Healthcheck container never goes from "Initializing" to "Running" due to ipsec sidecar in constant restart loop

Rancher Versions:
Server: 1.3.1
healthcheck: v0.2.0
ipsec: net:v0.8.1
network-services: network-manager:v0.4.0 metadata:v0.7.0
scheduler: scheduler:v0.5.1
kubernetes (if applicable): N/A
Docker Version:
1.12.3 and 1.13.0
OS and where are the hosts located? (cloud, bare metal, etc):
Ubuntu 14.04, private cloud
Setup Details: (single node rancher vs. HA rancher, internal DB vs. external DB)
HA Rancher, external DB
Environment Type: (Cattle/Kubernetes/Swarm/Mesos)
Cattle
Steps to Reproduce:
Create new Cattle environment
Add host using the provided command:
sudo docker run -e CATTLE_AGENT_IP="$( ifconfig eth0 | grep inet | awk '{print $2}' | sed 's/addr://g') "  -e CATTLE_HOST_LABELS='etcd=true'  -d --privileged -v /var/run/docker.sock:/var/run/docker.sock -v /var/lib/rancher:/var/lib/rancher private-docker-repo/rancher/agent:v1.1.3 https://rancher-server/v1/scripts/5510B20165C143B41D2B:1484935200000:qt4NQeeMcxsYkzsEcqYYcPOSiQ

Results:
ipsec sidecar container (ipsec-ipsec-router) constantly restarts with the following error message in Docker logs:
Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get http://%2Fvar%2Frun%2Fdocker.sock/v1.25/containers/e7feae7c13c7/json: dial unix /var/run/docker.sock: connect: permission denied

However, if we add the host to the environment as user root and without "sudo", the ipsec container starts properly and healthcheck passes.
Agent logs:
Found container ID: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
Checking root: /host/run/runc
Checking file: 0b3ddd1ae149074e96a7539880b2076ef8c9a2f97c31c726251c452b6584b006
Checking file: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
Found state.json: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
time="2017-01-20T18:37:19Z" level=info msg="Execing [/usr/bin/nsenter --mount=/proc/19493/ns/mnt -F -- /apps/docker-data/aufs/mnt/0dce6a8146b31cf4cc8b5dd032c109eb7f02951845318ff347a358b9a03d83f2/usr/bin/share-mnt --stage2 /var/lib/rancher/volumes /var/lib/kubelet -- norun]"
Found container ID: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
Checking root: /run/runc
Checking file: 0b3ddd1ae149074e96a7539880b2076ef8c9a2f97c31c726251c452b6584b006
Checking file: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
Found state.json: 514d865f5e396d782b7bea9a5c891758b056855b2233577d92d9838741d15711
INFO: Starting agent for 60EA61F8C23DD72B17F9
INFO: Access Key: 60EA61F8C23DD72B17F9
INFO: Config URL: https://rancher-server/v1
INFO: Storage URL: https://rancher-server/v1
INFO: API URL: https://rancher-server/v1
INFO: IP: <IP_ADDRESS>
INFO: Port:
INFO: Required Image: private-docker-repo/rancher/agent:v1.1.3
INFO: Current Image: private-docker-repo/rancher/agent:v1.1.3
INFO: Using image private-docker-repo/rancher/agent:v1.1.3
INFO: Downloading agent https://rancher-server/v1/configcontent/configscripts
INFO: Updating configscripts
INFO: Downloading https://rancher-server/v1//configcontent//configscripts current=
INFO: Running /var/lib/cattle/download/configscripts/configscripts-1-f0f3fb2e1110b5ada7c441705981f93a480313a324294321cff467f0c3e12319/apply.sh
INFO: Sending configscripts applied 1-f0f3fb2e1110b5ada7c441705981f93a480313a324294321cff467f0c3e12319
INFO: Updating pyagent
INFO: Downloading https://rancher-server/v1//configcontent//pyagent current=
INFO: Running /var/lib/cattle/download/pyagent/pyagent-1-9e3dcab12585149a65d818082279708965cd826df1937a55b24f48428f8f0c0644fc1033b5be15c88dcf9540b1c04c67/apply.sh
INFO: Updating host-api
INFO: Downloading https://rancher-server/v1//configcontent//host-api current=
INFO: Running /var/lib/cattle/download/host-api/1-9608ead804f8cebbfe95b9f114701d8a5ac4244d603d196068043c902b1a0bdf/apply.sh
INFO: Sending host-api applied 1-9608ead804f8cebbfe95b9f114701d8a5ac4244d603d196068043c902b1a0bdf
INFO: Updating python-agent
INFO: Downloading https://rancher-server/v1//configcontent//python-agent current=
INFO: Running /var/lib/cattle/download/python-agent/1-0afa60831db01c489fd5d176566c02ba79c1daeff9c5362e422e34fc1dac1f7d/apply.sh
INFO: Sending python-agent applied 1-0afa60831db01c489fd5d176566c02ba79c1daeff9c5362e422e34fc1dac1f7d
INFO: Sending pyagent applied 1-9e3dcab12585149a65d818082279708965cd826df1937a55b24f48428f8f0c0644fc1033b5be15c88dcf9540b1c04c67
INFO: Starting agent /var/lib/cattle/pyagent/apply.sh
INFO: Executing /var/lib/cattle/pyagent/agent
INFO: Updating host-config
INFO: Downloading https://rancher-server/v1//configcontent//host-config current=
INFO: Running /var/lib/cattle/download/host-config/host-config-1-a7c9aaac3dc2747a293bcf6d91054e31d16da90c764b67b31b3b6cbeef86c46f/apply.sh
INFO: HOME -> ./
INFO: HOME -> ./etc/
INFO: HOME -> ./etc/cattle/
INFO: HOME -> ./etc/cattle/api.crt
INFO: Sending host-config applied 1-a7c9aaac3dc2747a293bcf6d91054e31d16da90c764b67b31b3b6cbeef86c46f
time="2017-01-20T18:37:23Z" level=info msg="Launching agent"
time="2017-01-20T18:37:23Z" level=info msg="https://rancher-server/v160EA61F8C23DD72B17F9xPtzWr6dDDyJt9DzeCrTTFQrw7M9Puu3CrpZgrpD"
time="2017-01-20T18:37:23Z" level=info msg="Listening for events on https://rancher-server/v1"
time="2017-01-20T18:37:23Z" level=info msg="launching hostapi"
time="2017-01-20T18:37:23Z" level=info msg="Starting event router."
time="2017-01-20T18:37:23Z" level=info msg="Initializing event router" workerCount=50
time="2017-01-20T18:37:23Z" level=error msg="invalid character 'i' in literal false (expecting 'a')"
time="2017-01-20T18:37:23Z" level=info msg="Connection established"
time="2017-01-20T18:37:23Z" level=info msg="Starting websocket pings"
time="2017-01-20T18:37:25Z" level=warning msg="lookup <IP_ADDRESS> : invalid domain name"
time="2017-01-20T18:37:26Z" level=info msg="Received event: Name: storage.image.activate, Event Id: f2d448cd-76ad-4fbd-9213-6ada51504f21, Resource Id: 1ispm11862"
time="2017-01-20T18:37:27Z" level=info msg="Received event: Name: storage.image.activate, Event Id: 001ad83f-4dde-45a0-8170-0086e7925fd5, Resource Id: 1ispm11863"
time="2017-01-20T18:37:27Z" level=info msg="Received event: Name: storage.image.activate, Event Id: 9b49013f-2822-4ecd-bfd1-190ae95c0339, Resource Id: 1ispm11864"
time="2017-01-20T18:37:28Z" level=info msg="Connecting to proxy."  Shutting down
1/20/2017 2:25:52 PM00[MGR] going to destroy IKE_SA manager and all managed IKE_SA's
1/20/2017 2:25:52 PM00[MGR] set driveout flags for all stored IKE_SA's
1/20/2017 2:25:52 PM00[MGR] wait for all threads to leave IKE_SA's
1/20/2017 2:25:52 PM00[MGR] delete all IKE_SA's
1/20/2017 2:25:52 PM00[MGR] destroy all entries
1/20/2017 2:25:52 PM00[KNL] sending RTM_GETRULE 205: => 36 bytes @ 0x7ffd7fc2b770
1/20/2017 2:25:52 PM00[KNL]    0: 24 00 00 00 21 00 05 00 CD 00 00 00 1B 00 00 00  $...!...........
1/20/2017 2:25:52 PM00[KNL]   16: 02 00 00 00 DC 03 00 01 00 00 00 00 08 00 06 00  ................
1/20/2017 2:25:52 PM00[KNL]   32: DC 00 00 00                                      ....
1/20/2017 2:25:52 PM00[KNL] received (2) 205: => 36 bytes @ 0x22dd1e0
1/20/2017 2:25:52 PM00[KNL]    0: 24 00 00 00 02 00 00 00 CD 00 00 00 1B 00 00 00  $...............
1/20/2017 2:25:52 PM00[KNL]   16: 00 00 00 00 24 00 00 00 21 00 05 00 CD 00 00 00  ....$...!.......
1/20/2017 2:25:52 PM00[KNL]   32: 1B 00 00 00                                      ....
1/20/2017 2:25:52 PM00[KNL] sending RTM_GETRULE 206: => 36 bytes @ 0x7ffd7fc2b770
1/20/2017 2:25:52 PM00[KNL]    0: 24 00 00 00 21 00 05 00 CE 00 00 00 1B 00 00 00  $...!...........
1/20/2017 2:25:52 PM00[KNL]   16: 0A 00 00 00 DC 03 00 01 00 00 00 00 08 00 06 00  ................
1/20/2017 2:25:52 PM00[KNL]   32: DC 00 00 00                                      ....
1/20/2017 2:25:52 PM00[KNL] received (2) 206: => 36 bytes @ 0x22dd1e0
1/20/2017 2:25:52 PM00[KNL]    0: 24 00 00 00 02 00 00 00 CE 00 00 00 1B 00 00 00  $...............
1/20/2017 2:25:52 PM00[KNL]   16: 00 00 00 00 24 00 00 00 21 00 05 00 CE 00 00 00  ....$...!.......
1/20/2017 2:25:52 PM00[KNL]   32: 1B 00 00 00                                      ....
1/20/2017 2:25:53 PM+ trap 'exit 1' SIGTERM SIGINT
1/20/2017 2:25:53 PM+ curl http://localhost:8111
1/20/2017 2:25:53 PM+ export CHARON_PID_FILE=/var/run/charon.pid
1/20/2017 2:25:53 PM+ CHARON_PID_FILE=/var/run/charon.pid
1/20/2017 2:25:53 PM+ rm -f /var/run/charon.pid
1/20/2017 2:25:53 PM+ export PIDFILE=/var/run/rancher-net.pid
1/20/2017 2:25:53 PM+ PIDFILE=/var/run/rancher-net.pid
1/20/2017 2:25:53 PM+ GCM=false
1/20/2017 2:25:53 PM+ (( i=0 ))
1/20/2017 2:25:53 PM+ (( i<6 ))
1/20/2017 2:25:53 PM+ ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
1/20/2017 2:25:53 PM+ GCM=true
1/20/2017 2:25:53 PM+ ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
1/20/2017 2:25:53 PM+ break
1/20/2017 2:25:53 PM+ mkdir -p /etc/ipsec
1/20/2017 2:25:53 PM+ curl -f -u 944EA354C12731A97C8E:a8J2YpUgp8GP1Yc4iPbcuiXkta3t8h5BodHn2bSD https://rancher-server/v1/configcontent/psk
1/20/2017 2:25:53 PM  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
1/20/2017 2:25:53 PM                                 Dload  Upload   Total   Spent    Left  Speed
1/20/2017 2:25:53 PM
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100    32  100    32    0     0    135      0 --:--:-- --:--:-- --:--:--   136
1/20/2017 2:25:53 PM+ curl -f -X PUT -u 944EA354C12731A97C8E:a8J2YpUgp8GP1Yc4iPbcuiXkta3t8h5BodHn2bSD 'https://rancher-server/v1/configcontent/psk?version=latest'
1/20/2017 2:25:53 PM  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
1/20/2017 2:25:53 PM                                 Dload  Upload   Total   Spent    Left  Speed
1/20/2017 2:25:54 PM
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
1/20/2017 2:25:54 PM++ awk '{print $3}'
1/20/2017 2:25:54 PM++ ip route get <IP_ADDRESS>
1/20/2017 2:25:54 PM+ GATEWAY=<IP_ADDRESS>
1/20/2017 2:25:54 PM+ iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
1/20/2017 2:25:54 PM++ awk '{print $7}'
1/20/2017 2:25:54 PM++ grep via
1/20/2017 2:25:54 PM++ ip route get <IP_ADDRESS>
1/20/2017 2:25:54 PM+ exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=info msg="Using backend: ipsec"
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=info msg="Using metadata: true"
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=info msg="Reading info from metadata"
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=debug msg="Creating new MetadataStore, metadataURL: http://rancher-metadata/2015-12-19"
1/20/2017 2:25:54 PMtime="2017-01-20T19:25:54Z" level=debug msg="Reloading ..."

1/20/2017 2:25:55 PMtime="2017-01-20T19:25:55Z" level=info msg="Listening for ARP requests on eth0"
1/20/2017 2:25:55 PMtime="2017-01-20T19:25:55Z" level=info msg="Listening on :8111"
1/20/2017 2:25:55 PMtime="2017-01-20T19:25:55Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
1/20/2017 2:25:55 PMtime="2017-01-20T19:25:55Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
1/20/2017 2:25:55 PMtime="2017-01-20T19:25:55Z" level=fatal msg="Error 404 accessing /self/container path"
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_8-16 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_8-24 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_8-32 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_12-16 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_12-24 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_12-32 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_16-16 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_16-24 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature AEAD:AES_GCM_16-32 in plugin 'gcm'
1/20/2017 2:25:55 PM00[LIB] loading feature CUSTOM:attr in plugin 'attr'
1/20/2017 2:25:55 PM00[LIB] loading feature CUSTOM:resolve in plugin 'resolve'
1/20/2017 2:25:55 PM00[LIB] loading feature CUSTOM:stroke in plugin 'stroke'
1/20/2017 2:25:55 PM00[LIB]   feature CUSTOM:stroke in plugin 'stroke' has unmet soft dependency: PRIVKEY:DSA
1/20/2017 2:25:55 PM00[LIB]   feature CUSTOM:stroke in plugin 'stroke' has unmet soft dependency: PRIVKEY:BLISS
1/20/2017 2:25:55 PM00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
1/20/2017 2:25:55 PM00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
1/20/2017 2:25:55 PM00[CFG]   reading directory failed
1/20/2017 2:25:55 PM00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
1/20/2017 2:25:55 PM00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
1/20/2017 2:25:55 PM00[CFG]   reading directory failed
1/20/2017 2:25:55 PM00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
1/20/2017 2:25:55 PM00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
1/20/2017 2:25:55 PM00[CFG]   reading directory failed
1/20/2017 2:25:55 PM00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
1/20/2017 2:25:55 PM00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
1/20/2017 2:25:55 PM00[CFG]   reading directory failed
1/20/2017 2:25:55 PM00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
1/20/2017 2:25:55 PM00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
1/20/2017 2:25:55 PM00[CFG]   reading directory failed
1/20/2017 2:25:55 PM00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
1/20/2017 2:25:55 PM00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
1/20/2017 2:25:55 PM00[LIB] loading feature CUSTOM:vici in plugin 'vici'
1/20/2017 2:25:55 PM00[LIB] loading feature CUSTOM:updown in plugin 'updown'
1/20/2017 2:25:55 PM00[LIB] loading feature XAUTH_SERVER:generic in plugin 'xauth-generic'
1/20/2017 2:25:55 PM00[LIB] loading feature XAUTH_CLIENT:generic in plugin 'xauth-generic'
1/20/2017 2:25:55 PM00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
1/20/2017 2:25:55 PM00[LIB] unable to load 7 plugin features (7 due to unmet dependencies)
1/20/2017 2:25:55 PM00[JOB] spawning 16 worker threads
1/20/2017 2:25:55 PM01[LIB] created thread 01 [35]
1/20/2017 2:25:55 PM02[LIB] created thread 02 [36]
1/20/2017 2:25:55 PM03[LIB] created thread 03 [37]
1/20/2017 2:25:55 PM03[NET] waiting for data on sockets
1/20/2017 2:25:55 PM04[LIB] created thread 04 [38]
1/20/2017 2:25:55 PM05[LIB] created thread 05 [34]
1/20/2017 2:25:55 PM06[LIB] created thread 06 [39]
1/20/2017 2:25:55 PM07[LIB] created thread 07 [40]
1/20/2017 2:25:55 PM08[LIB] created thread 08 [41]
1/20/2017 2:25:55 PM09[LIB] created thread 09 [42]
1/20/2017 2:25:55 PM10[LIB] created thread 10 [43]
1/20/2017 2:25:55 PM11[LIB] created thread 11 [33]
1/20/2017 2:25:55 PM12[LIB] created thread 12 [44]
1/20/2017 2:25:55 PM13[LIB] created thread 13 [32]
1/20/2017 2:25:55 PM14[LIB] created thread 14 [31]
1/20/2017 2:25:55 PM15[LIB] created thread 15 [30]
1/20/2017 2:25:55 PM16[LIB] created thread 16 [29]
1/20/2017 2:25:55 PM05[CFG] vici client 1 connected
1/20/2017 2:25:55 PM06[CFG] vici client 1 registered for: list-conn
1/20/2017 2:25:55 PM11[CFG] vici client 1 requests: list-conns
1/20/2017 2:25:55 PM14[CFG] vici client 1 unregistered for: list-conn
1/20/2017 2:25:55 PM06[CFG] vici client 1 disconnected
1/20/2017 2:25:55 PM00[DMN] signal of type SIGTERM received. Shutting down
1/20/2017 2:25:55 PM00[MGR] going to destroy IKE_SA manager and all managed IKE_SA's
1/20/2017 2:25:55 PM00[MGR] set driveout flags for all stored IKE_SA's
1/20/2017 2:25:55 PM00[MGR] wait for all threads to leave IKE_SA's
1/20/2017 2:25:55 PM00[MGR] delete all IKE_SA's
1/20/2017 2:25:55 PM00[MGR] destroy all entries
1/20/2017 2:25:55 PM00[KNL] sending RTM_GETRULE 205: => 36 bytes @ 0x7fff804e5dd0
1/20/2017 2:25:55 PM00[KNL]    0: 24 00 00 00 21 00 05 00 CD 00 00 00 1B 00 00 00  $...!...........
1/20/2017 2:25:55 PM00[KNL]   16: 02 00 00 00 DC 03 00 01 00 00 00 00 08 00 06 00  ................
1/20/2017 2:25:55 PM00[KNL]   32: DC 00 00 00                                      ....
1/20/2017 2:25:55 PM00[KNL] received (2) 205: => 36 bytes @ 0x7941e0
1/20/2017 2:25:55 PM00[KNL]    0: 24 00 00 00 02 00 00 00 CD 00 00 00 1B 00 00 00  $...............
1/20/2017 2:25:55 PM00[KNL]   16: 00 00 00 00 24 00 00 00 21 00 05 00 CD 00 00 00  ....$...!.......
1/20/2017 2:25:55 PM00[KNL]   32: 1B 00 00 00                                      ....
1/20/2017 2:25:55 PM00[KNL] sending RTM_GETRULE 206: => 36 bytes @ 0x7fff804e5dd0
1/20/2017 2:25:55 PM00[KNL]    0: 24 00 00 00 21 00 05 00 CE 00 00 00 1B 00 00 00  $...!...........
1/20/2017 2:25:55 PM00[KNL]   16: 0A 00 00 00 DC 03 00 01 00 00 00 00 08 00 06 00  ................
1/20/2017 2:25:55 PM00[KNL]   32: DC 00 00 00                                      ....
1/20/2017 2:25:55 PM00[KNL] received (2) 206: => 36 bytes @ 0x7941e0
1/20/2017 2:25:55 PM00[KNL]    0: 24 00 00 00 02 00 00 00 CE 00 00 00 1B 00 00 00  $...............
1/20/2017 2:25:55 PM00[KNL]   16: 00 00 00 00 24 00 00 00 21 00 05 00 CE 00 00 00  ....$...!.......
1/20/2017 2:25:55 PM00[KNL]   32: 1B 00 00 00                                      ....

trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   1430      0 --:--:-- --:--:-- --:--:--  1523
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:13:57Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:13:57Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:13:57Z" level=info msg="Using metadata: true"
time="2017-03-08T09:13:57Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:13:57Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:13:58Z" level=info msg="Listening on :8111"
time="2017-03-08T09:13:58Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:13:58Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:13:58Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2029      0 --:--:-- --:--:-- --:--:--  2133
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ awk '{print $7}'
++ grep via
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:00Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:00Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:00Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:00Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:00Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:01Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:01Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:01Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:01Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   4333      0 --:--:-- --:--:-- --:--:--  4571
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ awk '{print $7}'
++ grep via
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:02Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:02Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:02Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:02Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:02Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:03Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:03Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:03Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:03Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   1948      0 --:--:-- --:--:-- --:--:--  2133
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:06Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:06Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:06Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:06Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:06Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:07Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:07Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:07Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:07Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2457      0 --:--:-- --:--:-- --:--:--  2666
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:14Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:14Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:14Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:14Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:14Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:15Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:15Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:15Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:15Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   4075      0 --:--:-- --:--:-- --:--:--  4571
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ awk '{print $3}'
++ ip route get <IP_ADDRESS>
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:17Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:17Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:17Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:17Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:17Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:18Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:18Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:18Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:18Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2571      0 --:--:-- --:--:-- --:--:--  2666
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ awk '{print $3}'
++ ip route get <IP_ADDRESS>
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ grep via
++ awk '{print $7}'
++ ip route get <IP_ADDRESS>
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:19Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:19Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:19Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:19Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:19Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:20Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:20Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:20Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:20Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2975      0 --:--:-- --:--:-- --:--:--  3200
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ awk '{print $7}'
++ grep via
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:21Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:21Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:21Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:21Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:21Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:22Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:22Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:22Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:22Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   4145      0 --:--:-- --:--:-- --:--:--  4571
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:23Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:23Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:23Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:23Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:23Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:24Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:24Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:24Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:24Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2377      0 --:--:-- --:--:-- --:--:--  2461
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:26Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:26Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:26Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:26Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:26Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:27Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:27Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:27Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:27Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2928      0 --:--:-- --:--:-- --:--:--  3200
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:28Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:28Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:28Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:28Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:28Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:29Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:29Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:29Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:29Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec
curl -f -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T http://<IP_ADDRESS>:8085/v1/configcontent/psk
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
100    32  100    32    0     0   2746      0 --:--:-- --:--:-- --:--:--  2909
curl -f -X PUT -d '' -u 0CBC7FCC642BAC1AEF16:rHxMoe5w8m6uH2HjfQPNUdKwRB9LZh35cqv5dA4T 'http://<IP_ADDRESS>:8085/v1/configcontent/psk?version=latest'
% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Dload  Upload   Total   Spent    Left  Speed
0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
++ ip route get <IP_ADDRESS>
++ awk '{print $3}'
GATEWAY=<IP_ADDRESS>
iptables -t nat -I POSTROUTING -o eth0 -s <IP_ADDRESS> -j MASQUERADE
++ ip route get <IP_ADDRESS>
++ grep via
++ awk '{print $7}'
exec rancher-net -i <IP_ADDRESS>/16 --pid-file /var/run/rancher-net.pid --gcm=true --use-metadata --charon-launch --ipsec-config /etc/ipsec
time="2017-03-08T09:14:30Z" level=info msg="Writing pid 1 to /var/run/rancher-net.pid"
time="2017-03-08T09:14:30Z" level=info msg="Using backend: ipsec"
time="2017-03-08T09:14:30Z" level=info msg="Using metadata: true"
time="2017-03-08T09:14:30Z" level=info msg="Reading info from metadata"
time="2017-03-08T09:14:30Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:31Z" level=info msg="Listening on :8111"
time="2017-03-08T09:14:31Z" level=error msg="couldn't get self container from metadata: Error 404 accessing /self/container path"
time="2017-03-08T09:14:31Z" level=error msg="couldn't reload the overlay: Error 404 accessing /self/container path"
time="2017-03-08T09:14:31Z" level=fatal msg="Error 404 accessing /self/container path"
00[DMN] Starting IKE charon daemon (strongSwan 5.5.0, Linux 3.10.0-327.36.3.el7.x86_64, x86_64)
00[CFG] loading ca certificates from '/usr/local/etc/ipsec.d/cacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/cacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading aa certificates from '/usr/local/etc/ipsec.d/aacerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/aacerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading ocsp signer certificates from '/usr/local/etc/ipsec.d/ocspcerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/ocspcerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading attribute certificates from '/usr/local/etc/ipsec.d/acerts'
00[LIB] opening directory '/usr/local/etc/ipsec.d/acerts' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading crls from '/usr/local/etc/ipsec.d/crls'
00[LIB] opening directory '/usr/local/etc/ipsec.d/crls' failed: No such file or directory
00[CFG]   reading directory failed
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[CFG] opening secrets file '/usr/local/etc/ipsec.secrets' failed: No such file or directory
00[LIB] loaded plugins: charon aesni aes des rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc cmac hmac gcm attr kernel-netlink resolve socket-default stroke vici updown xauth-generic
00[JOB] spawning 16 worker threads
00[DMN] signal of type SIGTERM received. Shutting down
trap 'exit 1' SIGTERM SIGINT
curl http://localhost:8111
export CHARON_PID_FILE=/var/run/charon.pid
CHARON_PID_FILE=/var/run/charon.pid
rm -f /var/run/charon.pid
export PIDFILE=/var/run/rancher-net.pid
PIDFILE=/var/run/rancher-net.pid
GCM=false
(( i=0 ))
(( i<6 ))
ip xfrm state add src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp mode tunnel aead 'rfc4106(gcm(aes))' 0x0000000000000000000000000000000000000001 128 sel src <IP_ADDRESS> dst <IP_ADDRESS>
GCM=true
ip xfrm state del src <IP_ADDRESS> dst <IP_ADDRESS> spi 42 proto esp
break
'[' false == true ']'
DEBUG=
mkdir -p /etc/ipsec

above logs from container name  r-ipsec-ipsec-router-1-e4445b24

@llitfkitfk the ipsec router container is not able to connect to the rancher-metadata. What do the logs of metadata, dns and network-manager look like?

@leodotcloud setup again and everything works fine.


Removed dask.ipynb

I've removed the dask.ipynb file as discussed in #569.
Closes #569

📚 Documentation preview 📚: https://earthaccess--599.org.readthedocs.build/en/599/

Closing and re-opening to re-trigger ReadTheDocs build. Not sure why it failed.

Looks like it worked this time. :shrug: Thanks @Sherwin-14 !


does the library still work?

 I'll have to mess with this to make it work again :frowning:

Published as 0.0.3

Did this actually solve the problem I've been unsuccessful with the sample code. i've been getting redirect back to the login page. Are they still using just session cookies and csrf tokens for auth?

@HarleyKwyn Hmm I just tested it with my stuff and it seemed to work after the update. It isn't working again? I think they are trying to break this every time I update it

Just tested it again, works fine. Make sure your username and password are correct

Hmmm alright. I'll keep trying. Thanks for checking for me! Also for
figuring out that you can just make form requests for login. Super clever.
On Mon, Mar 16, 2015 at 08:41 contra<EMAIL_ADDRESS>wrote:

Just tested it again, works fine. Make sure your username and password are
correct
—
Reply to this email directly or view it on GitHub
https://github.com/wearefractal/bank/issues/1#issuecomment-81748279.

If it still doesn't work go ahead and open a new github issues so we can figure it out there :+1:


Matrix.y defect on rotated elements

It seems that Matrix.y is defect in Raphael 2.0.0 when applied to rotated matrices. Here's an example:
var paper = Raphael(0, 0, 300, 300);
var el = paper.rect(100, 100, 100, 100);
el.rotate(45);
var x = el.matrix.x(0, 0), y = el.matrix.y(0, 0);
var t = paper.text(150, 290, "x = " + x + ", y = "+ y);
var el = paper.rect(x, y, 100, 100).attr({stroke:"red"});
http://jsfiddle.net/gq6HT/
y should contain 150 in above example code. If element is not rotated Matrix.y works fine.

A workaround is to remove the x angled value of element if rotation is anything else than 0:
u -= el.matrix.e * Math.sin(Raphael.rad(45));

I realized it was a design flaw in my code. It depends on center point of rotation, if specified it works as expected in Raphael library. In my jsfiddle code above I did not specify center point of rotation.


Update Dockerfile

Cherry picked in https://github.com/adtac/commento/pull/88

Merged through https://github.com/adtac/commento/pull/88


Task4

1.- Use AWS Console to create two database tables in DynamoDB
2.- Integrate the getProductsList lambda to return via GET /products request a list of products from the database (joined stocks and products tables).
3.- Integrate the getProductsById lambda to return via GET /products/{productId} request a single product from the database.
4.-Create a lambda function called createProduct under the same Serverless config file (i.e. serverless.yaml) of Product Service which will be triggered by the HTTP POST method. URL : https://eh7z26ia2l.execute-api.us-east-1.amazonaws.com/dev/products
product schema {   type: "object",   properties: {     title: { type: 'string' },     description: { type: 'string' },     price: { type: 'number' },     count: { type: 'number' },   },   required: ['title', 'description', 'price', 'count'] }

Hi @Diegodsha!
Could you please add a description to PR? I.e., checklist of what has been implemented, links to deployed API methods and to the deployed FE instance.
Thanks!

Hi @relnofollow I've added some information to the PR description (:

CR Summary
Checklist after code review: Main scope
* ✅ Task 4.1 (Create DynamoDB tables, fill them with data) - done

* ❓Task 4.2 (Pass table names in env. variables, integrate GET /products and GET /products/{productId} with DynamoDB) - partially done, GET /product/{productId} doesn't work for some products (see comment)

* ❓Task 4.3 (Create Lambda function to create product) - **implementation is ready, but I can't verify it** (probably, I'm using a Postman in a wrong way, please check comment in PR and guide me how to check the handler 😅)

Additional scope
* ❓(+6) POST /products lambda functions returns error 400 status code if product data is invalid - implemented, but can't be verified

* ✅ (+6) All lambdas return error 500 status code on any error (DB connection, any unhandled error in code) - done

* ✅ (+6) All lambdas do console.log for each incoming requests and their arguments - done

* ✅ (+6) Transaction based creation of product - done

I've tackled your comments and suggestions, thank  you for your time @relnofollow I really appreciate it

Could you please check that you've pushed the most recent changes to this branch? I can't see the fixes in the files

Checklist after check #2:
Main scope

✅ Task 4.1 (Create DynamoDB tables, fill them with data) - done
✅ Task 4.2 (Pass table names in env. variables, integrate GET /products and GET /products/{productId} with DynamoDB) - done (checked for newly created product)
✅ Task 4.3 (Create Lambda function to create product) - done

Additional scope

✅ (+6) POST /products lambda functions returns error 400 status code if product data is invalid - done
✅ (+6) All lambdas return error 500 status code on any error (DB connection, any unhandled error in code) - done
✅ (+6) All lambdas do console.log for each incoming requests and their arguments - done
✅ (+6) Transaction based creation of product - done

This is 94 points in total (70 + 6 x 4).
Do you agree with this score? If yes, I'll submit it to 'Learn' system.

Hi @relnofollow could you highlight which point I'm missing to get 100 grade?

I think the one about using RDS instead of DynamoDB, it's a part of additional scoped tasks:

+6 (All languages) - Use RDS instance instead fo DynamoDB tables.

Reference: Task 4 Additional Scope description on GitHub

@relnofollow  ah you're right but it's okay I'm good with 96


MSI Z690 community section

Signed-off-by: Przemyslaw Sulewski<EMAIL_ADDRESS>

It was @pietrushnic idea to add it this way IIUC. Do you have any suggestions?

@miczyg1 IMHO Dasharo test results and HCL have to be clearly separated from community one, but use the same pattern of information presentation. The same information architecture. Mixing results or HCLs is not good idea.

Maybe there isn't any need for our own HCL in the first place if we stick to one single configuration described in hardware matrix? @pietrushnic

@miczyg1 you are right HCL and hardware matrix are essentially the same, but there is difference in trustworthiness of results. We need something like Qubes HCL because information that someone tried things on given hardware are very useful. Of course like in Qubes case, they have certified hardware, that means they make sure it works as expected. Community HCL may work, but there is no guarantee. I want to mimic Qubes scheme.

@miczyg1 you are right HCL and hardware matrix are essentially the same, but there is difference in trustworthiness of results. We need something like Qubes HCL because information that someone tried things on given hardware are very useful. Of course like in Qubes case, they have certified hardware, that means they make sure it works as expected. Community HCL may work, but there is no guarantee. I want to mimic Qubes scheme.

Thus my proposal is to change the memory compatibility into community memory compatibility mimicking Qubes HCL

@miczyg1 @pietrushnic @macpijan I've separated the files. Please let me know if you think this arrangement is acceptable

@miczyg1 I have made the required corrections. Also, I have added links to the new sections in overview.md.


plot multiscale images

We should be able to plot multiscale images. @LucaMarconato has some prototype code.

no no, all good 😅 That's exactly what I thought, had a simialr call with Luca earlier today.

@timtreis
Case 1:
User wants to plot a multiscale image (image or label)

Depending on the image size, pick the scale that fits best (resolution closest) and render that
In case the lowest resolution is still to high => add rasterization step (go to case 2)

Case 2:
User wants to plot an image (image/label)

Use heuristic to judge whether image can be plotted directly (small image should be fast anyways)
Depending on image size, rasterize to the ideal resolution
Add option for the user to enforce a higher resolution (then it will take longer)


Infinite type not detected

Continuation of #540, stack overflow for the following code because of an infinite type:
import Either (..)

data Automaton a b = Step (a -> (Automaton a b, b))

(+++) : Automaton a b -> Automaton c d -> Automaton (Either a c) (Either b d)
(Step l) +++ (Step r) = Step <| \o ->
    case o of
        Left a ->
            let (l1, c) = l a
            in (l1, Left c)

        Right b ->
            let (r1, d) = r b
            in (r1, Right d)

Fixed code has corrected the return type of both branches to keep things going properly:
import Either (..)

data Automaton a b = Step (a -> (Automaton a b, b))

(+++) : Automaton a b -> Automaton c d -> Automaton (Either a c) (Either b d)
(Step l) +++ (Step r) = Step <| \o ->
    case o of
        Left a ->
            let (l1, c) = l a
            in (l1 +++ Step r, Left c)

        Right b ->
            let (r1, d) = r b
            in (Step l +++ r1, Right d)

Probably best as an example of "when things go wrong".

Closing in favor of #832


It seems go:linkname gopark runtime.gopark and go:linkname goready runtime.goready on arm not work

Please answer these questions before submitting your issue. Thanks!
What version of Go are you using (go version)?
go 1.8.1 and 1.9.2
Does this issue reproduce with the latest release?
yes
What operating system and processor architecture are you using (go env)?
darwin with golang 1.9.2
archlinux with golang 1.9.2
GOARCH="amd64"
GOBIN=""
GOEXE=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOOS="linux"
GOPATH="/home/yy/dev/go"
GORACE=""
GOROOT="/usr/lib/go"
GOTOOLDIR="/usr/lib/go/pkg/tool/linux_amd64"
GCCGO="gccgo"
CC="gcc"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build997705220=/tmp/go-build -gno-record-gcc-switches"
CXX="g++"
CGO_ENABLED="1"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"

also Raspberry Pi 3 Model B arm structure with golang 1.8.1
What did you do?
I am crossing compiling google/netstack. It worked fine on linux, darwin and windows.
But failed on arm(eg: android, raspberry pi3).
What did you expect to see?
build success
What did you see instead?
The error log is
GOOS=linux GOARM=7 GOARCH=arm go build -o main main.go

../../netstack/sleep/sleep_unsafe.go:78:6: missing function body
../../netstack/sleep/sleep_unsafe.go:81:6: missing function body

This line
And then, I try it on raspberry pi3 in real device with go build -o main main.go. The same error log.

Thank you for raising this issue. It looks like you are compiling go
netstack in a way that is not expected.
Can you please try the getting started instructions
https://github.com/google/netstack#getting-started
And post the complete output you see.
On Mon, Dec 11, 2017 at 1:27 PM, 浮生<EMAIL_ADDRESS>wrote:

Please answer these questions before submitting your issue. Thanks!
What version of Go are you using (go version)?
go 1.8.1 and 1.9.2
Does this issue reproduce with the latest release?
yes
What operating system and processor architecture are you using (go env)?
darwin with golang 1.9.2
archlinux with golang 1.9.2
GOARCH="amd64"
GOBIN=""
GOEXE=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOOS="linux"
GOPATH="/home/yy/dev/go"
GORACE=""
GOROOT="/usr/lib/go"
GOTOOLDIR="/usr/lib/go/pkg/tool/linux_amd64"
GCCGO="gccgo"
CC="gcc"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build997705220=/tmp/go-build -gno-record-gcc-switches"
CXX="g++"
CGO_ENABLED="1"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
also Raspberry Pi 3 Model B arm structure with golang 1.8.1
What did you do?
I am crossing compiling google/netstack
https://github.com/google/netstack/blob/master/sleep/sleep_unsafe.go#L78-L81.
It worked fine on linux, darwin and windows.
But failed on arm(eg: android, raspberry pi3).
What did you expect to see?
build success
What did you see instead?
The error log is
GOOS=linux GOARM=7 GOARCH=arm go build -o main main.go
../../netstack/sleep/sleep_unsafe.go:78:6: missing function body
../../netstack/sleep/sleep_unsafe.go:81:6: missing function body
This line
https://github.com/google/netstack/blob/master/sleep/sleep_unsafe.go#L78-L81
And then, I try it on raspberry pi3 in real device with go build -o main
main.go. The same error log.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/golang/go/issues/23080, or mute the thread
https://github.com/notifications/unsubscribe-auth/AAAcAw7CulEB_Q__r_5HHcev-HJxMV7Pks5s_JMlgaJpZM4Q8ySO
.

Command GOOS=linux GOARCH=arm GOARM=7 go install github.com/google/netstack/tcpip/sample/tun_tcp_echo
Output
# github.com/google/netstack/sleep
sleep/sleep_unsafe.go:78:6: missing function body
sleep/sleep_unsafe.go:81:6: missing function body
# github.com/google/netstack/tcpip/link/rawfile
tcpip/link/rawfile/rawfile_unsafe.go:20:6: missing function body
tcpip/link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
tcpip/link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value

And error in # github.com/google/netstack/tcpip/link/rawfile, I have solved.
# github.com/google/netstack/tcpip/link/rawfile
tcpip/link/rawfile/rawfile_unsafe.go:20:6: missing function body
tcpip/link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
tcpip/link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value

I think there are a few bugs here.
github.com/google/netstack/sleep
sleep/sleep_unsafe.go:78:6
http://github.com/google/netstack/sleepsleep/sleep_unsafe.go:78:6:
missing function body
sleep/sleep_unsafe.go:81:6: missing function body
This looks like -complete is bing passed to the compiler, which is a
mistake, this package is not complete. Can you please try
GOOS=linux GOARCH=arm GOARM=7 go build -x
github.com/google/netstack/tcpip/sample/tun_tcp_echo
And post the full output.
The rest of the errors
And error in # github.com/google/netstack/tcpip/link/rawfile, I have solved.
github.com/google/netstack/tcpip/link/rawfile
tcpip/link/rawfile/rawfile_unsafe.go:20:6
http://github.com/google/netstack/tcpip/link/rawfiletcpip/link/rawfile/rawfile_unsafe.go:20:6:
missing function body
tcpip/link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1))
(type uint64) as type uint32 in field value
tcpip/link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2))
(type uint64) as type uint32 in field value
Are no a go problem, they are a limitation of the package, it looks
like the arm support is not complete. You should report the lack of
arm support on the https://github.com/google/netstack project.
On Mon, Dec 11, 2017 at 1:56 PM, 浮生<EMAIL_ADDRESS>wrote:

Command GOOS=linux GOARCH=arm GOARM=7 go install
github.com/google/netstack/tcpip/sample/tun_tcp_echo
Output
github.com/google/netstack/sleep
sleep/sleep_unsafe.go:78:6 http://github.com/google/netstack/sleepsleep/sleep_unsafe.go:78:6: missing function body
sleep/sleep_unsafe.go:81:6: missing function body
github.com/google/netstack/tcpip/link/rawfile
tcpip/link/rawfile/rawfile_unsafe.go:20:6 http://github.com/google/netstack/tcpip/link/rawfiletcpip/link/rawfile/rawfile_unsafe.go:20:6: missing function body
tcpip/link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
tcpip/link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value
And error in # github.com/google/netstack/tcpip/link/rawfile, I have
solved.
github.com/google/netstack/tcpip/link/rawfile
tcpip/link/rawfile/rawfile_unsafe.go:20:6 http://github.com/google/netstack/tcpip/link/rawfiletcpip/link/rawfile/rawfile_unsafe.go:20:6: missing function body
tcpip/link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
tcpip/link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/golang/go/issues/23080#issuecomment-350610379, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AAAcA3O6zfYvu9S_IY5VLcDmuGbvGXzHks5s_JnggaJpZM4Q8ySO
.

command GOOS=linux GOARCH=arm GOARM=7 go build -x github.com/google/netstack/tcpip/sample/tun_tcp_echo
Output
WORK=/var/folders/zz/3gn7zjp91vdd3dxwgq4b089w0000gn/T/go-build007862576
mkdir -p $WORK/github.com/google/netstack/tcpip/link/rawfile/_obj/
mkdir -p $WORK/github.com/google/netstack/tcpip/link/
mkdir -p $WORK/github.com/google/netstack/sleep/_obj/
cd /Users/kingyang/go/src/github.com/google/netstack/tcpip/link/rawfile
/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile -o $WORK/github.com/google/netstack/tcpip/link/rawfile.a -trimpath $WORK -goversion go1.9.2 -p github.com/google/netstack/tcpip/link/rawfile -complete -buildid a98b2111a45a16511e8469fa66450690c48db39b -D _/Users/kingyang/go/src/github.com/google/netstack/tcpip/link/rawfile -I $WORK -I /Users/kingyang/go/pkg/linux_arm -pack ./errors.go ./rawfile_unsafe.go
mkdir -p $WORK/github.com/google/netstack/
cd /Users/kingyang/go/src/github.com/google/netstack/sleep
/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile -o $WORK/github.com/google/netstack/sleep.a -trimpath $WORK -goversion go1.9.2 -p github.com/google/netstack/sleep -complete -buildid 91e2d39e252c9958acba4ce484c3bf8be1d6088b -D _/Users/kingyang/go/src/github.com/google/netstack/sleep -I $WORK -pack ./commit_noasm.go ./sleep_unsafe.go
# github.com/google/netstack/sleep
../../../sleep/sleep_unsafe.go:78:6: missing function body
../../../sleep/sleep_unsafe.go:81:6: missing function body
# github.com/google/netstack/tcpip/link/rawfile
../../link/rawfile/rawfile_unsafe.go:20:6: missing function body
../../link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
../../link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value

I think the problem is there is no .s file visible in the set of files to
compile for the sleep package so -complete is being passed to the compiler.
If you copy this file
https://github.com/google/netstack/blob/master/sleep/commit_arm64.s
To commit_arm.s
Then that should solve this problem.
On Mon, Dec 11, 2017 at 2:12 PM, 浮生<EMAIL_ADDRESS>wrote:

command GOOS=linux GOARCH=arm GOARM=7 go build -x
github.com/google/netstack/tcpip/sample/tun_tcp_echo
Output
WORK=/var/folders/zz/3gn7zjp91vdd3dxwgq4b089w0000gn/T/go-build007862576
mkdir -p $WORK/github.com/google/netstack/tcpip/link/rawfile/_obj/
mkdir -p $WORK/github.com/google/netstack/tcpip/link/
mkdir -p $WORK/github.com/google/netstack/sleep/_obj/
cd /Users/kingyang/go/src/github.com/google/netstack/tcpip/link/rawfile
/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile http://github.com/google/netstack/tcpip/link/rawfile/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile -o $WORK/github.com/google/netstack/tcpip/link/rawfile.a -trimpath $WORK -goversion go1.9.2 -p github.com/google/netstack/tcpip/link/rawfile -complete -buildid a98b2111a45a16511e8469fa66450690c48db39b -D _/Users/kingyang/go/src/github.com/google/netstack/tcpip/link/rawfile -I $WORK -I /Users/kingyang/go/pkg/linux_arm -pack ./errors.go ./rawfile_unsafe.go
mkdir -p $WORK/github.com/google/netstack/
cd /Users/kingyang/go/src/github.com/google/netstack/sleep
/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile http://github.com/google/netstack/sleep/usr/local/opt/go/libexec/pkg/tool/darwin_amd64/compile -o $WORK/github.com/google/netstack/sleep.a -trimpath $WORK -goversion go1.9.2 -p github.com/google/netstack/sleep -complete -buildid 91e2d39e252c9958acba4ce484c3bf8be1d6088b -D _/Users/kingyang/go/src/github.com/google/netstack/sleep -I $WORK -pack ./commit_noasm.go ./sleep_unsafe.go
github.com/google/netstack/sleep
../../../sleep/sleep_unsafe.go:78:6: missing function body
../../../sleep/sleep_unsafe.go:81:6: missing function body
github.com/google/netstack/tcpip/link/rawfile
../../link/rawfile/rawfile_unsafe.go:20:6: missing function body
../../link/rawfile/rawfile_unsafe.go:75:7: cannot use uint64(len(b1)) (type uint64) as type uint32 in field value
../../link/rawfile/rawfile_unsafe.go:79:7: cannot use uint64(len(b2)) (type uint64) as type uint32 in field value
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/golang/go/issues/23080#issuecomment-350612141, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AAAcA5h4Vgm6Gg2IrTgvf5vz80IKzvJjks5s_J2MgaJpZM4Q8ySO
.

Thanks very much, it is my fault.

How did you judge there is missing commit_arm.s？Experience？

@FlowerWrong sadly yes, you need to know the magic of how //go:linkmode is implemented in the compiler.
Because the function isn't implemented in Go, there has to be a 'stub' function, a forward declaration that tells the compiler that something else will provide the code for that function -- this is usually done by an assembly function in the same package, but in the case of //go:linkmode the function is actually another package.
This is what the -complete flag does, it says to the compiler "this package is complete, there are no functions that are not implemented in the .go source files provided on the command line. I forget exactly what -complete is needed for, I think it's to do with the internal packing of various .o files into a single .a file. Hopefully someone else can remind me, //cc @ianlancetaylor
Anyway, the compiler can't figure out complete status on its own, so it relies on the go tool to pass -complete down to it; or leave the flag off if the package contains .s assembly files. So even though you're not using assembly in this package, you need an empty .s file to signal to the go tool that the package is incomplete--there are functions implemented in other packages and brought together in the linking stage (that's why it's called //go:linkmode)--so that it won't generate that "function not defined" error during compilation.


DE29409 - Fix Hidden For Overlays in Polymer 2

Fix hidden attribute on overlays in Polymer 2
Remove the display setting for the loading spinner so the hidden attribute works as expected in Polymer 2

Added https://github.com/Brightspace/d2l-my-courses-ui/issues/514 as a reminder to go back and undo https://github.com/Brightspace/d2l-my-courses-ui/pull/511/commits/60c24f3e739756e25668e3e535302ef09282a8e4 once the latest stable version is fixed.


Make target-sqlite available to meltano projects

Migrated from GitLab: https://gitlab.com/meltano/meltano/-/issues/264
Originally created by @iroussos on 2019-01-04 19:07:38

Add target-sqlite as a loader to be discovered and added to a meltano project.

View 2 previous comments from the original issue on GitLab


simplify ciphers #839

let's not encourage (remove options 1, 2) changing your cipher suite FP
remove "it's quite technical ..."  There is practically zero
   gain doing this, but a huge downside in passive fingerprinting. Leave it up to the experts ***/

and originally had
/** CIPHERS [WARNING: do not meddle with your cipher suite: see the section 1200 intro]

which I think is better but am afraid people will miss it.


2.0.1-development examples fail - Can't Find Variable

version 2.0.1-development fails to properly execute example code.
example: using the code examples provided on the QuickStart page, located here:
http://phantomjs.org/quick-start.html
executing the following commands produces the following results:
phantomjs loadspeed.js http:/www.google.com
Loading http:/www.google.com
Loading time 1310 msec
phantomjs loadspeed.js http:/www.lowes.com
ReferenceError: Can't find variable: CQ
http://www.lowes.com/etc/clientlibs/foundation/testandtarget/testandtarget.min.js:843 in isInSimulationMode
http://www.lowes.com/etc/clientlibs/foundation/testandtarget/testandtarget.min.js:680 in init
Loading http:/www.lowes.com
Loading time 28913 msec
phantomjs loadspeed.js http:/www.homedepot.com
FAIL to load the address
Relevant information:
Fresh install of phantomjs was performed on 10-09-2015 following these instructions for a linux-based distro:
http://phantomjs.org/build.html
the actual target system is running Fedora 21 and the build was completed without any errors.

The error message you are seeing is caused by a bug in the JavaScript on Lowes' website. PhantomJS itself appears to be working correctly.  I don't know why you could not load http://www.homedepot.com/, that one works fine for me.
Note that there are supposed to be two slashes after http:.


x/crypto: Panic in chacha20 with valid counter value

What version of Go are you using (go version)?
Go 1.13.7
Does this issue reproduce with the latest release?
Yes
What operating system and processor architecture are you using (go env)?
darwin/amd64
What did you do?
Ran the following test, which reproduces the panic.
Note that this test uses the pending CL https://github.com/golang/crypto/pull/108, which adds the SetCounter method to x/crypto/chacha20. While the panic on the last valid counter value, 2^32-1, is present in the current x/crypto/chacha20, it's unlikley to be hit in typical use as the counter value cannot be set and always starts at 0.
func TestIETFQUICHeaderProtection(t *testing.T) {
	var key [32]byte
	var nonce [12]byte
	var block [64]byte
	c, _ := NewUnauthenticatedCipher(key[:], nonce[:])
	c.SetCounter(0xffffffff)
	c.XORKeyStream(block[:], block[:])
}

Background:
IETF ChaCha20 allows 2^32 blocks: https://tools.ietf.org/html/rfc7539#section-2.3.2.
IETF QUIC ChaCha20-based header protection, https://tools.ietf.org/html/draft-ietf-quic-tls-24#section-5.4.4, initializes the ChaCha20 counter with "4 bytes of [...] sampled ciphertext", so it's possible to have any counter value in [0, 2^32-1] and attempt to encrypt one block.
We hit this panic in production while using https://github.com/lucas-clemente/quic-go, which uses a recent fork of x/crypto/internal/chacha20 that exposes a function to set the counter value.
Related issue: https://github.com/lucas-clemente/quic-go/issues/2326.
What did you expect to see?
Successful test run.
What did you see instead?
=== RUN   TestIETFQUICHeaderProtection
--- FAIL: TestIETFQUICHeaderProtection (0.00s)
panic: chacha20: counter overflow [recovered]
	panic: chacha20: counter overflow

goroutine 7 [running]:
testing.tRunner.func1(0xc000094100)
	/usr/local/go/src/testing/testing.go:874 +0x3a3
panic(0x1117dc0, 0x1187e60)
	/usr/local/go/src/runtime/panic.go:679 +0x1b2
golang.org/x/crypto/chacha20.(*Cipher).XORKeyStream(0xc000034eb0, 0xc000034e70, 0x40, 0x40, 0xc000034e70, 0x40, 0x40)
	/Users/Work/Code/gopath/src/github.com/lukechampine/crypto/chacha20/chacha_generic.go:206 +0x393
golang.org/x/crypto/chacha20.TestIETFQUICHeaderProtection(0xc000094100)
	/Users/Work/Code/gopath/src/github.com/lukechampine/crypto/chacha20/chacha_test.go:32 +0x161
testing.tRunner(0xc000094100, 0x1169418)
	/usr/local/go/src/testing/testing.go:909 +0xc9
created by testing.(*T).Run
	/usr/local/go/src/testing/testing.go:960 +0x350
exit status 2
FAIL	golang.org/x/crypto/chacha20	0.322s

Here is a fix implemented by @lukechampine: https://github.com/lukechampine/crypto/commit/d3e589b4e01df3bbbbfde424de7fcc0b607f6636 (briefly discussed here: https://github.com/golang/crypto/pull/108#issuecomment-579802871).

CC @FiloSottile


Unavailable to Control

Hi All,
Not to sure what's going on here. I have re-installed the OS and project from scratch, and same result.

Have tried on both wired and wireless and either from my PC app or Mobile App, I am unable to send requests to the device.
I wonder if Spotify have changed something in their side, as this has only happened in the last couple of days.
Cheers
Sean

OK, interesting.
I connected my iPhone via BT, and noticed that what ever I played skipped - so rebooted the phone, and boom, the rPi is now available.


Fix variable name (from quite to quiet).

Small change to fix typo in variable name.

This seems like a small (but important) contribution, so no Contribution License Agreement is required at this point. We will now review your pull request.
Thanks,
Microsoft Pull Request Bot


Don't be quite so eager to short circuit

Motivation

I went to look at the logs to see if most files that had too many files were off
by 1-2 or off by hundreds or thousands, and was greeted by 51 files > 50 files
exclusively, repeated thousands of times.
Test plan

test in prod

Yes that’s correct


Error calling worker

So, I followed the documentation here and got the following IP: <IP_ADDRESS>
I setup the A record (PROXIED) along with the protocol as HTTP.
Using Postman I am able to make a GET request and get the following response
I looked before I posted this issue and found #19 and used the same website as in this comment to test it here and it responds to all pings.
The error logs are
  "outcome": "ok",
  "scriptVersion": {
    "id": "[REDACTED]"
  },
  "scriptName": "uptimeflare_worker",
  "diagnosticsChannelEvents": [],
  "exceptions": [],
  "logs": [
    {
      "message": [
        "Running scheduled event on LHR..."
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>662
    },
    {
      "message": [
        "[LHR] Checking Images Server..."
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>702
    },
    {
      "message": [
        "Calling worker: http://[REDACTED]"
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>702
    },
    {
      "message": [
        "Error calling worker: SyntaxError: Unexpected token 'e', \"error code: 521\" is not valid JSON"
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>833
    },
    {
      "message": [
        "Grace period (undefinedm) not met (currently down for 540s, changed false), skipping apprise DOWN notification for Images Server"
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>833
    },
    {
      "message": [
        "Calling config onIncident callback..."
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>833
    },
    {
      "message": [
        "statusChanged: false, lastUpdate:<PHONE_NUMBER>, currentTime:<PHONE_NUMBER>"
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>833
    },
    {
      "message": [
        "Skipping state update due to cooldown period."
      ],
      "level": "log",
      "timestamp":<PHONE_NUMBER>833
    }
  ],
  "eventTimestamp":<PHONE_NUMBER>648,
  "event": {
    "cron": "* * * * *",
    "scheduledTime":<PHONE_NUMBER>000
  },
  "id": 2
}```

Hmm... Error code 522 also indicated the origin server doesn't reply.
I noticed that the first IP(<IP_ADDRESS>) you chose doesn't fall in Cloudflare's ip list given.
<IP_ADDRESS>,<IP_ADDRESS>,US,United States,NA,North America,AS13335,"Cloudflare, Inc.",cloudflare.com starts at .0 and ends at .6, <IP_ADDRESS> is not included.
As for the second IP you chose, it is indeed in the IP list, but it really doesn't handle worker requests. Based on my comment above, this is possible, in which case you may need to try again and use another IP.
As I just tested, <IP_ADDRESS> should be an available worker IP in North America, you can try it.
(There really isn't much skill in this step, it may take some luck and trial and error...)

Yep, that IP did work, thank you for your help. Is there a list of working IPs or every time do I need to nmap it?

Glad to see you got it sorted out. Most of the IPs in the list given so far should work in my experience, there may be a few non-working IPs mixed in with some regions, I haven't tested them all yet.