user159192121's questions

My documentroot is a symlink. When puppet agent runs, the symlink gets removed. Any ideas?

My code:

'qsu.mydomain.de:443':
ssl: true
port: 443
ssl_key:    '/etc/apache2/ssl/qsu.mydomain2.de.key'
ssl_cert:   '/etc/apache2/ssl//qsu.mydomain2.de.crt'
ssl_cipher: 'HIGH:MEDIUM:!aNULL:!MD5:!RC4:!3DES'
ssl_protocol: 'all -SSLv2 -SSLv3'
priority: '25'
serveradmin: '[email protected]'
servername: 'qsu.mydomain.de'
serveraliases:
  - 'mydomain.de'
manage_docroot: false
docroot: '/var/www/mydomain2-web-usr/htdocs'
directoryindex: 'index.html index.htm index.php'
error_log_file:  'qsu.mydomain2.de_ssl_error.log'
access_log_file: 'qsu.mydomain2.de_ssl_access.log'
suexec_user_group: 'mydomain2-web-usr mydomain2-web-usr'
aliases:
  - scriptalias: /cgi-bin/
    path: /var/www/mydomain2-web-usr/cgi-bin/
setenv:
  - 'TYPO3_CONTEXT Production'
directories:
  - path: '/var/www/mydomain2-web-usr/htdocs'
    allow_override: ['all']
    order: 'Allow,Deny'
    options: ['+FollowSymLinks', '-Indexes']
    custom_fragment: |
      <Files ~ (\\.php)>
        SetHandler fcgid-script
        FCGIWrapper /var/www/.conf/fcgid/mydomain2-web-usr/fcgid .php
        Options +ExecCGI
        allow from all
      </Files>

i have created a TLS private docker registry. I have updated the ca-trust in the machine that I want to pull from and it works, curl works without the -k parameter, docker can pull etc. However, the openshift import-image command fails, due to signed by unknown authority error. Openshift secrets are mostly for username and passwords, I haven't found any example on the internet about importing certificates. I also have to mention that this registry works fine as an insecure registry. Any ideas?

I want to integrate my existing jenkins pipelines(external server) to openshift. I have found many commands about manipulating openshift through jenkins, but what I want to achieve is in the following photo, jenkins outputs shown to openshift. Any ideas?

Openshift jenkins integrated pipeline

when I push to the registry, I get a 500 internal error message. Openshift registry logs are:

time="2017-03-01T07:46:47.970130059Z" level=error msg="response    
 completed with error" err.code=unknown err.detail="User                               
\"system:serviceaccount:default:registry\" cannot create  
  imagestreammappings in project \"default\"" err.message="unknown error" go.version=go1.7.4 
http.request.contenttype="application/vnd.docker.distribution.manifest.v1+
prettyjws" 

I am trying to add a node to my openshift master via openshift ansible playbooks. I try to add the node with the following command(it starts from systemd)

/usr/bin/docker run --name origin-node --rm --privileged --net=host --pid=host --env-file=/etc/sysconfig/origin-node -v /:/rootfs:ro -e CONFIG_FILE=${CONFIG_FILE} -e OPTIONS=${OPTIONS} -e HOST=/rootfs -e HOST_ETC=/host-etc -v /var/lib/origin:/var/lib/origin:rslave -v /etc/origin/node:/etc/origin/node -v /etc/localtime:/etc/localtime:ro -v /etc/machine-id:/etc/machine-id:ro -v /run:/run -v /sys:/sys:rw -v /sys/fs/cgroup:/sys/fs/cgroup:rw -v /usr/bin/docker:/usr/bin/docker:ro -v /var/lib/docker:/var/lib/docker -v /lib/modules:/lib/modules -v /etc/origin/openvswitch:/etc/openvswitch -v /etc/origin/sdn:/etc/openshift-sdn -v /etc/systemd/system:/host-etc/systemd/system -v /var/log:/var/log -v /dev:/dev $DOCKER_ADDTL_BIND_MOUNTS openshift/node

The problem is that the node can not fetch configuration from the master. I have tried to add the certificate with CURL_CA_BUNDLE export, curl works but openshift still doesn't. Anyway, the error I get is this:

I0130 19:19:44.029170   76719 start_node.go:250] Reading node configuration from /etc/origin/node/node-config.yaml
F0130 19:19:44.041799   76719 start_node.go:139] cannot fetch "default" cluster network: Get https://10.4.254.28:8443/oapi/v1/clusternetworks/default: x509: certificate signed by unknown authority

Keep in mind that I also have trusted the certificate from the local OS, still no luck..

I have a fresh install of openshift and I am logged in with credentials system:admin(via oc). When I try to get the list of the routers, I get this:

[root@centos2 master]# oadm router --dry-run     --credentials='/etc/openshift/master/openshift-router.kubeconfig'     --service-account=router
Flag --credentials has been deprecated, use --service-account to specify the service account the router will use to make API calls
error: can't check for existing router "router": User "system" cannot get services in project "default"

I also can not add a new router and get information about the services. I have tried with other users, too. I guess that it is a privileges related issue. Any ideas? Thanks

I am using the following line into the apache configuration to get the accesslog via the syslog:

  CustomLog "|/usr/bin/logger -p local1.notice -t apache-mycompany" common

However, there is another setup where apache doesn't use vhosts, there is just a 00default file(front nginx does the vhosting) and i want to be able to distinguish. Is there any way to add a variable in the -t argument that distinguishes each site access? I guess it can be the URL or the folder that holds the file.

Thanks