running puppetdb on Centos 7

[Mark]

Hello,

I'm trying to transition from Centos 6 to Centos 7 for my puppet master. I have some custom modules that set up puppetmaster and puppetdb. Puppetdb seems to be having issues and I'm not sure why. I'm running puppetdb using postgresql. I've created the user and can confirm that the user hass access to the database however nothing is being initialized in postgres. So if I connect to the puppetdb database nothing is there. 

I've run puppetdb in the forground and got the following error (this is puppetdb 2.3.0 using Java 1.7 on Centos 7)

# puppetdb foreground --debug

Exception in thread "main" java.lang.InternalError, compiling:(digest.clj:85:30)

        at clojure.lang.Compiler.load(Compiler.java:7142)

        at clojure.lang.RT.loadResourceScript(RT.java:370)

        at clojure.lang.RT.loadResourceScript(RT.java:361)

        at clojure.lang.RT.load(RT.java:440)

        at clojure.lang.RT.load(RT.java:411)

        at clojure.core$load$fn__5066.invoke(core.clj:5641)

        at clojure.core$load.doInvoke(core.clj:5640)

        at clojure.lang.RestFn.invoke(RestFn.java:408)

        at clojure.core$load_one.invoke(core.clj:5446)

        at clojure.core$load_lib$fn__5015.invoke(core.clj:5486)

        at clojure.core$load_lib.doInvoke(core.clj:5485)

        at clojure.lang.RestFn.applyTo(RestFn.java:142)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$load_libs.doInvoke(core.clj:5524)

        at clojure.lang.RestFn.applyTo(RestFn.java:137)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$require.doInvoke(core.clj:5607)

        at clojure.lang.RestFn.invoke(RestFn.java:551)

        at puppetlabs.kitchensink.core$eval9$loading__4958__auto____10.invoke(core.clj:7)

        at puppetlabs.kitchensink.core$eval9.invoke(core.clj:7)

        at clojure.lang.Compiler.eval(Compiler.java:6703)

        at clojure.lang.Compiler.eval(Compiler.java:6692)

        at clojure.lang.Compiler.load(Compiler.java:7130)

        at clojure.lang.RT.loadResourceScript(RT.java:370)

        at clojure.lang.RT.loadResourceScript(RT.java:361)

        at clojure.lang.RT.load(RT.java:440)

        at clojure.lang.RT.load(RT.java:411)

        at clojure.core$load$fn__5066.invoke(core.clj:5641)

        at clojure.core$load.doInvoke(core.clj:5640)

        at clojure.lang.RestFn.invoke(RestFn.java:408)

        at clojure.core$load_one.invoke(core.clj:5446)

        at clojure.core$load_lib$fn__5015.invoke(core.clj:5486)

        at clojure.core$load_lib.doInvoke(core.clj:5485)

        at clojure.lang.RestFn.applyTo(RestFn.java:142)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$load_libs.doInvoke(core.clj:5524)

        at clojure.lang.RestFn.applyTo(RestFn.java:137)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$require.doInvoke(core.clj:5607)

        at clojure.lang.RestFn.invoke(RestFn.java:482)

        at com.puppetlabs.puppetdb.core$eval3$loading__4958__auto____4.invoke(core.clj:14)

        at com.puppetlabs.puppetdb.core$eval3.invoke(core.clj:14)

        at clojure.lang.Compiler.eval(Compiler.java:6703)

        at clojure.lang.Compiler.eval(Compiler.java:6692)

        at clojure.lang.Compiler.load(Compiler.java:7130)

        at clojure.lang.RT.loadResourceScript(RT.java:370)

        at clojure.lang.RT.loadResourceScript(RT.java:361)

        at clojure.lang.RT.load(RT.java:440)

        at clojure.lang.RT.load(RT.java:411)

        at clojure.core$load$fn__5066.invoke(core.clj:5641)

        at clojure.core$load.doInvoke(core.clj:5640)

        at clojure.lang.RestFn.invoke(RestFn.java:408)

        at clojure.core$load_one.invoke(core.clj:5446)

        at clojure.core$load_lib$fn__5015.invoke(core.clj:5486)

        at clojure.core$load_lib.doInvoke(core.clj:5485)

        at clojure.lang.RestFn.applyTo(RestFn.java:142)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$load_libs.doInvoke(core.clj:5524)

        at clojure.lang.RestFn.applyTo(RestFn.java:137)

        at clojure.core$apply.invoke(core.clj:626)

        at clojure.core$require.doInvoke(core.clj:5607)

        at clojure.lang.RestFn.invoke(RestFn.java:408)

        at clojure.main$main_opt.invoke(main.clj:315)

        at clojure.main$main.doInvoke(main.clj:420)

        at clojure.lang.RestFn.invoke(RestFn.java:512)

        at clojure.lang.Var.invoke(Var.java:409)

        at clojure.lang.AFn.applyToHelper(AFn.java:178)

        at clojure.lang.Var.applyTo(Var.java:700)

        at clojure.main.main(main.java:37)

Caused by: java.lang.InternalError

        at sun.security.ec.SunEC.initialize(Native Method)

        at sun.security.ec.SunEC.access$000(SunEC.java:49)

        at sun.security.ec.SunEC$1.run(SunEC.java:61)

        at sun.security.ec.SunEC$1.run(SunEC.java:58)

        at java.security.AccessController.doPrivileged(Native Method)

        at sun.security.ec.SunEC.<clinit>(SunEC.java:58)

        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)

        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)

        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)

        at java.lang.Class.newInstance(Class.java:383)

        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:221)

        at sun.security.jca.ProviderConfig$2.run(ProviderConfig.java:206)

        at java.security.AccessController.doPrivileged(Native Method)

        at sun.security.jca.ProviderConfig.doLoadProvider(ProviderConfig.java:206)

        at sun.security.jca.ProviderConfig.getProvider(ProviderConfig.java:187)

        at sun.security.jca.ProviderList.loadAll(ProviderList.java:282)

        at sun.security.jca.ProviderList.removeInvalid(ProviderList.java:299)

        at sun.security.jca.Providers.getFullProviderList(Providers.java:173)

        at java.security.Security.getProviders(Security.java:456)

        at digest$algorithms.invoke(digest.clj:76)

        at digest$create_fns.invoke(digest.clj:85)

        at digest$eval584.invoke(digest.clj:88)

        at clojure.lang.Compiler.eval(Compiler.java:6703)

        at clojure.lang.Compiler.load(Compiler.java:7130)

        ... 68 more

This doesn't give me much of anything to go on, but I'm hoping that there is some clue that will give me somewhere to look or fix. All of this works on Centos 6, so I feel like there must be something I'm missing on Centos 7 that is causing the pain. 

Thanks,

mjr

[Matthaus Owens]

mjr,

The tl;dr is that you need to upgrade nss on your system. Running `yum update nss` should take care of the problem.

The most recent java updates on centos 7 were built against a newer version of nss, but the Requires on the packages were not updated to account for this, and so some java calls have started failing. There is a bugzilla ticket open here https://bugzilla.redhat.com/show_bug.cgi?id=1332456 that is tracking the issue. It looks like they (Redhat/CentOS) are rebuilding java to update the Requires to take into account the new nss version, but I only see rebuilds for Fedora 23/24 in that ticket. We have a ticket tracking this internally here: https://tickets.puppetlabs.com/browse/SERVER-1456, it has some more details as well as a few more upstream distro tickets to watch.

Hope that helps,

Matthaus

--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/4b59e35d-e205-4470-8293-cf5574d68685%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Mark]

I wish I had come here sooner. That seems to indeed be my problem. Thanks. 

mjr