Cannot build due to certificate problem

Icinga 2
1

Hello,
I am trying to build Icinga from dockerfile here https://github.com/aditosoftware/docker-icinga2
But there is problem with certificates during install, and during icinga2 node wizard

During install:
…
Creating config file /etc/icinga2/features-available/ido-mysql.conf with new version
checking privileges on database icinga2 for icinga2@localhost: user creation needed.
granting access to database icinga2 for icinga2@localhost: success.
verifying access for icinga2@localhost: success.
creating database icinga2: success.
verifying database icinga2 exists: success.
populating database via sql… done.
dbconfig-common: flushing administrative password
Processing triggers for libc-bin (2.27-3ubuntu1) …
Enabling feature ido-mysql. Make sure to restart Icinga 2 for these changes to take effect.
Module rewrite already enabled
Successfully created configuration directory /etc/icingaweb2
information/cli: Generating new CA.
information/base: Writing private key to ‘/var/lib/icinga2/ca//ca.key’.
critical/Application: Error: getentropy

Additional information is available in '/var/log/icinga2/crash/report.1588086451.173383'

Aborted
Enabling feature command. Make sure to restart Icinga 2 for these changes to take effect.
Disabling feature mainlog. Make sure to restart Icinga 2 for these changes to take effect.

root@icinga2:/# cat /var/log/icinga2/crash/report.1588086451.173383
Caught unhandled exception.
Current time: 2020-04-28 15:07:31 +0000

  Application version: r2.11.3-1

System information:
  Platform: Ubuntu
  Platform version: 18.04.4 LTS (Bionic Beaver)
  Kernel: Linux
  Kernel version: 3.16.0-10-amd64
  Architecture: x86_64

Build information:
  Compiler: GNU 8.3.0
  Build host: runner-LTrJQZ9N-project-298-concurrent-0

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

Error: getentropy

        (0) icinga2: icinga::CreateCert(evp_pkey_st*, X509_name_st*, X509_name_st*, evp_pkey_st*, bool) (+0xae) [0x55e859d093ce]
        (1) icinga2: icinga::MakeX509CSR(icinga::String const&, icinga::String const&, icinga::String const&, icinga::String const&, bool) (+0x3c1) [0x55e859d0d101]
        (2) icinga2: icinga::PkiUtility::NewCa() (+0xde) [0x55e859c0eb0e]
        (3) icinga2: icinga::ApiSetupUtility::SetupMasterCertificates(icinga::String const&) (+0xa9) [0x55e859b79cd9]
        (4) icinga2: icinga::ApiSetupUtility::SetupMaster(icinga::String const&, bool) (+0x10) [0x55e859b7a820]
        (5) icinga2: icinga::ApiSetupCommand::Run(boost::program_options::variables_map const&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) const (+0xcb) [0x55e859b7a94b]
        (6) icinga2: <unknown function> (+0x77c8dd) [0x55e859d878dd]
        (7) icinga2: main (+0xbe) [0x55e85990f36e]
        (8) libc.so.6: __libc_start_main (+0xe7) [0x7f9f46b1eb97]
        (9) icinga2: _start (+0x2a) [0x55e85990f3ea]


***
* This would indicate a runtime problem or configuration error. If you believe this is a bug in Icinga 2
* please submit a bug report at https://github.com/Icinga/icinga2 and include this stack trace as well as any other
* information that might be useful in order to reproduce this problem.
***
Failed to launch GDB: No such file or directory






root@icinga2:/# icinga2 node wizard
Welcome to the Icinga 2 Setup Wizard!

We will guide you through all required configuration details.

Please specify if this is an agent/satellite setup ('n' installs a master setup) [Y/n]: n

Starting the Master setup routine...

Please specify the common name (CN) [icinga2.docker2.minerva.lt]:
Reconfiguring Icinga...
Checking for existing certificates for common name 'icinga2.docker2.minerva.lt'...
Certificates not yet generated. Running 'api setup' now.
critical/Application: Error: getentropy


Additional information is available in '/var/log/icinga2/crash/report.1588089005.190064'

Abortedroot@icinga2:/# cat /var/log/icinga2/crash/report.1588089005.190064
Caught unhandled exception.
Current time: 2020-04-28 15:50:05 +0000

  Application version: r2.11.3-1

System information:
  Platform: Ubuntu
  Platform version: 18.04.4 LTS (Bionic Beaver)
  Kernel: Linux
  Kernel version: 3.16.0-10-amd64
  Architecture: x86_64

Build information:
  Compiler: GNU 8.3.0
  Build host: runner-LTrJQZ9N-project-298-concurrent-0

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

Error: getentropy

        (0) icinga2: icinga::CreateCert(evp_pkey_st*, X509_name_st*, X509_name_st*, evp_pkey_st*, bool) (+0xae) [0x55f6ca6873ce]
        (1) icinga2: icinga::MakeX509CSR(icinga::String const&, icinga::String const&, icinga::String const&, icinga::String const&, bool) (+0x3c1) [0x55f6ca68b101]
        (2) icinga2: icinga::PkiUtility::NewCa() (+0xde) [0x55f6ca58cb0e]
        (3) icinga2: icinga::ApiSetupUtility::SetupMasterCertificates(icinga::String const&) (+0xa9) [0x55f6ca4f7cd9]
        (4) icinga2: icinga::NodeWizardCommand::MasterSetup() const (+0x11b9) [0x55f6ca5036f9]
        (5) icinga2: icinga::NodeWizardCommand::Run(boost::program_options::variables_map const&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) const (+0x375) [0x55f6ca503f25]
        (6) icinga2: <unknown function> (+0x77c8dd) [0x55f6ca7058dd]
        (7) icinga2: main (+0xbe) [0x55f6ca28d36e]
        (8) libc.so.6: __libc_start_main (+0xe7) [0x7f97a504fb97]
        (9) icinga2: _start (+0x2a) [0x55f6ca28d3ea]


***
* This would indicate a runtime problem or configuration error. If you believe this is a bug in Icinga 2
* please submit a bug report at https://github.com/Icinga/icinga2 and include this stack trace as well as any other
* information that might be useful in order to reproduce this problem.
***
Failed to launch GDB: No such file or directory
2

Also, icinga2 api setup gives error:

root@icinga2:/# icinga2 api setup
information/cli: Generating new CA.
information/base: Writing private key to '/var/lib/icinga2/ca//ca.key'.
critical/Application: Error: getentropy


Additional information is available in '/var/log/icinga2/crash/report.1588097667.084730'

Aborted


root@icinga2:/# cat /var/log/icinga2/crash/report.1588097667.084730
Caught unhandled exception.
Current time: 2020-04-28 18:14:27 +0000

  Application version: r2.11.3-1

System information:
  Platform: Ubuntu
  Platform version: 18.04.4 LTS (Bionic Beaver)
  Kernel: Linux
  Kernel version: 3.16.0-10-amd64
  Architecture: x86_64

Build information:
  Compiler: GNU 8.3.0
  Build host: runner-LTrJQZ9N-project-298-concurrent-0

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

Error: getentropy

        (0) icinga2: icinga::CreateCert(evp_pkey_st*, X509_name_st*, X509_name_st*, evp_pkey_st*, bool) (+0xae) [0x56352ba8f3ce]
        (1) icinga2: icinga::MakeX509CSR(icinga::String const&, icinga::String const&, icinga::String const&, icinga::String const&, bool) (+0x3c1) [0x56352ba93101]
        (2) icinga2: icinga::PkiUtility::NewCa() (+0xde) [0x56352b994b0e]
        (3) icinga2: icinga::ApiSetupUtility::SetupMasterCertificates(icinga::String const&) (+0xa9) [0x56352b8ffcd9]
        (4) icinga2: icinga::ApiSetupUtility::SetupMaster(icinga::String const&, bool) (+0x10) [0x56352b900820]
        (5) icinga2: icinga::ApiSetupCommand::Run(boost::program_options::variables_map const&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) const (+0xcb) [0x56352b90094b]
        (6) icinga2: <unknown function> (+0x77c8dd) [0x56352bb0d8dd]
        (7) icinga2: main (+0xbe) [0x56352b69536e]
        (8) libc.so.6: __libc_start_main (+0xe7) [0x7fe57b297b97]
        (9) icinga2: _start (+0x2a) [0x56352b6953ea]


***
* This would indicate a runtime problem or configuration error. If you believe this is a bug in Icinga 2
* please submit a bug report at https://github.com/Icinga/icinga2 and include this stack trace as well as any other
* information that might be useful in order to reproduce this problem.
***
Failed to launch GDB: No such file or directory
3

Did you find a solution? I got a similar error with Jordans Icinga container.

4

Hi, sorry for late answer. I switched to Jordans Icinga container. It works from me “from scratch”. I added apt install locale and locale-all install and set container locale to UTF-8, since by default in Jordans container the settings are POSIX, so basic ascii which causes a lot of troubles if you use diacrytic signs.

1 Like