Closed soportekenai closed 3 years ago
@soportekenai did you try with this:
$ sudo chown 886:886 ./cert.pem ./key.pem
Hello, I no longer have the problem, but now this happens to me
soportekenai@instance-2:~$ cd the-things-stack
soportekenai@instance-2:~/the-things-stack$ ls
acme ca-key.pem ca.json cert.csr cert.pem docker-compose.yml
blob ca.csr ca.pem cert.json config key.pem
soportekenai@instance-2:~/the-things-stack$ sudo chown 886:886 ./cert.pem ./key.pem
soportekenai@instance-2:~/the-things-stack$ docker-compose up
Starting the-things-stack_cockroach_1 ... done
Starting the-things-stack_redis_1 ... done
Starting the-things-stack_stack_1 ... done
Attaching to the-things-stack_redis_1, the-things-stack_cockroach_1, the-things-stack_stack_1
redis_1 | 1:C 23 Mar 2021 08:10:22.502 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo
redis_1 | 1:C 23 Mar 2021 08:10:22.502 # Redis version=6.2.1, bits=64, commit=00000000,
modified=0, pid=1, just started
redis_1 | 1:C 23 Mar 2021 08:10:22.502 # Configuration loaded
cockroach_1 |
cockroach_1 | WARNING: ALL SECURITY CONTROLS HAVE BEEN DISABLED!
cockroach_1 |
cockroach_1 | This mode is intended for non-production testing only.
cockroach_1 |
cockroach_1 | In this mode:
cockroach_1 | - Your cluster is open to any client that can access any of your IP addresse
s.
cockroach_1 | - Intruders with access to your machine or network can observe client-server
traffic.
cockroach_1 | - Intruders can log in without password and read or write any data in the cl
uster.
cockroach_1 | - Intruders can consume all your server's resources and cause unavailability
.
cockroach_1 |
redis_1 | 1:M 23 Mar 2021 08:10:22.503 monotonic clock: POSIX clock_gettime
redis_1 | 1:M 23 Mar 2021 08:10:22.506 Running mode=standalone, port=6379.
redis_1 | 1:M 23 Mar 2021 08:10:22.506 # Server initialized
redis_1 | 1:M 23 Mar 2021 08:10:22.510 DB loaded from append only file: 0.002 seconds
redis_1 | 1:M 23 Mar 2021 08:10:22.510 Ready to accept connections
cockroach_1 |
cockroach_1 | INFO: To start a secure server without mandating TLS for clients,
cockroach_1 | consider --accept-sql-without-tls instead. For other options, see:
cockroach_1 |
cockroach_1 | - https://go.crdb.dev/issue-v/53404/v20.2
cockroach_1 | - https://www.cockroachlabs.com/docs/v20.2/secure-a-cluster.html
cockroach_1 |
cockroach_1 |
cockroach_1 | WARNING: neither --listen-addr nor --advertise-addr was specified.
cockroach_1 | The server will advertise "1bc461a070f2" to other nodes, is this routable?
cockroach_1 |
cockroach_1 | Consider using:
cockroach_1 | - for local-only servers: --listen-addr=localhost
cockroach_1 | - for multi-node clusters: --advertise-addr=<host/IP addr>
cockroach_1 |
cockroach_1 | *
cockroach_1 | CockroachDB node starting at 2021-03-23 08:10:23.473071259 +0000 UTC (took 0.4s)
cockroach_1 | build: CCL v20.2.6 @ 2021/03/15 16:04:08 (go1.13.14)
cockroach_1 | webui: http://1bc461a070f2:26256
cockroach_1 | sql: postgresql://root@1bc461a070f2:26257?sslmode=disable
cockroach_1 | RPC client flags: /cockroach/cockroach
stack_1 | WARN No cookie hash key configured, generated a random one
stack_1 | WARN No cookie block key configured, generated a random one
stack_1 | INFO Setting up Identity Server
stack_1 | INFO Setting up Gateway Server
stack_1 | INFO Setting up Network Server
stack_1 | INFO Setting up Application Server
stack_1 | INFO Setting up Join Server
stack_1 | INFO Setting up Console
stack_1 | INFO Setting up Gateway Configuration Server
stack_1 | INFO Setting up Device Template Converter
stack_1 | INFO Setting up QR Code Generator
stack_1 | INFO Setting up Packet Broker Agent
stack_1 | INFO Setting up Device Repository
stack_1 | INFO Starting...
stack_1 | WARN No cluster key configured, generated a random one key=4916b03d6414fc9f59ed57f339c5c1e899a253fa54904a68ef032e4293d156cf namespace=cluster
stack_1 | INFO Listening for connections address=:1884 namespace=grpc protocol=gRPC
stack_1 | INFO Listening for connections address=:8884 namespace=grpc protocol=gRPC/tls
stack_1 | INFO Listening for connections address=:1885 namespace=web protocol=Web
stack_1 | INFO Listening for connections address=:8885 namespace=web protocol=Web/tls
stack_1 | INFO Listening for connections address=:8886 namespace=interop protocol=Interop/tls
stack_1 | INFO Request handled duration=1.8ms http.method=GET http.path=/ http.status=302 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25J982JYKKT6X00N340NZ
stack_1 | INFO Request handled duration=6.2ms http.method=GET http.path=/console/ http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25JAHF694894EGHZPD7ST
stack_1 | INFO Request handled duration=87.3ms http.method=GET http.path=/assets/console.0e123774dab07f5af7e8.css http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25JNQWRNH80AXZ2CCS17B
stack_1 | INFO Request handled duration=624.5ms http.method=GET http.path=/assets/console.237b53dbda6da37ec63f.js http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25JPR94QKTM08ZJPY5NGG
stack_1 | INFO Request handled duration=1.1ms http.method=GET http.path=/assets/console-touch-icon.png http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25M358G6PTXXPQX6SS2QQ
stack_1 | INFO Request handled duration=2.2ms http.method=GET http.path=/assets/console-favicon.svg http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25M34JK4EKNPSM1P54W1N
stack_1 | INFO Client error duration=1.7ms http.method=GET http.path=/console/api/auth/token http.status=401 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25MJ5SK1B79RYPZSX5ADG
stack_1 | INFO Request handled duration=4.5ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.80c998aa03640281d556814a14e1d9c8.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25MJ6N6BXFVW0H04R15H2
stack_1 | INFO Request handled duration=1.3ms http.method=GET http.path=/assets/logo.svg http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25MM8RQA8XGD0E7F2WZW2
stack_1 | INFO Request handled duration=500µs http.method=GET http.path=/console/login/ttn-stack http.status=302 namespace=web peer.address=176.85.79.1:33686 peer.real_ip=176.85.79.1 request_id=01F1F25MNEWY77YTE2M2ATN17Y
stack_1 | INFO Request handled duration=2.3ms http.method=GET http.path=/assets/materialicons.13a768c54630377e6c74a51096c9c6ef.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MNPRX90FJR92FE0VJNP
stack_1 | INFO Request handled duration=2.1ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.d683bfb394f888c5820ce11fc4770fd8.woff http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25MP7S1T4JDEAMV1JRENX
stack_1 | INFO Request handled duration=3.8ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33689 peer.real_ip=176.85.79.1 request_id=01F1F25MQJZBPYXA3VF5C0KXPH
stack_1 | INFO Request handled duration=900µs http.method=GET http.path=/oauth/login http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MSNM6P9TMBNV8CBBZAE
stack_1 | INFO Request handled duration=31.4ms http.method=GET http.path=/assets/account.c4add40ee48703b9c8a5.css http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MX2054X55D0BWYH69H1
stack_1 | INFO Request handled duration=190.7ms http.method=GET http.path=/assets/account.1138afa41a3aadcd4de8.js http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25MX65ASC4DZGD7W7DQMV
stack_1 | INFO Client error duration=500µs http.method=GET http.path=/oauth/api/me http.status=401 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NMFCH8J3R2H3ZD2GGXE
stack_1 | INFO Request handled duration=200µs http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.80c998aa03640281d556814a14e1d9c8.woff2 http.status=206 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NMH4BRWHH0VWGMEGRX8
stack_1 | INFO Client error duration=100µs http.method=GET http.path=/assets/oauth-favicon.svg http.status=404 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NNRXYP80VQ9H8D78DRZ
stack_1 | INFO Client error duration=500µs http.method=GET http.path=/assets/oauth-touch-icon.png http.status=404 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NNR2Z5TF7MN426HXRQY
stack_1 | INFO Request handled duration=1.8ms http.method=GET http.path=/assets/account.svg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NPYDJTJ2SFBBA527CHJ
stack_1 | INFO Request handled duration=3.9ms http.method=GET http.path=/assets/login-visual.ea9089a07c7555eb5df2c02a959dd338.jpg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NS3E3PK8XNGGR3GWT6X
stack_1 | INFO Request handled duration=2ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-700.639c2738552a0376c91e7d485e476fda.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NS9SQAHG39JTE588SEY
stack_1 | INFO Request handled duration=2.3ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-600.117e12cdb861ed7356c805f6f515afbb.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33686 peer.real_ip=176.85.79.1 request_id=01F1F25NSDANR99AE0P3YS4BMA
stack_1 | INFO Request handled duration=144.1ms http.method=POST http.path=/oauth/api/auth/login http.status=204 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262F2Z9M79M2BME9JCH10
stack_1 | INFO Request handled duration=109.7ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262NX1YWDSQAB9M2WN9ZX
stack_1 | INFO Client error duration=2.8ms http.method=GET http.path=/console/oauth/callback http.status=403 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262TGHQCVKNZRG2JQ5Q6F
stack_1 | INFO Client error duration=1.1ms http.method=GET http.path=/console/api/auth/token http.status=401 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F2641Q44Y582AX09GWAN5R
stack_1 | INFO Request handled duration=200µs http.method=GET http.path=/assets/logo.svg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F2643GV6FEDV24RWAFHTPK
stack_1 | INFO Request handled duration=121.2ms http.method=GET http.path=/assets/ttn-console-bg.498252edc489187693a4e32162260925.png http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F2644FC6C1J1789EXVDAX1
stack_1 | INFO Request handled duration=4.7ms http.method=GET http.path=/oauth/login http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JDY3BTJ132ZVJ8TSWVN
stack_1 | INFO Request handled duration=32.1ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JF9DV0GQW57VPTASAYV
stack_1 | INFO Client error duration=3.2ms http.method=GET http.path=/console/oauth/callback http.status=403 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JHRA8E7YNJWYJWK85QW
stack_1 | INFO Request handled duration=0s http.method=GET http.path=/healthz/live http.status=200 namespace=w
Hello, I no longer have the problem, but now this happens to me
soportekenai@instance-2:~$ cd the-things-stack soportekenai@instance-2:~/the-things-stack$ ls acme ca-key.pem ca.json cert.csr cert.pem docker-compose.yml blob ca.csr ca.pem cert.json config key.pem soportekenai@instance-2:~/the-things-stack$ sudo chown 886:886 ./cert.pem ./key.pem soportekenai@instance-2:~/the-things-stack$ docker-compose up Starting the-things-stack_cockroach_1 ... done Starting the-things-stack_redis_1 ... done Starting the-things-stack_stack_1 ... done Attaching to the-things-stack_redis_1, the-things-stack_cockroach_1, the-things-stack_stack_1 redis_1 | 1:C 23 Mar 2021 08:10:22.502 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo redis_1 | 1:C 23 Mar 2021 08:10:22.502 # Redis version=6.2.1, bits=64, commit=00000000, modified=0, pid=1, just started redis_1 | 1:C 23 Mar 2021 08:10:22.502 # Configuration loaded cockroach_1 | cockroach_1 | WARNING: ALL SECURITY CONTROLS HAVE BEEN DISABLED! cockroach_1 | cockroach_1 | This mode is intended for non-production testing only. cockroach_1 | cockroach_1 | In this mode: cockroach_1 | - Your cluster is open to any client that can access any of your IP addresse s. cockroach_1 | - Intruders with access to your machine or network can observe client-server traffic. cockroach_1 | - Intruders can log in without password and read or write any data in the cl uster. cockroach_1 | - Intruders can consume all your server's resources and cause unavailability . cockroach_1 | redis_1 | 1:M 23 Mar 2021 08:10:22.503 monotonic clock: POSIX clock_gettime redis_1 | 1:M 23 Mar 2021 08:10:22.506 Running mode=standalone, port=6379. redis_1 | 1:M 23 Mar 2021 08:10:22.506 # Server initialized redis_1 | 1:M 23 Mar 2021 08:10:22.510 DB loaded from append only file: 0.002 seconds redis_1 | 1:M 23 Mar 2021 08:10:22.510 Ready to accept connections cockroach_1 | cockroach_1 | INFO: To start a secure server without mandating TLS for clients, cockroach_1 | consider --accept-sql-without-tls instead. For other options, see: cockroach_1 | cockroach_1 | - https://go.crdb.dev/issue-v/53404/v20.2 cockroach_1 | - https://www.cockroachlabs.com/docs/v20.2/secure-a-cluster.html cockroach_1 | cockroach_1 | cockroach_1 | WARNING: neither --listen-addr nor --advertise-addr was specified. cockroach_1 | The server will advertise "1bc461a070f2" to other nodes, is this routable? cockroach_1 | cockroach_1 | Consider using: cockroach_1 | - for local-only servers: --listen-addr=localhost cockroach_1 | - for multi-node clusters: --advertise-addr=<host/IP addr> cockroach_1 | cockroach_1 | * cockroach_1 | CockroachDB node starting at 2021-03-23 08:10:23.473071259 +0000 UTC (took 0.4s) cockroach_1 | build: CCL v20.2.6 @ 2021/03/15 16:04:08 (go1.13.14) cockroach_1 | webui: http://1bc461a070f2:26256 cockroach_1 | sql: postgresql://root@1bc461a070f2:26257?sslmode=disable cockroach_1 | RPC client flags: /cockroach/cockroach --host=1bc461a070f2:26257 --insecure cockroach_1 | logs: /cockroach/cockroach-data/logs cockroach_1 | temp dir: /cockroach/cockroach-data/cockroach-temp083194983 cockroach_1 | external I/O path: /cockroach/cockroach-data/extern cockroach_1 | store[0]: path=/cockroach/cockroach-data cockroach_1 | storage engine: pebble cockroach_1 | status: restarted pre-existing node cockroach_1 | clusterID: 09a35609-d628-42c2-b256-91c1f192f89e cockroach_1 | nodeID: 1 stack_1 | INFO Setting up core component stack_1 | WARN No cookie hash key configured, generated a random one stack_1 | WARN No cookie block key configured, generated a random one stack_1 | INFO Setting up Identity Server stack_1 | INFO Setting up Gateway Server stack_1 | INFO Setting up Network Server stack_1 | INFO Setting up Application Server stack_1 | INFO Setting up Join Server stack_1 | INFO Setting up Console stack_1 | INFO Setting up Gateway Configuration Server stack_1 | INFO Setting up Device Template Converter stack_1 | INFO Setting up QR Code Generator stack_1 | INFO Setting up Packet Broker Agent stack_1 | INFO Setting up Device Repository stack_1 | INFO Starting... stack_1 | WARN No cluster key configured, generated a random one key=4916b03d6414fc9f59ed57f339c5c1e899a253fa54904a68ef032e4293d156cf namespace=cluster stack_1 | INFO Listening for connections address=:1884 namespace=grpc protocol=gRPC stack_1 | INFO Listening for connections address=:8884 namespace=grpc protocol=gRPC/tls stack_1 | INFO Listening for connections address=:1885 namespace=web protocol=Web stack_1 | INFO Listening for connections address=:8885 namespace=web protocol=Web/tls stack_1 | INFO Listening for connections address=:8886 namespace=interop protocol=Interop/tls stack_1 | INFO Request handled duration=1.8ms http.method=GET http.path=/ http.status=302 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25J982JYKKT6X00N340NZ stack_1 | INFO Request handled duration=6.2ms http.method=GET http.path=/console/ http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25JAHF694894EGHZPD7ST stack_1 | INFO Request handled duration=87.3ms http.method=GET http.path=/assets/console.0e123774dab07f5af7e8.css http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25JNQWRNH80AXZ2CCS17B stack_1 | INFO Request handled duration=624.5ms http.method=GET http.path=/assets/console.237b53dbda6da37ec63f.js http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25JPR94QKTM08ZJPY5NGG stack_1 | INFO Request handled duration=1.1ms http.method=GET http.path=/assets/console-touch-icon.png http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25M358G6PTXXPQX6SS2QQ stack_1 | INFO Request handled duration=2.2ms http.method=GET http.path=/assets/console-favicon.svg http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25M34JK4EKNPSM1P54W1N stack_1 | INFO Client error duration=1.7ms http.method=GET http.path=/console/api/auth/token http.status=401 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25MJ5SK1B79RYPZSX5ADG stack_1 | INFO Request handled duration=4.5ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.80c998aa03640281d556814a14e1d9c8.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33678 peer.real_ip=176.85.79.1 request_id=01F1F25MJ6N6BXFVW0H04R15H2 stack_1 | INFO Request handled duration=1.3ms http.method=GET http.path=/assets/logo.svg http.status=200 namespace=web peer.address=176.85.79.1:33684 peer.real_ip=176.85.79.1 request_id=01F1F25MM8RQA8XGD0E7F2WZW2 stack_1 | INFO Request handled duration=500µs http.method=GET http.path=/console/login/ttn-stack http.status=302 namespace=web peer.address=176.85.79.1:33686 peer.real_ip=176.85.79.1 request_id=01F1F25MNEWY77YTE2M2ATN17Y stack_1 | INFO Request handled duration=2.3ms http.method=GET http.path=/assets/materialicons.13a768c54630377e6c74a51096c9c6ef.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MNPRX90FJR92FE0VJNP stack_1 | INFO Request handled duration=2.1ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.d683bfb394f888c5820ce11fc4770fd8.woff http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25MP7S1T4JDEAMV1JRENX stack_1 | INFO Request handled duration=3.8ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33689 peer.real_ip=176.85.79.1 request_id=01F1F25MQJZBPYXA3VF5C0KXPH stack_1 | INFO Request handled duration=900µs http.method=GET http.path=/oauth/login http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MSNM6P9TMBNV8CBBZAE stack_1 | INFO Request handled duration=31.4ms http.method=GET http.path=/assets/account.c4add40ee48703b9c8a5.css http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25MX2054X55D0BWYH69H1 stack_1 | INFO Request handled duration=190.7ms http.method=GET http.path=/assets/account.1138afa41a3aadcd4de8.js http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25MX65ASC4DZGD7W7DQMV stack_1 | INFO Client error duration=500µs http.method=GET http.path=/oauth/api/me http.status=401 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NMFCH8J3R2H3ZD2GGXE stack_1 | INFO Request handled duration=200µs http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-regular.80c998aa03640281d556814a14e1d9c8.woff2 http.status=206 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NMH4BRWHH0VWGMEGRX8 stack_1 | INFO Client error duration=100µs http.method=GET http.path=/assets/oauth-favicon.svg http.status=404 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NNRXYP80VQ9H8D78DRZ stack_1 | INFO Client error duration=500µs http.method=GET http.path=/assets/oauth-touch-icon.png http.status=404 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NNR2Z5TF7MN426HXRQY stack_1 | INFO Request handled duration=1.8ms http.method=GET http.path=/assets/account.svg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NPYDJTJ2SFBBA527CHJ stack_1 | INFO Request handled duration=3.9ms http.method=GET http.path=/assets/login-visual.ea9089a07c7555eb5df2c02a959dd338.jpg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F25NS3E3PK8XNGGR3GWT6X stack_1 | INFO Request handled duration=2ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-700.639c2738552a0376c91e7d485e476fda.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F25NS9SQAHG39JTE588SEY stack_1 | INFO Request handled duration=2.3ms http.method=GET http.path=/assets/source-sans-pro-v13-latin_latin-ext-600.117e12cdb861ed7356c805f6f515afbb.woff2 http.status=200 namespace=web peer.address=176.85.79.1:33686 peer.real_ip=176.85.79.1 request_id=01F1F25NSDANR99AE0P3YS4BMA stack_1 | INFO Request handled duration=144.1ms http.method=POST http.path=/oauth/api/auth/login http.status=204 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262F2Z9M79M2BME9JCH10 stack_1 | INFO Request handled duration=109.7ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262NX1YWDSQAB9M2WN9ZX stack_1 | INFO Client error duration=2.8ms http.method=GET http.path=/console/oauth/callback http.status=403 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F262TGHQCVKNZRG2JQ5Q6F stack_1 | INFO Client error duration=1.1ms http.method=GET http.path=/console/api/auth/token http.status=401 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F2641Q44Y582AX09GWAN5R stack_1 | INFO Request handled duration=200µs http.method=GET http.path=/assets/logo.svg http.status=200 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F2643GV6FEDV24RWAFHTPK stack_1 | INFO Request handled duration=121.2ms http.method=GET http.path=/assets/ttn-console-bg.498252edc489187693a4e32162260925.png http.status=200 namespace=web peer.address=176.85.79.1:33687 peer.real_ip=176.85.79.1 request_id=01F1F2644FC6C1J1789EXVDAX1 stack_1 | INFO Request handled duration=4.7ms http.method=GET http.path=/oauth/login http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JDY3BTJ132ZVJ8TSWVN stack_1 | INFO Request handled duration=32.1ms http.method=GET http.path=/oauth/authorize http.status=302 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JF9DV0GQW57VPTASAYV stack_1 | INFO Client error duration=3.2ms http.method=GET http.path=/console/oauth/callback http.status=403 namespace=web peer.address=176.85.79.1:33688 peer.real_ip=176.85.79.1 request_id=01F1F26JHRA8E7YNJWYJWK85QW stack_1 | INFO Request handled duration=0s http.method=GET http.path=/healthz/live http.status=200 namespace=w
Good, I'm closing this issue then.
Try following these steps, as it is already known as a working setup for localhost. Also (if you haven't already) check out the Running The Things Stack as localhost section in our documentation.
Is there some tutorial for the installation in virtual machine of google?
Now the following message appears: Forbidden Client is not authorized to request a token using this method
Is there some tutorial for the installation in virtual machine of google?
Not that I know of.
Now the following message appears: Forbidden Client is not authorized to request a token using this method
Please file a separate issue for this error.
Summary
ERROR Could not start gRPC server open /run/secrets/key.pem: permission denied ...
Steps to Reproduce
the-things-stack_cockroach_1 is up-to-date the-things-stack_redis_1 is up-to-date Creating the-things-stack_stack_1 ... done Attaching to the-things-stack_cockroach_1, the-things-stack_redis_1, the-things-stack_stack_1 cockroach_1 | cockroach_1 | WARNING: ALL SECURITY CONTROLS HAVE BEEN DISABLED! cockroach_1 | cockroach_1 | This mode is intended for non-production testing only. cockroach_1 | cockroach_1 | In this mode: cockroach_1 | - Your cluster is open to any client that can access any of your IP addresses. cockroach_1 | - Intruders with access to your machine or network can observe client-server traffic. cockroach_1 | - Intruders can log in without password and read or write any data in the cluster. cockroach_1 | - Intruders can consume all your server's resources and cause unavailability. cockroach_1 | cockroach_1 | cockroach_1 | INFO: To start a secure server without mandating TLS for clients, cockroach_1 | consider --accept-sql-without-tls instead. For other options, see: cockroach_1 | cockroach_1 | - https://go.crdb.dev/issue-v/53404/v20.2 cockroach_1 | - https://www.cockroachlabs.com/docs/v20.2/secure-a-cluster.html cockroach_1 | cockroach_1 | cockroach_1 | WARNING: neither --listen-addr nor --advertise-addr was specified. cockroach_1 | The server will advertise "1bc461a070f2" to other nodes, is this routable? cockroach_1 | cockroach_1 | Consider using: cockroach_1 | - for local-only servers: --listen-addr=localhost cockroach_1 | - for multi-node clusters: --advertise-addr=<host/IP addr> cockroach_1 | cockroach_1 | cockroach_1 | cockroach_1 | INFO: Replication was disabled for this cluster. cockroach_1 | When/if adding nodes in the future, update zone configurations to increase the replication factor. cockroach_1 | cockroach_1 | CockroachDB node starting at 2021-03-22 11:11:54.915469294 +0000 UTC (took 5.2s) cockroach_1 | build: CCL v20.2.6 @ 2021/03/15 16:04:08 (go1.13.14) cockroach_1 | webui: http://1bc461a070f2:26256 cockroach_1 | sql: postgresql://root@1bc461a070f2:26257?sslmode=disable cockroach_1 | RPC client flags: /cockroach/cockroach --host=1bc461a070f2:26257 --insecure
cockroach_1 | logs: /cockroach/cockroach-data/logs
cockroach_1 | temp dir: /cockroach/cockroach-data/cockroach-temp859079375
cockroach_1 | external I/O path: /cockroach/cockroach-data/extern
cockroach_1 | store[0]: path=/cockroach/cockroach-data
cockroach_1 | storage engine: pebble
cockroach_1 | status: initialized new cluster
cockroach_1 | clusterID: 09a35609-d628-42c2-b256-91c1f192f89e
cockroach_1 | nodeID: 1
redis_1 | 1:C 22 Mar 2021 11:11:41.782 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo
redis_1 | 1:C 22 Mar 2021 11:11:41.782 # Redis version=6.2.1, bits=64, commit=00000000, modified=0, pid=1, just started
redis_1 | 1:C 22 Mar 2021 11:11:41.782 # Configuration loaded
redis_1 | 1:M 22 Mar 2021 11:11:41.783 monotonic clock: POSIX clock_gettime
redis_1 | 1:M 22 Mar 2021 11:11:41.786 Running mode=standalone, port=6379.
redis_1 | 1:M 22 Mar 2021 11:11:41.786 # Server initialized
redis_1 | 1:M 22 Mar 2021 11:11:41.787 Ready to accept connections
stack_1 | INFO Setting up core component
stack_1 | WARN No cookie hash key configured, generated a random one stack_1 | WARN No cookie block key configured, generated a random one stack_1 | INFO Setting up Identity Server
stack_1 | INFO Setting up Gateway Server
stack_1 | INFO Setting up Network Server
stack_1 | INFO Setting up Application Server
stack_1 | INFO Setting up Join Server
stack_1 | INFO Setting up Console
stack_1 | INFO Setting up Gateway Configuration Server stack_1 | INFO Setting up Device Template Converter
stack_1 | INFO Setting up QR Code Generator
stack_1 | INFO Setting up Packet Broker Agent
stack_1 | INFO Setting up Device Repository
stack_1 | INFO Starting...
stack_1 | WARN No cluster key configured, generated a random one key=af0302ea7a2adf0d6 8fc7986350d15dc9cc75fbc30a3ff6d371ac7cfc12900e1 namespace=cluster stack_1 | INFO Listening for connections address=:1884 namespace=grpc p rotocol=gRPC stack_1 | ERROR Could not start gRPC server error=error:pkg/component:list ener (could not create
gRPC/tls
listener) error_cause=open /run/secrets/key.pem: permission denied protocol=gRPC/tls stack_1 | WARN [transport]transport: http2Server.HandleStreams failed to read frame: i o: read/write on closed pipe namespace=grpc stack_1 | error:pkg/component:listener (could not creategRPC/tls
listener) stack_1 | protocol=gRPC/tls stack_1 | --- open /run/secrets/key.pem: permission deniedEnvironment
VM Google Cloud OS UBUNTU 20.04 LTS