Cant Add ubuntu/debian resource #42052

mezoology · 2024-05-27T13:26:24Z

mezoology
May 27, 2024

Hello Team,

I managed to install Teleport v15 on docker behind traefik. work well other than adding resource server debian or ubuntu.

Teleport docker container logs are:

2024-05-27T12:24:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:24:38Z ERRO             "Error during temporary user cleanup: cant find getent binary\n\texec: \"getent\": executable file not found in $PATH" srv/usermgmt.go:469
2024-05-27T12:25:06Z INFO [AUDIT]     join_token.create cluster_name:teleport.domain.com code:TJT00I ei:0 event:join_token.create expires:0001-01-01T00:00:00Z join_method:token roles:[Node] time:2024-05-27T12:25:06.187Z uid:8e11b65a-ea0f-43d0-87da-107bc03edafb user:fist user_kind:1 events/emitter.go:288
2024-05-27T12:25:21Z WARN [DISCOVERY] Unhealthy connection to teleport.domain.com 10.5.5.2:52166: agent disconnected. reversetunnel/conn.go:184
2024-05-27T12:25:21Z WARN [PROXY:SER] Closing remote connection to agent. addr:10.5.5.2:52166 serverID:2b3c4e72-ce48-4dad-b858-6c9be3ff9328.teleport.domain.com trace.fields:map[cluster:teleport.domain.com] reversetunnel/localsite.go:714
2024-05-27T12:25:21Z WARN [PROXY:SER] Failed to close heartbeat channel: EOF trace.fields:map[cluster:teleport.domain.com] reversetunnel/localsite.go:700
2024-05-27T12:25:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:26:05Z INFO [CA]        Generating TLS certificate 1.3.9999.1.7=#131274656c65706f72742e617262746b2e636f6d,1.3.9999.2.11=#13044e6f6465,CN=512a0aac-afe6-48d5-a26e-069a97593ec7.teleport.domain.com,O=Instance,POSTALCODE=null,STREET= dns_names:[test] key_usage:5 not_after:2034-05-25 12:26:05.526107652 +0000 UTC tlsca/ca.go:1200
2024-05-27T12:26:05Z INFO [AUTH]      Instance "test" [512a0aac-afe6-48d5-a26e-069a97593ec7] has joined the cluster. role=Instance, systemRoles=[Node] auth/join.go:440
2024-05-27T12:26:05Z INFO [AUDIT]     instance.join addr.remote:10.5.5.2 cluster_name:teleport.domain.com code:TJ002I ei:0 event:instance.join host_id:512a0aac-afe6-48d5-a26e-069a97593ec7 method:token node_name:test role:Instance success:true time:2024-05-27T12:26:05.531Z token_expires:2024-05-27T16:25:06.177796898Z token_name:************************f88bab26 uid:91f36f1f-4274-4090-acf7-bb060acaa674 events/emitter.go:288
2024-05-27T12:26:06Z INFO [CA]        Generating TLS certificate 1.3.9999.1.7=#131274656c65706f72742e617262746b2e636f6d,CN=512a0aac-afe6-48d5-a26e-069a97593ec7.teleport.domain.com,O=Node,POSTALCODE=null,STREET= dns_names:[test 512a0aac-afe6-48d5-a26e-069a97593ec7] key_usage:5 not_after:2034-05-25 12:26:06.238068296 +0000 UTC tlsca/ca.go:1200
2024-05-27T12:26:06Z INFO [AUTH]      Instance "test" [512a0aac-afe6-48d5-a26e-069a97593ec7] has joined the cluster. role=Node auth/join.go:442
2024-05-27T12:26:06Z INFO [AUDIT]     instance.join addr.remote:10.5.5.2 cluster_name:teleport.domain.com code:TJ002I ei:0 event:instance.join host_id:512a0aac-afe6-48d5-a26e-069a97593ec7 method:token node_name:test role:Node success:true time:2024-05-27T12:26:06.244Z token_expires:2024-05-27T16:25:06.177796898Z token_name:************************f88bab26 uid:779719e6-dea0-4b55-bdd7-685fb13174e3 events/emitter.go:288
2024-05-27T12:26:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:27:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:28:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:29:38Z ERRO             "Error during temporary user cleanup: cant find getent binary\n\texec: \"getent\": executable file not found in $PATH" srv/usermgmt.go:469
2024-05-27T12:29:38Z ERRO             Failed to run command and update label: exec: "hostname": executable file not found in $PATH. labels/labels.go:155
2024-05-27T12:30:16Z INFO [CA]        Generating TLS certificate 1.3.9999.1.15=#13046e6f6e65,1.3.9999.1.9=#130831302e352e352e32,1.3.9999.1.7=#131274656c65706f72742e617262746b2e636f6d,CN=fist,O=editor,POSTALCODE={\"aws_role_arns\":null\,\"azure_identities\":null\,\"db_names\":null\,\"db_roles\":null\,\"db_users\":null\,\"gcp_service_accounts\":null\,\"host_user_gid\":[\"\"]\,\"host_user_uid\":[\"\"]\,\"kubernetes_groups\":null\,\"kubernetes_users\":null\,\"logins\":null\,\"windows_logins\":null},STREET=teleport.domain.com,L=-teleport-nologin-36718243-b054-46b2-aed5-ff597d8b1b44+L=-teleport-internal-join dns_names:[] key_usage:5 not_after:2024-05-27 22:50:34.703297773 +0000 UTC tlsca/ca.go:1200
2024-05-27T12:30:16Z INFO [AUDIT]     cert.create cert_type:user cluster_name:teleport.domain.com code:TC000I ei:0 event:cert.create client_ip:10.5.5.2 expires:2024-05-27T22:50:34.703297773Z logins:[-teleport-nologin-36718243-b054-46b2-aed5-ff597d8b1b44 -teleport-internal-join] prev_identity_expires:0001-01-01T00:00:00Z private_key_policy:none roles:[editor] route_to_cluster:teleport.domain.com teleport_cluster:teleport.domain.com aws_role_arns:<nil> azure_identities:<nil> db_names:<nil> db_roles:<nil> db_users:<nil> gcp_service_accounts:<nil> host_user_gid:[] host_user_uid:[] kubernetes_groups:<nil> kubernetes_users:<nil> logins:<nil> windows_logins:<nil> user:fist time:2024-05-27T12:30:16.155Z uid:223ec0f2-1d1b-4af5-ae77-32bc4d119753 events/emitter.go:288

Please note that on the logs

10.5.5.2 is the traefik container internal ip
[test] is the joining server hostname

Teleport.yaml

version: v3
teleport:
  nodename: teleport.domain.com
  data_dir: /var/lib/teleport
  log:
    output: stderr
    severity: INFO
    format:
      output: text
  ca_pin: ""
  diag_addr: ""
auth_service:
  enabled: "yes"
  listen_addr: 0.0.0.0:3025
  proxy_listener_mode: multiplex
ssh_service:
  enabled: "yes"
  commands:
  - name: hostname
    command: [hostname]
    period: 1m0s
proxy_service:
  web_listen_addr: 0.0.0.0:3080
  public_addr: teleport.domain.com:443
  enabled: "yes"
  https_keypairs: []
  https_keypairs_reload_interval: 0s
  acme: 
    enabled: yes
    email: [email protected]

Teleport Docker-compose.yaml

version: '2'
services:
  teleport:
    image: public.ecr.aws/gravitational/teleport-distroless:15
    container_name: teleport
   # entrypoint: /bin/sh
    # hostname: teleport
    ports:
      - "3023:3023"
      - "3025:3025"
      - "3080:3080"
    volumes:
      - /opt/docker_files/teleport/config:/etc/teleport
      - /opt/docker_files/teleport/data:/var/lib/teleport    
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=net.external"
      - "traefik.tcp.services.teleport.loadBalancer.server.port=3080"
      - "traefik.tcp.routers.teleport.rule=HostSNIRegexp(`teleport.domain.com`, `{subdomain:[a-z]+}.teleport.domain.com`)"
      - "traefik.tcp.routers.teleport.entrypoints=https"
      - "traefik.tcp.routers.teleport.tls.passthrough=true"
      - "traefik.tcp.routers.teleport.service=teleport"

networks:
  default:
    name: frontend
    external: true

journalctl -fu teleport output on the joining node:

root@test:~# journalctl -fu teleport
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [UPLOAD:1]  Creating directory. pid:39547.1 directory:/var/lib/teleport/log/upload service/service.go:3037
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [UPLOAD:1]  Creating directory. pid:39547.1 directory:/var/lib/teleport/log/upload/corrupted service/service.go:3037
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [UPLOAD:1]  Creating directory. pid:39547.1 directory:/var/lib/teleport/log/upload/corrupted/default service/service.go:3037
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [PROC:1]    Reusing Instance client. pid:39547.1 identity:Node additional_system_roles:[Node] service/connect.go:1015
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [UPLOAD]    uploader will scan /var/lib/teleport/log/upload/streaming/default every 5s filesessions/fileasync.go:194
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [UPLOAD:1:] upload completer will run every 5m0s events/complete.go:161
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [PROC:1]    The process successfully wrote the credentials and state to the disk. pid:39547.1 identity:Node service/connect.go:523
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [NODE:1:CA] Cache "node" first init succeeded. cache/cache.go:1001
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [NODE:1]    Service is starting in tunnel mode. pid:39547.1 service/service.go:2886
May 27 12:26:06 test teleport[39547]: 2024-05-27T12:26:06Z INFO [PROC:1]    The new service has started successfully. Starting syncing rotation status. pid:39547.1 sync_interval:10m0s service/connect.go:648

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cant Add ubuntu/debian resource #42052

{{title}}

Replies: 0 comments

Select a reply

Cant Add ubuntu/debian resource #42052

mezoology May 27, 2024

Replies: 0 comments

mezoology
May 27, 2024