labring / FastGPT

FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.
https://tryfastgpt.ai
Other
17.51k stars 4.7k forks source link

permissions on /data/mongodb.key are too open #834

Closed showifconfig closed 8 months ago

showifconfig commented 8 months ago

例行检查

你的版本

问题描述 按照官方文档部署,docker-compose up -d启动3个容器后,mongo容器马上挂掉 复现步骤 docker logs mongo日志如下: {"t":{"$date":"2024-02-06T05:27:30.738+00:00"},"s":"I", "c":"CONTROL", "id":23285, "ctx":"main","msg":"Automatically disabling TLS 1.0, to force-enable TLS 1.0 specify --sslDisabledProtocols 'none'"} {"t":{"$date":"2024-02-06T05:27:30.740+00:00"},"s":"I", "c":"NETWORK", "id":4648601, "ctx":"main","msg":"Implicit TCP FastOpen unavailable. If TCP FastOpen is required, set tcpFastOpenServer, tcpFastOpenClient, and tcpFastOpenQueueSize."} {"t":{"$date":"2024-02-06T05:27:30.740+00:00"},"s":"I", "c":"ACCESS", "id":20254, "ctx":"main","msg":"Read security file failed","attr":{"error":{"code":30,"codeName":"InvalidPath","errmsg":"permissions on /data/mongodb.key are too open"}}}

并且按照 的方式 openssl rand -base64 128 > ./mongodb/keyFile 创建后,报类似的错误: {"t":{"$date":"2024-02-06T03:01:44.971+00:00"},"s":"I", "c":"NETWORK", "id":4915701, "ctx":"main","msg":"Initialized wire specification","attr":{"spec":{"incomingExternalClient":{"minWireVersion":0,"maxWireVersion":13},"incomingInternalClient":{"minWireVersion":0,"maxWireVersion":13},"outgoing":{"minWireVersion":0,"maxWireVersion":13},"isInternalClient":true}}} {"t":{"$date":"2024-02-06T03:01:44.972+00:00"},"s":"I", "c":"CONTROL", "id":23285, "ctx":"main","msg":"Automatically disabling TLS 1.0, to force-enable TLS 1.0 specify --sslDisabledProtocols 'none'"} {"t":{"$date":"2024-02-06T03:01:44.972+00:00"},"s":"W", "c":"ASIO", "id":22601, "ctx":"main","msg":"No TransportLayer configured during NetworkInterface startup"} {"t":{"$date":"2024-02-06T03:01:44.972+00:00"},"s":"I", "c":"NETWORK", "id":4648601, "ctx":"main","msg":"Implicit TCP FastOpen unavailable. If TCP FastOpen is required, set tcpFastOpenServer, tcpFastOpenClient, and tcpFastOpenQueueSize."} {"t":{"$date":"2024-02-06T03:01:44.975+00:00"},"s":"I", "c":"ACCESS", "id":20254, "ctx":"main","msg":"Read security file failed","attr":{"error":{"code":30,"codeName":"InvalidPath","errmsg":"permissions on /data/mongodb/keyFile are too open"}}} {"t":{"$date":"2024-02-06T03:01:44.975+00:00"},"s":"I", "c":"ASIO", "id":22582, "ctx":"main","msg":"Killing all outstanding egress activity."} {"t":{"$date":"2024-02-06T03:01:44.976+00:00"},"s":"F", "c":"CONTROL", "id":20575, "ctx":"main","msg":"Error creating service context","attr":{"error":"Location5579201: Unable to acquire security key[s]"}}

已经更改权限 chmod 600 以及chown 999:root 预期结果 正常运行 相关截图 image image

sfasfafs commented 8 months ago

同样问题,用上个版本就可以 https://github.com/labring/FastGPT/blob/v4.6.7/files/deploy/fastgpt/docker-compose.yml

c121914yu commented 8 months ago

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿


For the same problem, just use the previous version, https://github.com/labring/FastGPT/blob/v4.6.7/files/deploy/fastgpt/docker-compose.yml. The fastgpt image needs to be modified from latest to v4. 6.7

c121914yu commented 8 months ago

https://github.com/labring/FastGPT/issues/823 相同问题

zsinba commented 8 months ago

the same.