Content-Length: 311477 | pFad | https://github.com/coreos/fleet/issues/1425

6E fleetctl submit/start for more than 5 units at a time fails · Issue #1425 · coreos/fleet · GitHub
Skip to content
This repository was archived by the owner on Jan 30, 2020. It is now read-only.

fleetctl submit/start for more than 5 units at a time fails #1425

Closed
r0ps3c opened this issue Feb 4, 2016 · 10 comments
Closed

fleetctl submit/start for more than 5 units at a time fails #1425

r0ps3c opened this issue Feb 4, 2016 · 10 comments
Assignees
@kayrus
Labels
kind/support
Milestone
v0.13.0

Comments

@r0ps3c
Copy link

r0ps3c commented Feb 4, 2016

When invoking fleetctl as:

$ fleetctl --tunnel 54.191.250.126 submit 1.service ... 6.service

with more than 5 units, I get
Error creating units: failed creating unit a.service: Put http://domain-sock/fleet/v1/units/6.service?alt=json: ssh: rejected: administratively prohibited (open failed)

This same error occurs whether the operation is submit, start, or load, but destroy with many services appears to work
@kayrus
Copy link
Contributor

kayrus commented Feb 5, 2016

relates to #1352

@kayrus kayrus added this to the v0.12.0 milestone Feb 8, 2016
@kayrus kayrus self-assigned this Feb 8, 2016
@kayrus
Copy link
Contributor

kayrus commented Feb 9, 2016

Have reproduced the issue. It relates to fleetctl fd-forward proxy and somehow to ssh limits. Need more time to investigate.

@jonboulle jonboulle modified the milestones: v0.13.0, v0.12.0 Feb 24, 2016
This was referenced Mar 2, 2016
Closed
Closed
@kayrus kayrus mentioned this issue Mar 9, 2016
Merged
@kayrus
Copy link
Contributor

kayrus commented Mar 9, 2016

Looks like that on any failed request fleetd closes the unix socket. Closed socket terminates fleetctl fd-forward /var/run/fleet.sock, but local fleetctl doesn't know about that and still tries to send data to ssh.

possible solution is fix fleetctl fd-forward to work in forever loop like it is done here. Didn't manage yet how to interrupt goroutine.

@kayrus
Copy link
Contributor

kayrus commented Mar 10, 2016

It turned out that it is not a reason. Still investigating.

kayrus added a commit to endocode/fleet that referenced this issue Mar 10, 2016
@kayrus
fleetctl: fixed incorrect "auth-agent-req@openssh.com" behavior
010dc52 
fixes: coreos#1425
@kayrus
Copy link
Contributor

kayrus commented Mar 10, 2016

The actual reason was multiple "auth-agent-req@openssh.com" requests, which is not supported by SSH daemon. Had to add additional check whether request was sent or not.

@kayrus
Copy link
Contributor

kayrus commented Mar 18, 2016

Similar issue in python's paramiko paramiko/paramiko#23

@tixxdz tixxdz closed this as completed in ea415ad Mar 21, 2016
kayrus added a commit to endocode/fleet that referenced this issue Mar 31, 2016
@kayrus
fleetctl: fixed incorrect "auth-agent-req@openssh.com" behavior
2d73467 
fixes: coreos#1425
kayrus added a commit to endocode/fleet that referenced this issue Mar 31, 2016
@kayrus
fleetctl: fixed incorrect "auth-agent-req@openssh.com" behavior
d05db24 
fixes: coreos#1425
hectorj2f pushed a commit to giantswarm/fleet that referenced this issue Apr 6, 2016
@kayrus @hectorj2f
fleetctl: fixed incorrect "auth-agent-req@openssh.com" behavior
f860c64 
fixes: coreos#1425
@kayrus kayrus mentioned this issue Apr 8, 2016
Merged
@insidewhy
Copy link

Is there a release with this fix?

@dongsupark
Copy link
Contributor

@ohjames This issue was already fixed via #1540, which belongs to v0.13.0.

@insidewhy
Copy link

Even the CoreOS alpha is on v0.11.8, it's hard to believe all CoreOS users are affected by this bug :(

@dongsupark
Copy link
Contributor

@ohjames True. v0.11.8 does not contain the fix.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@kayrus kayrus

Labels
kind/support
Projects
None yet
Milestone
v0.13.0
Development

No branches or pull requests
5 participants
@insidewhy @jonboulle @kayrus @dongsupark @r0ps3c








ApplySandwichStrip

pFad - (p)hone/(F)rame/(a)nonymizer/(d)eclutterfier!      Saves Data!


--- a PPN by Garber Painting Akron. With Image Size Reduction included!

Fetched URL: https://github.com/coreos/fleet/issues/1425

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy