perfSONAR User Q&A and Other Discussion

[Viral Patel <>]

Thanks Michael , 
Your suggestion fixed the issue. I can now see that Dockers container's 
volume certs are mapped to hosts directory /etc/pwa/auth . 


Sincerely
Viral Patel

230 Clearfield Avenue, Suite 113
Virginia Beach, VA 23462
757-463-9120 phone
757-463-9158 fax

 | www.savantltd.com 



-----Original Message-----
From: Michael Johnson 
[mailto:]
 
Sent: Monday, July 30, 2018 12:46 PM
To: Viral Patel
Cc: 

Subject: Re: [perfsonar-user] Perfsonar 4.1 docker nginx Problem

Hi Viral,

You need to place your SSL certs in
/etc/pwa/auth/

Also, I just realized that the nginx command is wrong in the docs. it should 
be:

docker run \
    --restart=always \
    --net pwa \
    --name nginx \
    -v /etc/pwa/shared:/shared:ro \
    -v /etc/pwa/nginx:/etc/nginx:ro \
    -v /etc/pwa/auth:/certs:ro \
    -p 8000:8000 \
    -p 8443:8443 \
    -p 9443:9443 \
    -d nginx


The part that is different is:
-v /etc/grid-security/host:/certs:ro

changes to

-v /etc/pwa/auth:/certs:ro

I'll update the docs. Let me know if you still have issues.

Thanks,
Michael

On Mon, Jul 30, 2018 at 04:15:18PM +0000, Viral Patel wrote:
>Hi
>I am running PWA alongside a toolkit & followed the document :
>
>http://docs.perfsonar.net/release_candidates/4.1b1/pwa_running_alongside\<http://docs.perfsonar.net/release_candidates/4.1b1/pwa_running_alongside/>
>
>but my nginx container keep restarting , looking at the container log points 
>toward cert error but I do not know how to fix this .
>
>
>[root@perfsonar41 ~]# docker container list -a
>
>CONTAINER ID        IMAGE                 COMMAND                  CREATED   
>          STATUS                        PORTS               NAMES
>2e5c749da84e        nginx                 "nginx -g 'daemon ..."   2 days 
>ago          Restarting (1) 1 second ago                       nginx
>6b9af1cb53fb        perfsonar/pwa-pub     "node /app/api/pwa..."   2 days 
>ago          Up 29 seconds                 8080/tcp            pwa-pub1
>cdbe6e467d4f        perfsonar/pwa-admin   "/start.sh"              2 days 
>ago          Up 29 seconds                 80/tcp, 8080/tcp    pwa-admin1
>2242c69ca3e2        perfsonar/sca-auth    "/app/docker/start.sh"   2 days 
>ago          Up 29 seconds                 80/tcp, 8080/tcp    sca-auth
>c040264d8a6a        mongo                 "docker-entrypoint..."   2 days 
>ago          Up 29 seconds                 27017/tcp           mongo
>
>
>[root@perfsonar41 ~]# docker logs -f --tail 20 nginx
>
>2018/07/30 16:05:58 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed 
>(SSL: error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
>error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>2018/07/30 16:06:03 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:22
>2018/07/30 16:06:03 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:63
>2018/07/30 16:06:03 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed 
>(SSL: error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
>error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>2018/07/30 16:06:09 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:22
>2018/07/30 16:06:09 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:63
>2018/07/30 16:06:09 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed 
>(SSL: error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
>error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>2018/07/30 16:06:17 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:22
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:22
>2018/07/30 16:06:17 [warn] 1#1: the "ssl" directive is deprecated, use the 
>"listen ... ssl" directive instead in /etc/nginx/conf.d/pwa.conf:63
>nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" 
>directive instead in /etc/nginx/conf.d/pwa.conf:63
>2018/07/30 16:06:17 [emerg] 1#1: BIO_new_file("/certs/cert.pem") failed 
>(SSL: error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>nginx: [emerg] BIO_new_file("/certs/cert.pem") failed (SSL: 
>error:02001002:system library:fopen:No such file or 
>directory:fopen('/certs/cert.pem','r') error:2006D080:BIO 
>routines:BIO_new_file:no such file)
>
>
>
>Sincerely
>Viral Patel
>
>[SavantLtd Teal - small]
>
>230 Clearfield Avenue, Suite 113
>Virginia Beach, VA 23462
>757-463-9120 phone
>757-463-9158 fax
>
> | www.savantltd.com
>
>


>--
>To unsubscribe from this list: 
>https://lists.internet2.edu/sympa/signoff/perfsonar-user


-- 
Michael Johnson
GlobalNOC DevOps Engineer