Re: [openstack-dev] [keystone] Keystone failing with error 104 (connection reset by peer) if using uwsgi

[Thomas Goirand]

On 03/11/2018 08:12 PM, Lance Bragstad wrote:
> Hey Thomas, 
> 
> Outside of the uwsgi config, are you following a specific guide for your
> install? I'd like to try and recreate the issue.
> 
> Do you happen to have any more logging information?
> 
> Thanks

Hi Lance,

Thanks for your proposal to try to diagnose the issue. Here's the Debian
package:

http://stretch-queens.infomaniak.ch/keystone/

(it's 13.0.0-6, but that's really a backport for Stretch...)

To use that version of Keystone, you will need this Queens repository:

deb http://stretch-queens.infomaniak.ch/debian \
stretch-queens-backports main
deb-src http://stretch-queens.infomaniak.ch/debian \
stretch-queens-backports main
deb http://stretch-queens.infomaniak.ch/debian \
stretch-queens-backports-nochange main
deb-src http://stretch-queens.infomaniak.ch/debian \
stretch-queens-backports-nochange main

(sorry for the email client that is wrapping this...)

this repository contains a full Queens backport for Stretch btw, and
also holds a version of keystone (with Apache), so make sure you're
using the correct uwsgi version from above.

Cheers,

Thomas Goirand (zigo)

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [keystone] Keystone failing with error 104 (connection reset by peer) if using uwsgi

[Lance Bragstad]

On 03/11/2018 06:09 PM, Thomas Goirand wrote:
> On 03/11/2018 08:12 PM, Lance Bragstad wrote:
>> Hey Thomas, 
>>
>> Outside of the uwsgi config, are you following a specific guide for your
>> install?
> Under the packages that I maintain in Debian, there's nothing more to do
> than "apt-get install keystone", reply to a few Debconf questions, and
> you get a working installation. That is to say, I don't think I did any
> mistake here.
Yeah, that's kind of what I figured, but thought I should ask in the
event there was anything suspect in our installation guide.
>
>> I'd like to try and recreate the issue.
> If you wish, I can build a package for you to try, if you're ok with
> that. Would that be ok? Would you prefer to use Sid or Stretch? It's
> rather easy to do, as the revert to Apache is just a single git commit.
If you have a package for Stretch, that'd be great.
>
>> Do you happen to have any more logging information?
> That's what was really frustrating: no log at all on the server side,
> just the client...
>
> Cheers,
>
> Thomas Goirand (zigo)




signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [keystone] Keystone failing with error 104 (connection reset by peer) if using uwsgi

[Thomas Goirand]

On 03/11/2018 08:12 PM, Lance Bragstad wrote:
> Hey Thomas, 
> 
> Outside of the uwsgi config, are you following a specific guide for your
> install?

Under the packages that I maintain in Debian, there's nothing more to do
than "apt-get install keystone", reply to a few Debconf questions, and
you get a working installation. That is to say, I don't think I did any
mistake here.

> I'd like to try and recreate the issue.

If you wish, I can build a package for you to try, if you're ok with
that. Would that be ok? Would you prefer to use Sid or Stretch? It's
rather easy to do, as the revert to Apache is just a single git commit.

> Do you happen to have any more logging information?

That's what was really frustrating: no log at all on the server side,
just the client...

Cheers,

Thomas Goirand (zigo)

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [keystone] Keystone failing with error 104 (connection reset by peer) if using uwsgi

[Lance Bragstad]

Hey Thomas,

Outside of the uwsgi config, are you following a specific guide for your
install? I'd like to try and recreate the issue.

Do you happen to have any more logging information?

Thanks

On Mar 11, 2018 06:10, "Thomas Goirand"  wrote:

> Hi,
>
> I've attempted to switch Keystone to using uwsgi instead of Apache in
> the Debian packages for Queens. Unfortunately, I had random failure with
> error 104 in both output of the client and keystone logs. 104 is in fact
> "TCP connection reset by peer" (and this shows in the logs). So I've
> switched back, but I'd prefer using uwsgi if possible.
>
> Here's the parameters I had in the .ini for uwsgi:
>
> http-socket = :35357
> wsgi-file = /usr/bin/keystone-wsgi-admin
> buffer-size = 65535
> master = true
> enable-threads = true
> processes = 12
> thunder-lock = true
> plugins = python3
> lazy-apps = true
> paste-logger = true
> logto = /var/log/keystone/keystone-admin.log
> name = keystone-admin
> uid = keystone
> gid = keystone
> chdir = /var/lib/keystone
> die-on-term = true
>
> Has this happened to anyone else? Is there one option above which is
> wrong? Why is this happening?
>
> Cheers,
>
> Thomas Goirand (zigo)
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev