perfSONAR User Q&A and Other Discussion

[Andreas Haupt <>]

Hi Andrew,

On Tue, 2023-06-27 at 08:50 -0400, Andrew Lake wrote:
> HI,
> 
> Everything should be working with selinux, so let us know if something in
> particular is not. Make sure selinux is enabled when you install the
> toolkit or else the RPMS won't think they need to do anything wrt selinux
> I believe.

That's the case. Any sebooleans that need to get disabled or enabled?

Problem is the public dashboard does not really load with SELinux enabled
as it e.g. cannot query the rpm database (to show versions of installed ps
toolkit rpms). From ssl_error_log:

[Mon Jun 26 16:37:51.706994 2023] [cgid:error] [pid 55520:tid 55747] [client 
141.34.2.31:35232] error: 
cannot open Packages database in : 
/usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:51.707061 2023] [cgid:error] [pid 55520:tid 55747] [client 
141.34.2.31:35232] rpmtsOpenDB failed at /usr/lib64/perl5/vendor_perl/RPM2.pm 
line 45.: /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:51.768806 2023] [cgid:error] [pid 55520:tid 55747] [client 
141.34.2.31:35232] End of script output before headers: host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086316 2023] [cgid:error] [pid 56000:tid 56053] [client 
141.34.2.31:35224] error: Unable to open sqlite database 
/var/lib/rpm/rpmdb.sqlite: unable to open database file: 
/usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086707 2023] [cgid:error] [pid 56000:tid 56053] [client 
141.34.2.31:35224] error: cannot open Packages index using sqlite - Operation 
not permitted (1): /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086860 2023] [cgid:error] [pid 56000:tid 56053] [client 
141.34.2.31:35224] error: cannot open Packages database in : 
/usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: 
http://perfsonar-test.zeuthen.desy.de/toolkit/

Also the other (e.g. ip-related) information on the dashboard does not
show up. I cannot edit configuration from the dashboard either, as saving
the changes seems to fail. All this worked once I enterred:

setenforce 0

> Also, there is no NTP package as crony is the only choice. The toolkit
> package should be enabling crony by default. It does not configure any
> servers beyond the defaults largely because we need to review our aging
> list of NTP servers. You'll also notice the NTP GUI is gone for this
> reason.

OK, I read the error (or however you call a dashboard claiming there is no
time sync) is no real error. Good :-)


Thanks,
Andreas
-- 
| Andreas Haupt            | E-Mail: 
|  DESY Zeuthen            | WWW:    http://www.zeuthen.desy.de/~ahaupt
|  Platanenallee 6         | Phone:  +49/33762/7-7359
|  D-15738 Zeuthen         | Fax:    +49/33762/7-7216

Attachment: smime.p7s
Description: S/MIME cryptographic signature