No access to VMs/workspaces for user

[craddm]

:white_check_mark: Checklist

• [x] I have searched open and closed issues for duplicates.
• [x] This is a problem observed when deploying a Data Safe Haven.
• [x] I can reproduce this with the latest version.
• [x] I have read through the documentation.
• [x] This isn't an open-ended question (open a discussion if it is).

:computer: System information

• Operating System: macOS
• Data Safe Haven version: craddm/gitea_external_mirror

Note that this branch is up-to-date with develop and should not differ from it on any relevant code

:package: Packages

List of packages

```none Paste list of packages here ```

:no_entry_sign: Describe the problem

On a freshly deployed SRE, my user cannot see any workspaces from the guacamole dashboard. The user is in the correct group on Entra ID.

:deciduous_tree: Log messages

Relevant log messages

The `guacamole_user_sync` container is reporting an out-of-memory error during update of the user database ```none INSERT 0 0 psql:/app/resources/update_users.sql:47: ERROR: out of memory INSERT 0 0 INSERT 0 0 INSERT 0 0 2024-09-23T15:54:46+00:00 Finished database synchronisation Waiting 180 seconds before re-attempting synchronisation ```

:recycle: To reproduce

[JimMadge]

Possibly related problem,

Guacamole interface

[jemrobinson]

@craddm: Can you check whether using guacamole-user-sync:main fixes this problem? If it does, I'll tag it and make a PR to DSH.

[JimMadge]

@jemrobinson What changes were made in that container?

I'm deploying with a larger memory allocation to guacamole-user-sync to see if that makes a difference 🤞.

[jemrobinson]

What changes were made in that container?

• Full rewrite in Python
• Reduced container size

[craddm]

testing now

[JimMadge]

Increasing the memory available to the guacamole-user-sync container to 1Gi still gives the OOM error. No workspaces appear.

[craddm]

Not working at all:

[JimMadge]

I'm getting the same, lots of restarts. Unfortunately you can't see the logs 😶.

[jemrobinson]

ldap library isn't properly included in the current Docker image.

[JimMadge]

Something @craddm or I can work on in https://github.com/alan-turing-institute/guacamole-user-sync ?

[jemrobinson]

Here's the issue https://github.com/alan-turing-institute/guacamole-user-sync/issues/17