Bug 1899289
| Summary: | [4.6.z] Need to set GODEBUG=x509ignoreCN=0 in initrd | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Micah Abbott <miabbott> |
| Component: | RHCOS | Assignee: | Nikita Dubrovskii (IBM) <ndubrovs> |
| Status: | CLOSED ERRATA | QA Contact: | Michael Nguyen <mnguyen> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 4.6 | CC: | bbreard, bgilbert, danili, imcleod, jlebon, jligon, miabbott, mnguyen, ndubrovs, nstielau, sdodson, slowrie, smilner, walters, wvoesch |
| Target Milestone: | --- | ||
| Target Release: | 4.6.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | non-multi-arch, bootimage | ||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1886134 | Environment: | |
| Last Closed: | 2020-11-30 16:46:09 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1886134 | ||
| Bug Blocks: | 1899176 | ||
|
Description
Micah Abbott
2020-11-18 20:06:39 UTC
I don't have access to z systems but I verified that the dracut module is in 4.6.0-0.nightly-2020-11-22-160856 and RHCOS 46.82.202011210620-0 has the environment variable set. $ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.6.0-0.nightly-2020-11-22-160856 True False 67s Cluster version is 4.6.0-0.nightly-2020-11-22-160856 $ oc get nodes NAME STATUS ROLES AGE VERSION ip-10-0-130-200.us-west-2.compute.internal Ready master 26m v1.19.0+43983cd ip-10-0-137-216.us-west-2.compute.internal Ready worker 16m v1.19.0+43983cd ip-10-0-176-34.us-west-2.compute.internal Ready master 25m v1.19.0+43983cd ip-10-0-189-58.us-west-2.compute.internal Ready worker 16m v1.19.0+43983cd ip-10-0-196-76.us-west-2.compute.internal Ready master 26m v1.19.0+43983cd ip-10-0-209-11.us-west-2.compute.internal Ready worker 17m v1.19.0+43983cd $ oc debug node/ip-10-0-130-200.us-west-2.compute.internal Starting pod/ip-10-0-130-200us-west-2computeinternal-debug ... To use host binaries, run `chroot /host` If you don't see a command prompt, try pressing enter. sh-4.2# chroot /host sh-4.4# cat /usr/lib/dracut/modules.d/10ignition-godebug/* # https://bugzilla.redhat.com/show_bug.cgi?id=1886134 # Because Ignition which runs in the initrd may interface with external endpoints, # we should set the environment variable in the initrd [Manager] DefaultEnvironment=GODEBUG=x509ignoreCN=0 #!/bin/bash # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*- # ex: ts=8 sw=4 sts=4 et filetype=sh depends() { echo systemd } install() { inst_simple "$moddir/10-default-env-godebug.conf" \ "/etc/systemd/system.conf.d/10-default-env-godebug.conf" } sh-4.4# exit exit sh-4.2# exit exit Removing debug pod ... Entering emergency mode. Exit the shell to continue. Type "journalctl" to view system logs. You might want to save "/run/initramfs/rdsosreport.txt" to a USB stick or /boot after mounting them and attach it to a bug report. :/# :/# :/# env DRACUT_SYSTEMD=1 rflags= INVOCATION_ID=1df0a0730de5400dbc5a297437e483eb hook=emergency PWD=/ root= fstype=auto HOME=/ JOURNAL_STREAM=9:13527 UDEVVERSION=239 hookdir=/lib/dracut/hooks NEWROOT=/sysroot DEBUG_MEM_LEVEL=0 action=Boot TERM=vt220 GODEBUG=x509ignoreCN=0 SHLVL=1 RD_DEBUG=no PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin PS1=:${PWD}# _rdshell_name=dracut _=/usr/bin/env Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.6.6 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:5115 |