrote: > >> Hi Thierry, >> >> Sorry to see you are having an issue. >> >> To get an idea of sequence of events, can you run cf-agent and cf-serverd >> with timestamps enabled (--timestamp option)? >> >> Also, can you mention the platforms involved and versions of cfengine >> involved? >> >> I am trying a similar policy out now to see if it works for me on some >> debian 11 hosts with community 3.21.0 packages. >> >> Thanks, >> Craig >> >> On Tue, Jan 10, 2023 at 9:22 AM thierry thunot <[email protected]> wrote: >> >>> >>> Hello everyone, >>> I'll tell you about the problem I just encountered. >>> For my work, I want to copy a file of a substantial size 2 or 3GB in >>> secure_cp from a cfengine server to a cfengine client. >>> For this example i took a debian iso image. >>> >>> The file is well copied on the client, its MD5 is good compared to the >>> source file but its name is followed by a .cfnew . >>> >>> the promise is a simple copy from example: >>> { >>> ...... >>> Files: >>> "/root/debian-11.2.0-amd64-DVD-1.iso" >>> copy_from => >>> secure_cp("/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso","$(sys.policy_hub)"), >>> comment => "Copie archive ISO ##################"; >>> ...} >>> >>> >>> the client log about my problem: >>> >>> verbose: P: BEGIN promise 'promise_app_softs_nextcloud_cf_442' of type >>> "files" (pass 1) >>> verbose: P: Promiser/affected object: >>> '/root/debian-11.2.0-amd64-DVD-1.iso' >>> verbose: P: Part of bundle: installation_nextcloud >>> verbose: P: Base context class: >>> !trt_lx_nextcloud_si_paie.!trt_lx_nextcloud_si_paie_preprod.!trt_lx_nextcloud_si_paie_preprod2 >>> verbose: P: Stack path: >>> /default/app_softs_nextcloud/methods/'any'/default/installation_nextcloud/files/'/root/debian-11.2.0-amd64-DVD-1.iso'[1] >>> verbose: P: >>> verbose: P: Comment: Copie archive ISO ################## >>> verbose: File '/root/debian-11.2.0-amd64-DVD-1.iso' copy_from >>> '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >>> verbose: FindIdle: found connection to '192.168.10.225' already open >>> and ready. >>> verbose: '/root/debian-11.2.0-amd64-DVD-1.iso' wasn't at destination, >>> copying from '192.168.10.225: >>> /opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >>> verbose: Copying remote file '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso', >>> expecting 3897638912 bytes >>> verbose: SSL read failed: receive timeout >>> verbose: SSL read failed: receive timeout >>> verbose: SSL read failed: receive timeout >>> verbose: SSL read failed: receive timeout >>> verbose: SSL read failed: receive timeout >>> error: Connection unexpectedly closed (SSL_read): socket closed >>> error: Error in client-server stream, has 192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso >>> shrunk? (code 0) >>> verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' >>> source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 >>> comment 'Copie archive ISO ##################' >>> error: Failed to copy file >>> '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' from '192.168.10.225' >>> verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' >>> source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 >>> comment 'Copie archive ISO ##################' >>> error: Copy from '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' >>> failed >>> error: Errors encountered when actuating files promise >>> '/root/debian-11.2.0-amd64-DVD-1.iso' >>> verbose: A: Promise NOT KEPT! >>> ..... >>> >>> to debug i run cf-served -d >>> debug: 192.168.10.45> Now reading from disk... >>> debug: 192.168.10.45> Now reading from disk... >>> debug: 192.168.10.45> Now reading from disk... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> debug: select(): 0 >>> debug: Waiting at incoming select... >>> .... >>> >>> i there any restrictions from secure via SSL. >>> How can I do to correct this problem? Thanks again for taking the time >>> to help me >>> >>> thanks lot !!!! >>> >>> >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "help-cfengine" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com >>> <https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> Craig Comstock | CFEngineer | https://cfengine.com >> >> Northern.tech AS <https://northern.tech> | @northerntechHQ >> <https://twitter.com/northerntechhq> >> > > > -- > Craig Comstock | CFEngineer | https://cfengine.com > > Northern.tech AS <https://northern.tech> | @northerntechHQ > <https://twitter.com/northerntechhq> > -- Craig Comstock | CFEngineer | https://cfengine.com Northern.tech AS <https://northern.tech> | @northerntechHQ <https://twitter.com/northerntechhq> -- You received this message because you are subscribed to the Google Groups "help-cfengine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/CAMDw%3DqFdhcvT91kSzJ0b2uE4fyDBmdc7-mEgkytqctk3RrRTog%40mail.gmail.com.