Comments (4)
Hey @Fran765!
Unfortunately, I don't think you can restore it to an initial setup stage. I believe you should be able to create a fresh one if you delete the current LXC container and rerun the Ansible playbook (however you will lose the configuration).
As for the management request failed error, please have a look in the proxy.log
of both the management Security Server and the one attempting to send the management request. The logs are located under /var/log/xroad
.
from x-road.
Hi @raits !
I ran the command "lxc rebuild ss" then "lxc start ss" and it didn't work.
If I run the ansible playbook again without deleting the ss container, will it reconfigure it?
Anyway, i stopped this container, added a new ss in the "lxd_hosts.txt" file and run the Ansible playbook again.
Then when registering the auth certificate in this new ss, this is where the above error occurs.
As for the indicated diagram:
Do you recommend that the central server, security server management and trust services be on the same server? Or manage any of these entities on a separate server?
from x-road.
Hi @Fran765,
I have not used rebuild myself, but based on the description of the command it should wipe the previous container setup and start from a fresh. Could you check that the X-Road software and services have been removed from it? If so, then re-running the Ansible playbook should re-install things.
I assume that ss
refers to poc-ss
in the diagram. If so, you will need it up and running for most management requests to work. That said, the authentication certificate registration is a different path than the subsystem registration process you mentioned earlier. To debug the issue, please clarify which version of X-Road you are running and provide the proxy.log
for the Security Server that is trying to register the authentication certificate.
For production use, we recommend the Central Serve, management Security Server and trust services to be on different hosts. However, for development / PoC purposes, the setup should be ok. The setup you have created by mixing LXC and Docker is a bit exotic though, and we have never attempted a setup like that. Usually, for development purposes, we set everything up in LXC containers so that they can communicate over the LXC network, mimicking the suggested setup more closely.
from x-road.
Since there has not been any activity on this issue for a while, I will close it now. In case you still need support please feel free to re-open it or create a new issue.
from x-road.
Related Issues (20)
- expose IP containers HOT 2
- Connect a security server to the central server HOT 3
- Register Auth Cert in Central Server HOT 4
- Change security server ip HOT 12
- I found this tiny typo :) Just wanted to let you know... HOT 1
- As an Ansible user I would like the roles to be in separate repostiories as done usually for Ansible Roles HOT 3
- Support for OpenAPI 3.1 HOT 1
- Required field 'protocolVersion' is missing HOT 6
- Xroad Security Server HOT 1
- X-Road Setup and configuration step by step HOT 3
- X-road issue with building containers (ansible) HOT 1
- certificate self signing issue HOT 91
- Release of new versions. HOT 4
- TLS certificate does not match any IS certificates HOT 3
- Any Help for Security server has no valid authentication certificate HOT 4
- The configuration anchor HOT 25
- error building x-road 7.4.2 HOT 29
- Asking help about the IP in Security Server and Central server? HOT 4
- Where data encryption is done in X-ROAD HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from x-road.