Skip to content

Conversation

@olehermanse
Copy link
Member

Reverts #2969

@olehermanse
Copy link
Member Author

It seems this did cause some unexpected issues. See:
olehermanse/cfengine-allow-hosts#1

@craigcomstock
Copy link
Contributor

I can try this change later when I retry my scenario. 👍

@craigcomstock
Copy link
Contributor

looking at debug cf-serverd logs here is some context around the failure I saw

 verbose: 12.202.69.3>          Received:     MD5 modules/packages/apk                                                                
   debug: 12.202.69.3>     ShortcutsExpand: Path 'modules/packages/apk' became: /var/cfengine/modules//packages/apk
 verbose: 12.202.69.3>     Translated to:     MD5 /var/cfengine/modules/packages/apk
   debug: 12.202.69.3>     Admit IP due to rule: 12.202.69.3
   debug: 12.202.69.3>     acl_CheckPath: '/var/cfengine/modules/packages/apk' found in ACL entry '/var/cfengine/modules/', admit=true
   debug: 12.202.69.3>     Hashes matched ok
   debug: 12.202.69.3>     SendTransaction header: t 9
   debug: 12.202.69.3>     SendTransaction data: CFD_FALSE
   debug: select(): 1
   debug: Socket descriptor returned from accept(): 12
 verbose: Obtained IP address of '12.202.69.3' on socket 12 from accept
   debug: Purging Old Connections...
   debug: Done purging old connections
   error: Remote host '12.202.69.3' is not in allowallconnects, denying second simultaneous connection
 verbose: CollectCallHasPending: false
   debug: Waiting at incoming select...
   debug: select(): 0
 verbose: CollectCallHasPending: false
   debug: Waiting at incoming select...
   debug: select(): 0
 verbose: CollectCallHasPending: false
   debug: Waiting at incoming select...
   debug: select(): 1
   debug: Socket descriptor returned from accept(): 12
 verbose: Obtained IP address of '12.202.69.3' on socket 12 from accept
   debug: Purging Old Connections...
   debug: Done purging old connections
   error: Remote host '12.202.69.3' is not in allowallconnects, denying second simultaneous connection
 verbose: CollectCallHasPending: false
   debug: Waiting at incoming select...

@olehermanse
Copy link
Member Author

olehermanse commented Apr 24, 2025

Created followup: https://northerntech.atlassian.net/browse/ENT-12774. Merging since this seems to improve on the current state.

@olehermanse olehermanse merged commit 2cb3f4d into master Apr 24, 2025
4 checks passed
@olehermanse olehermanse deleted the revert-2969-master branch January 2, 2026 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants