perfSONAR User Q&A and Other Discussion

[Andrew Lake <>]

Hi Andreas,

With selinux enabled, if you run “dnf reinstall perfsonar-toolkit-web-services” is it any better? The RPM loads a policy file. There is also the httpd_can_network_connect bool that should be getting set. 

Which OS are you using? I also wasn’t clear, was selinux enforcing on the host prior to the first time you installed?

Thanks,

Andy

On June 27, 2023 at 10:14:12 AM, Andreas Haupt () wrote:

Hi Andrew,

On Tue, 2023-06-27 at 08:50 -0400, Andrew Lake wrote:
> HI,
>
> Everything should be working with selinux, so let us know if something in
> particular is not. Make sure selinux is enabled when you install the
> toolkit or else the RPMS won't think they need to do anything wrt selinux
> I believe.

That's the case. Any sebooleans that need to get disabled or enabled?

Problem is the public dashboard does not really load with SELinux enabled
as it e.g. cannot query the rpm database (to show versions of installed ps
toolkit rpms). From ssl_error_log:

[Mon Jun 26 16:37:51.706994 2023] [cgid:error] [pid 55520:tid 55747] [client 141.34.2.31:35232] error:
cannot open Packages database in : /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:51.707061 2023] [cgid:error] [pid 55520:tid 55747] [client 141.34.2.31:35232] rpmtsOpenDB failed at /usr/lib64/perl5/vendor_perl/RPM2.pm line 45.: /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:51.768806 2023] [cgid:error] [pid 55520:tid 55747] [client 141.34.2.31:35232] End of script output before headers: host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086316 2023] [cgid:error] [pid 56000:tid 56053] [client 141.34.2.31:35224] error: Unable to open sqlite database /var/lib/rpm/rpmdb.sqlite: unable to open database file: /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086707 2023] [cgid:error] [pid 56000:tid 56053] [client 141.34.2.31:35224] error: cannot open Packages index using sqlite - Operation not permitted (1): /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/
[Mon Jun 26 16:37:53.086860 2023] [cgid:error] [pid 56000:tid 56053] [client 141.34.2.31:35224] error: cannot open Packages database in : /usr/lib/perfsonar/web-ng/root/services/host.cgi, referer: http://perfsonar-test.zeuthen.desy.de/toolkit/

Also the other (e.g. ip-related) information on the dashboard does not
show up. I cannot edit configuration from the dashboard either, as saving
the changes seems to fail. All this worked once I enterred:

setenforce 0

> Also, there is no NTP package as crony is the only choice. The toolkit
> package should be enabling crony by default. It does not configure any
> servers beyond the defaults largely because we need to review our aging
> list of NTP servers. You'll also notice the NTP GUI is gone for this
> reason.

OK, I read the error (or however you call a dashboard claiming there is no
time sync) is no real error. Good :-)


Thanks,
Andreas
--
| Andreas Haupt            | E-Mail:
|  DESY Zeuthen            | WWW:    http://www.zeuthen.desy.de/~ahaupt
|  Platanenallee 6         | Phone:  +49/33762/7-7359
|  D-15738 Zeuthen         | Fax:    +49/33762/7-7216