Bug 1074158 - when init a cluster and enable hawk, see hawk.key: permission denied
when init a cluster and enable hawk, see hawk.key: permission denied
Status: RESOLVED WORKSFORME
Classification: openSUSE
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: High Availability
Current
Other Other
: P3 - Medium : Normal (vote)
: ---
Assigned To: SUSE Linux Enterprise High Availability Team
E-mail List
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2017-12-28 03:21 UTC by Lingshan Zhu
Modified: 2018-02-12 09:35 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Lingshan Zhu 2017-12-28 03:21:32 UTC
Failed to start hark service in a fresh installed cluster, see hawk.key: permission denied in the journal.

Details:

TW_init1:/ # systemctl status hawk
● hawk.service - HA Web Konsole
   Loaded: loaded (/usr/lib/systemd/system/hawk.service; disabled; vendor preset: disabled)
   Active: activating (auto-restart) (Result: exit-code) since Thu 2017-12-28 11:17:10 CST; 1s ago
  Process: 123610 ExecStart=/usr/sbin/hawk-apiserver -key ${HAWK_KEY} -cert ${HAWK_CERT} -port ${HAWK_PORT} -config /etc/hawk/server.json (code=exited, status=1/FAILURE)
  Process: 123594 ExecStartPre=/usr/share/hawk/bin/generate-ssl-cert (code=exited, status=0/SUCCESS)
 Main PID: 123610 (code=exited, status=1/FAILURE)
    Tasks: 0 (limit: 19660)
   CGroup: /system.slice/hawk.service

Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Main process exited, code=exited, status=1/FAILURE
Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Unit entered failed state.
Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Failed with result 'exit-code'.
TW_init1:/ # journalctl -u hawk
-- Logs begin at Thu 2017-09-21 21:30:13 CST, end at Thu 2017-12-28 11:17:26 CST. --
Dec 28 11:17:09 TW_init1 systemd[1]: Starting HA Web Konsole...
Dec 28 11:17:09 TW_init1 generate-ssl-cert[123594]: No SSL certificate found. Creating one now.
Dec 28 11:17:10 TW_init1 systemd[1]: Started HA Web Konsole.
Dec 28 11:17:10 TW_init1 hawk-apiserver[123610]: 2017/12/28 11:17:10 Reading /etc/hawk/server.json...
Dec 28 11:17:10 TW_init1 hawk-apiserver[123610]: Listening to https://0.0.0.0:7630
Dec 28 11:17:10 TW_init1 hawk-apiserver[123610]: 2017/12/28 11:17:10 open /etc/hawk/hawk.key: permission denied
Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Main process exited, code=exited, status=1/FAILURE
Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Unit entered failed state.
Dec 28 11:17:10 TW_init1 systemd[1]: hawk.service: Failed with result 'exit-code'.
Dec 28 11:17:15 TW_init1 systemd[1]: hawk.service: Service hold-off time over, scheduling restart.
Dec 28 11:17:15 TW_init1 systemd[1]: Stopped HA Web Konsole.
Dec 28 11:17:15 TW_init1 systemd[1]: Starting HA Web Konsole...
Dec 28 11:17:15 TW_init1 systemd[1]: Started HA Web Konsole.


TW_init1:/ # zypper info hawk2
Loading repository data...
Reading installed packages...


Information for package hawk2:
------------------------------
Repository     : openSUSE-Tumbleweed-Oss                    
Name           : hawk2                                      
Version        : 2.1.0+git.1510051134.341d508e-1.1          
Arch           : x86_64                                     
Vendor         : openSUSE                                   
Installed Size : 20.5 MiB                                   
Installed      : Yes (automatically)                        
Status         : up-to-date                                 
Source package : hawk2-2.1.0+git.1510051134.341d508e-1.1.src
Summary        : HA Web Konsole                             
Description    :                                            
    A web-based GUI for managing and monitoring the Pacemaker
    High-Availability cluster resource manager.

TW_init1:/ # ll /etc/hawk/hawk.key
-rw------- 1 root haclient 1704 Dec 28 11:17 /etc/hawk/hawk.key
Comment 1 Lingshan Zhu 2017-12-28 03:22:34 UTC
Typo in the title, it is HAWK, not hark
Comment 2 Antoine Ginies 2018-02-12 09:35:37 UTC
I can not reproduce with current snapshot: hawk2-2.1.0+git.1515768475.ff6e103b-1.9.x86_64