Thursday, September 1, 2022

[389-users] Re: 389DS on K8s - dirserv won't start



On Thu, Sep 1, 2022 at 2:34 PM Ronald Wimmer <ronaldw@ronzo.at> wrote:
On 01.09.22 14:23, Viktor Ashirov wrote:
> On Thu, Sep 1, 2022 at 2:05 PM Ronald Wimmer <ronaldw@ronzo.at> wrote:
>
>> On 01.09.22 13:41, Viktor Ashirov wrote:
>>> On Thu, Sep 1, 2022 at 1:24 PM Ronald Wimmer <ronaldw@ronzo.at> wrote:
>>>
>>>> We stuck to the guide on
>>>>
>> https://directory.fedoraproject.org/docs/389ds/howto/howto-deploy-389ds-on-openshift.html
>>>> but tried to leave out LDAPs and all the certificate stuff for now. Pod
>> is
>>>> starting but crashes immediately with the following error:
>>>>
>>>> kubectl logs dirsrv-0 dirsrv-container -n dirsrv-dev
>>>> INFO: The 389 Directory Server Container Bootstrap
>>>> INFO: Inspired by works of: ITS, The University of Adelaide
>>>> INFO: 389 Directory Server Version: 2.2.2
>>
> What is the image that you're using?
> $ podman run -ti quay.io/389ds/dirsrv rpm -q 389-ds-base
> 389-ds-base-2.0.16-1.fc35.x86_64

There is no 389-ds-base package installed but I can find a package named
389-ds:
docker run -ti quay.io/389ds/dirsrv:latest rpm -q 389-ds
389-ds-2.2.2~git11.f002e9e09-150.3.x86_64
This is a bit unexpected.
We have images based on 
I filed an issue https://github.com/389ds/389-ds-base/issues/5436 to fix this split.

Looks like you have an image based on openSUSE, even though you specify the full registry in the image path, and it should pull an image based on Fedora.
By default these images run as different users:
$ podman run -ti docker.io/389ds/dirsrv whoami
root

$ podman run -ti quay.io/389ds/dirsrv whoami
dirsrv

And the configuration that is described in the guide is using the image from quay.io/389ds/dirsrv so that it can be run unprivileged and rootless.
So could you please ensure that you run the image from quay.io/389ds/dirsrv

Thanks.

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


--
Viktor

No comments:

Post a Comment