Ziti-router.service can't start (CREDENTIALS @ entrypoint.bash?)

1

Really odd, one of my edge routers suddenly stopped being online. No changes were made on anything...

systemd[1]: Started OpenZiti Router.
systemd[1]: ziti-router.service: Main process exited, code=exited, status=243/CREDENTIALS
systemd[1]: ziti-router.service: Failed with result 'exit-code'.
systemd[1]: ziti-router.service: Scheduled restart job, restart counter is at 3.
systemd[1]: Stopped OpenZiti Router.
systemd[2605]: ziti-router.service: Failed to set up credentials: Protocol error
systemd[2605]: ziti-router.service: Failed at step CREDENTIALS spawning /opt/openziti/etc/router/entrypoint.bash: Protocol error

Any help would be greatly appreciated.

2

Thank you for testing the production deployments alpha for Linux.

The error you reported happens when /opt/openziti/etc/router/.token is deleted after a service start.

You can do sudo touch /opt/openziti/etc/router/.token and restart the service as a workaround.

Another workaround is to create this drop-in to deconfigure LoadCredential.

$ cat /etc/systemd/system/ziti-router.service.d/override.conf
[Service]
LoadCredential=

sudo systemctl daemon-reload

The next version of the router service doesn't use the credentials mechanism so it won't have this problem.

Would you like to help test the next router service package release?

If so, here's the command to subscribe your Linux device to the test repo and install the test version.

Debian/Ubuntu

curl -sS https://get.openziti.io/install.bash \
| sudo ZITIPAX_DEB=zitipax-openziti-deb-test \
bash -s "openziti=0.0.203~9830771426" "openziti-router=0.0.203~9830771426"

RedHat/Fedora

curl -sS https://get.openziti.io/install.bash \
| sudo ZITIPAX_RPM=zitipax-openziti-rpm-test \
bash -s "openziti-0.0.203~9830771426" "openziti-router-0.0.203~9830771426"

Here is the documentation preview for the next router service package.

1 Like