Bug 42038 - Upgrade appbox image to UCS 4.2-0
Upgrade appbox image to UCS 4.2-0
Status: NEW
Product: UCS
Classification: Unclassified
Component: App Center
UCS 4.2
Other Linux
: P5 normal (vote)
: ---
Assigned To: App Center maintainers
App Center maintainers
:
Depends on: 43837 45185
Blocks:
  Show dependency treegraph
 
Reported: 2016-08-19 07:03 CEST by Stefan Gohmann
Modified: 2017-08-10 20:03 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Gohmann univentionstaff 2016-08-19 07:03:02 CEST
The appbox image should be updated to UCS 4.2-0.
Comment 1 Arvid Requate univentionstaff 2017-03-13 18:57:37 CET
For this systemd based container we should specify

STOPSIGNAL SIGRTMIN+3


We may want to adjust some other files in the container, like
===========================================================================
RUN systemctl mask systemd-remount-fs.service dev-hugepages.mount sys-fs-fuse-connections.mount systemd-logind.service getty.target console-getty.service

RUN cp /usr/lib/systemd/system/dbus.service /etc/systemd/system/; sed -i 's/OOMScoreAdjust=-900//' /etc/systemd/system/dbus.service
===========================================================================

see:

* http://vpavlin.eu/2015/02/fedora-docker-and-systemd/
* https://www.freedesktop.org/wiki/Software/systemd/ContainerInterface/

Once we have done that, we may be able remove some "docker exec" mount options from univention-appcenter-docker.
Comment 2 Arvid Requate univentionstaff 2017-03-13 23:50:31 CET
I've created a first version and started it with:

docker run -d --tmpfs /run --tmpfs /run/lock -v /sys/fs/cgroup:/sys/fs/cgroup:ro --security-opt seccomp:/etc/docker/seccomp-systemd.json -e 'container=docker'  docker-test.software-univention.de/ucs-appbox-amd64:4.2-0-ms2

Two services currently fail to start:  journalctl -u apache2.service:
======================================================================
Nov 23 21:48:28 7567e03b9450 systemd[1]: Starting LSB: Apache2 web server...
Nov 23 21:48:29 7567e03b9450 apache2[184]: Starting web server: apache2 failed!
Nov 23 21:48:29 7567e03b9450 apache2[184]: The apache2 configtest failed. ... (warning).
Nov 23 21:48:29 7567e03b9450 apache2[184]: Output of config test was:
Nov 23 21:48:29 7567e03b9450 apache2[184]: AH00526: Syntax error on line 15 of /etc/apache2/conf-enabled/univention-system-setup.conf:
Nov 23 21:48:29 7567e03b9450 apache2[184]: Invalid command 'RewriteEngine', perhaps misspelled or defined by a module not included in the server configuration
Nov 23 21:48:29 7567e03b9450 apache2[184]: Action 'configtest' failed.
Nov 23 21:48:29 7567e03b9450 apache2[184]: The Apache error log may have more information.
Nov 23 21:48:29 7567e03b9450 systemd[1]: apache2.service: control process exited, code=exited status=1
Nov 23 21:48:29 7567e03b9450 systemd[1]: Failed to start LSB: Apache2 web server.
Nov 23 21:48:29 7567e03b9450 systemd[1]: Unit apache2.service entered failed state.
======================================================================

journalctl -u univention-maintenance.service :
======================================================================
-- Logs begin at Mon 2015-11-23 21:48:27 UTC, end at Mon 2015-11-23 21:49:05 UTC. --
Nov 23 21:48:29 7567e03b9450 systemd[1]: Starting LSB: Univention Updater...
Nov 23 21:48:29 7567e03b9450 univention-maintenance[268]: Checking network for Univention maintenance...dmesg: klogctl failed: Operation not permitted
Nov 23 21:48:29 7567e03b9450 univention-maintenance[268]: ldap[ds1]...failed.
Nov 23 21:48:29 7567e03b9450 systemd[1]: univention-maintenance.service: control process exited, code=exited status=1
Nov 23 21:48:29 7567e03b9450 systemd[1]: Failed to start LSB: Univention Updater.
Nov 23 21:48:29 7567e03b9450 systemd[1]: Unit univention-maintenance.service entered failed state.
======================================================================