jamesits / docker-ripe-atlas Goto Github PK

View Code? Open in Web Editor NEW

142.0 12.0 22.0 46 KB

This is the RIPE Atlas software probe packaged as a Docker image.

Home Page: https://hub.docker.com/r/jamesits/ripe-atlas

License: GNU General Public License v3.0

Dockerfile 71.38% Shell 28.62%

ripe-atlas

docker-ripe-atlas's Introduction

RIPE Atlas Docker Image

This is the RIPE Atlas software probe packaged as a Docker image.

Requirements

1 CPU core (of course)
20MiB memory
100MiB HDD
A Linux installation with Docker installed
Internet access

Running

Using `docker run`

First we start the container:

docker run --detach --restart=always \
	--log-driver json-file --log-opt max-size=10m \
	--cpus=1 --memory=64m --memory-reservation=64m \
	--cap-drop=ALL --cap-add=CHOWN --cap-add=SETUID --cap-add=SETGID --cap-add=DAC_OVERRIDE --cap-add=NET_RAW \
	-v /var/atlas-probe/etc:/var/atlas-probe/etc \
	-v /var/atlas-probe/status:/var/atlas-probe/status \
	-e RXTXRPT=yes \
	--name ripe-atlas --hostname "$(hostname --fqdn)" \
	jamesits/ripe-atlas:latest

Using Docker Compose

An example docker-compose.yaml is provided.

git clone https://github.com/Jamesits/docker-ripe-atlas.git
cd docker-ripe-atlas
docker-compose pull
docker-compose up -d

Registering the Probe

Fetch the generated public key:

cat /var/atlas-probe/etc/probe_key.pub

Register the probe with your public key. After the registration being manually processed, you'll see your new probe in your account.

Building

If you don't want to use the prebuilt image hosted on the Docker Hub, you can build your own image.

DOCKER_BUILDKIT=1 docker build -t ripe-atlas .

Note that building this container image requires BuildKit.

Caveats

IPv6

Docker does not enable IPv6 by default. If you want IPv6 support, some level of setup and a basic understanding of IPv6 is required. Swarm mode & some Kubernetes implementation supports IPv6 too with extra configuration.

Using native address assignment

If you happened to have a block of static IPv6 addresses routed to your host, you can directly assign one of the addresses to the container. Edit /etc/docker/daemon.json and add native IPv6 address blocks, then restart the Docker daemon. An example:

{
  "ipv6": true,
  "fixed-cidr-v6": "2001:db8:a1a3::/48"
}

Notes:

These config work on Docker for Linux only
If daemon.json exists, merge the config lines instead of directly overwriting it; if it doesn't exist, create it manually
For more info, see the official doc

Using NAT (NPTv6)

If your ISP does not conform to BCOP 690 (very common), and/or your router cannot route smaller blocks of IPv6 to one server even if it has been assigned a block of valid IPv6 addresses (also very common), the method above might not work for you. As a workaround, you can setup NAT with either Docker's builtin experimental IPv6 NAT support, robbertkl/docker-ipv6nat or similar projects. Manual iptables/nftables NAT setup is also possible, but hanc marginis exiguitas non caperet.

Firstly, edit kernel parameters to enable IPv6 routing.

cat > /etc/sysctl.d/50-docker-ipv6.conf <<EOF
net.ipv6.conf.eth0.accept_ra=2
net.ipv6.conf.all.forwarding=1
net.ipv6.conf.default.forwarding=1
EOF
sysctl -p /etc/sysctl.d/50-docker-ipv6.conf

Notes:

This potentially introduces more attack surface and might require you set up IPv6 firewall rules to make yourself safe
This might break your network and your mileage may vary
Swap eth0 with your primary network adapter name
If you use static IPv6 assignment instead of SLAAC, change accept_ra to 0

Secondly, create a IPv6 NAT enabled network.

docker network create --ipv6 --subnet=fd00:a1a3::/48 ripe-atlas-network
docker run -d --restart=always -v /var/run/docker.sock:/var/run/docker.sock:ro -v /lib/modules:/lib/modules:ro --cap-drop=ALL --cap-add=NET_RAW --cap-add=NET_ADMIN --cap-add=SYS_MODULE --net=host --name=ipv6nat robbertkl/ipv6nat:latest

Finally, start the RIPE Atlas container with argument --net=ripe-atlas-network.

Auto Update

Use this recipe for auto updating the docker container.

docker run --detach --restart=always -v /var/run/docker.sock:/var/run/docker.sock --name watchtower containrrr/watchtower --cleanup --label-enable

Then start the RIPE Atlas container with argument --label=com.centurylinklabs.watchtower.enable=true.

Backup

All the config files are stored at /var/atlas-probe. Just backup it.

docker-ripe-atlas's People

Contributors

Stargazers

Watchers

docker-ripe-atlas's Issues

Error from docker logs

I found the statistics of in/out traffic on RIPE probe panel is always zero so I looked into the logs of the docker image and found above message.
Could you please look into it and see what could be the reason ?

Issue with latest Version 02.03.2021

Updated to lastest version 02.03.2021, ripe atlas website shows probe as offline

Probe did work with this settings for the last 3 weeks

Host: Unraid
Docker run command:
docker run -d --name='ripe-atlas' --net='br0.199' --ip='172.30.199.11' --privileged=false -e TZ="Europe/Berlin" -e HOST_OS="Unraid" -e 'RXTXRPT'='yes' -v '/mnt/user/appdata/atlas/etc/':'/var/atlas-probe/etc/':'rw' -v '/mnt/user/appdata/atlas/status/':'/var/atlas-probe/status/':'rw' --cap-add=SYS_ADMIN --cap-add=NET_RAW --cap-add=CHOWN --dns 172.30.199.1 --mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M --name ripe-atlas --hostname "$(hostname --fqdn)" 'jamesits/ripe-atlas'

Log

RXTXRPT=yes
RESULT 9000 done 1614662862 000000000000 STARTING ATLAS system initialized (reboot count 0)
RESULT 9000 done 1614662862 000000000000 STARTING TELNETD LOCALLY
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.30.199.11 netmask 255.255.255.0 broadcast 172.30.199.255
inet6 obfuscated:199::2 prefixlen 64 scopeid 0x0<global>
inet6 fe80::42:acff:fe1e:c70b prefixlen 64 scopeid 0x20<link>
ether 02:42:ac:1e:c7:0b txqueuelen 0 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1 bytes 110 (110.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

chmod: changing permissions of '/var/atlas-probe/data': Operation not permitted
perd: in my_exit (exit was called!)
Aborted
eperd: in my_exit (exit was called!)
Aborted
RESULT 9006 done 1614662862 000000000000 no reginit.vol start registeration
/var/atlas-probe/status/reginit.vol does not exist try new reg
And we are done
Ping works

g
ATLAS registeration starting
registeration info is still valid till 1614664745, now 1614662865
check cached controller info from previous registeration

NO cached controller info. NO REMOTE port info

Do a controller INIT

Controller init -p 443 [email protected] INIT

255 controller INIT exit with error

255 controller INIT exit with error

docker inspect ripe-atlas

    {
        "Id": "83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d",
        "Created": "2021-03-02T05:57:41.134522258Z",
        "Path": "entrypoint.sh",
        "Args": [
            "atlas"
        ],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 15866,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2021-03-02T05:57:41.703165863Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:a35ef62d863c38699894be73d655a4f8aa5b4bb7a0e1e152076ac6bcf5e67d16",
        "ResolvConfPath": "/var/lib/docker/containers/83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d/hostname",
        "HostsPath": "/var/lib/docker/containers/83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d/hosts",
        "LogPath": "/var/lib/docker/containers/83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d/83352bc056afee2e059f2fa92669bb62eb5d504152e609c3b3f89d47e92ec74d-json.log",
        "Name": "/ripe-atlas",
        "RestartCount": 0,
        "Driver": "btrfs",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": [
            "3498eee6946859a1a193e9ffd163e28fdd170068c9bcdd756e8efe6bfb3838fd"
        ],
        "HostConfig": {
            "Binds": [
                "/mnt/user/appdata/atlas/etc/:/var/atlas-probe/etc/:rw",
                "/mnt/user/appdata/atlas/status/:/var/atlas-probe/status/:rw"
            ],
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {
                    "max-file": "1",
                    "max-size": "50m"
                }
            },
            "NetworkMode": "br0.199",
            "PortBindings": {},
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": [
                "SYS_ADMIN",
                "NET_RAW",
                "CHOWN"
            ],
            "CapDrop": null,
            "Capabilities": null,
            "Dns": [
                "172.30.199.1"
            ],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "Mounts": [
                {
                    "Type": "tmpfs",
                    "Target": "/var/atlasdata",
                    "TmpfsOptions": {
                        "SizeBytes": 67108864
                    }
                }
            ],
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": null,
            "Name": "btrfs"
        },
        "Mounts": [
            {
                "Type": "bind",
                "Source": "/mnt/user/appdata/atlas/etc",
                "Destination": "/var/atlas-probe/etc",
                "Mode": "rw",
                "RW": true,
                "Propagation": "rprivate"
            },
            {
                "Type": "bind",
                "Source": "/mnt/user/appdata/atlas/status",
                "Destination": "/var/atlas-probe/status",
                "Mode": "rw",
                "RW": true,
                "Propagation": "rprivate"
            },
            {
                "Type": "tmpfs",
                "Source": "",
                "Destination": "/var/atlasdata",
                "Mode": "",
                "RW": true,
                "Propagation": ""
            }
        ],
        "Config": {
            "Hostname": "AMY",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "HOST_OS=Unraid",
                "RXTXRPT=yes",
                "TZ=Europe/Berlin",
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "atlas"
            ],
            "Image": "jamesits/ripe-atlas",
            "Volumes": {
                "/var/atlas-probe/etc": {},
                "/var/atlas-probe/status": {}
            },
            "WorkingDir": "/var/atlas-probe",
            "Entrypoint": [
                "entrypoint.sh"
            ],
            "OnBuild": null,
            "Labels": {
                "image": "ripe-atlas",
                "maintainer": "[email protected]"
            }
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "688716f430454a64a19bf58766c8f3e99fe7f47ed8b3cc19bd607a3e849807aa",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "/var/run/docker/netns/688716f43045",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "",
            "Gateway": "",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "",
            "IPPrefixLen": 0,
            "IPv6Gateway": "",
            "MacAddress": "",
            "Networks": {
                "br0.199": {
                    "IPAMConfig": {
                        "IPv4Address": "172.30.199.11"
                    },
                    "Links": null,
                    "Aliases": [
                        "83352bc056af"
                    ],
                    "NetworkID": "9a743a1ba5b62fedbaa25481ff7bf55ae77467d4073b3608546ccc5b24bcb836",
                    "EndpointID": "119972601dc58ac09bbbab396423ef4914f3aeff79f2aecc9fd19fc99cb7c980",
                    "Gateway": "172.30.199.1",
                    "IPAddress": "172.30.199.11",
                    "IPPrefixLen": 24,
                    "IPv6Gateway": "obfuscated:199::1",
                    "GlobalIPv6Address": "obfuscated:199::2",
                    "GlobalIPv6PrefixLen": 64,
                    "MacAddress": "02:42:ac:1e:c7:0b",
                    "DriverOpts": null
                }
            }
        }
    }
]

IPv4 connectivity not working

So I have Pi that has a public IPv4/IPv6 address on the WAN interface (eth0), Docker itself has a routed /64 available for its use and the containers get a /128 GUA that's publicly reachable.

So the problem is, my Ripe Atlas Probe has IPv6 connectivity without a problem, but IPv4 does not work for some reason. Docker is correctly NATting by masquerading to the public IP of my Pi's WAN interface, but when checking on the RIPE Website, the Probe has a private IPv4 address from Docker, but no public access to the IPv4 world. Any ideas on what's the issue here?

Pi OS Lite 64-Bit
Used the following to spin up the container

docker run --detach --restart=always --log-opt max-size=10m
--cpus=1 --memory=64m --memory-reservation=64m
--cap-add=SYS_ADMIN --cap-add=NET_RAW --cap-add=CHOWN
--mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M
-v /var/atlas-probe/etc:/var/atlas-probe/etc
-v /var/atlas-probe/status:/var/atlas-probe/status
-e RXTXRPT=yes
--name ripe-atlas --hostname "$(hostname --fqdn)"
jamesits/ripe-atlas:latest-armv7l

Can't register software probe

Installed the software probe open image and trying to register the probe with public key return the following registration error:

"The public key does not match our regular expression for this keytype"

They key is the on present in the direcroty: /var/atlas-probe

Tried to generate a new one but nothing happens

Cant get the public key

Hi,
I'm using a OrangPi PC2 ( Ubuntu Bionic with Armbian Linux 4.19.57-sunxi64) , with the latest Docker version:

Client: Docker Engine - Community
 Version:           19.03.10
 API version:       1.40
 Go version:        go1.13.10
 Git commit:        9424aea
 Built:             Thu May 28 22:16:52 2020
 OS/Arch:           linux/arm64
 Experimental:      false

Downlad and Instalation seems fine:

sudo docker run --detach --restart=always --log-opt max-size=10m --cpus=1 --memory=64m --memory-reservation=64m --cap-add=SYS_ADMIN --cap-add=CAP_NET_RAW --cap-add=CAP_CHOWN --mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M -v /var/atlas-probe/etc:/var/atlas-probe/etc -v /var/atlas-probe/status:/var/atlas-probe/status -e RXTXRPT=yes --name ripe-atlas --hostname "$(hostname --fqdn)" jamesits/ripe-atlas:latest

Unable to find image 'jamesits/ripe-atlas:latest' locally
latest: Pulling from jamesits/ripe-atlas
afb6ec6fdc1c: Pull complete
f75594497621: Pull complete
89b686e178f6: Pull complete
3ba4e9e2fd5b: Pull complete
88f765b5befd: Pull complete
Digest: sha256:19ffe016171d50e761cead6a33f5b2ded51262ee8a1732c9869ff62df29a65bb
Status: Downloaded newer image for jamesits/ripe-atlas:latest
f27e411cafd8c1997953a4f4cbc14c6c3c22d4ea8e954a76648f5c69ea923f50

but when I run:
$ cat /var/atlas-probe/etc/probe_key.pub
I get:
cat: /var/atlas-probe/etc/probe_key.pub: No such file or directory

Seeing '/var/atlasdata is not mounted' in the log

I've got this running through Portainer in Home Assistant (formerly Hassio) on a RPi3. But I keep running into the log error '/var/atlasdata is not mounted', appearing after startup of the probe looks to go correctly.

Log starts out:

Option RXTXRPT=yes
/usr/local/bin/atlas: 175: /usr/local/atlas/bin/arch/debian-sw-probe/debian-sw-probe-ATLAS.sh: cannot open /var/atlas-probe/etc/probe_key.pub: No such file
Generating public/private rsa key pair.
Your identification has been saved in /var/atlas-probe/etc/probe_key.
Your public key has been saved in /var/atlas-probe/etc/probe_key.pub.
The key fingerprint is:
KEY HERE

The key's randomart image is:
+---[RSA 2048]----+...

I've tried adding a volume mapping for var/atlasdata" but it results in the same error, but at an earlier point, even before the log shows the probe started up.

The compose file I'm using:

version: '2.4'
services:
    ripe-atlas:
      restart: unless-stopped
      volumes:
         - '/var/atlas-probe/etc:/var/atlas-probe/etc'
         - '/var/atlas-probe/status:/var/atlas-probe/status'
      environment:
         - RXTXRPT=yes
      container_name: ripe-atlas
      image: 'jamesits/ripe-atlas:latest-armv7l'

ARM CI seems to have been broken for a few weeks

The Azure logs seem to indicate that docker isn't running on the CI machine? Not sure what that indicates.

Probe registered and worked, then stopped

Probe registered and worked for some time, but stopped in few hours and haven't been online for 19+ hours.

It has this repeated many times:

{ "name": "lo", "bytes_recv": 1144069, "pkt_recv": 12263, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 1144069, "pkt_sent": 12263, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }, { "name": "tunl0", "bytes_recv": 0, "pkt_recv": 0, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 0, "pkt_sent": 0, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }, { "name": "gre0", "bytes_recv": 0, "pkt_recv": 0, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 0, "pkt_sent": 0, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }, { "name": "gretap0", "bytes_recv": 0, "pkt_recv": 0, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 0, "pkt_sent": 0, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }RESULT 9006 done 1615238073 000000000000 no reginit.vol start registeration
/var/atlas-probe/status/reginit.vol does not exist try new reg
[warn] Unable to parse nameserver address 8.8.4.4
[warn] Unable to parse nameserver address 2003:c2:3f04:d100:<redacted>
evping: bad address 'U181146.Hd99726584cb21a35.sos.atlas.ripe.net'
evping_ops.init failed

Ping failed


g
ATLAS registeration starting
registeration info is still valid till 1615239686, now 1615238073
check cached controller info from previous registeration

NO cached controller info. NO REMOTE port info

Do a controller INIT

Controller init -p 443 [email protected] INIT

255 controller INIT exit with error

condmv: not moving, destination '/var/atlas-probe/data/out/v6addr.txt' exists
condmv: not moving, destination '/var/atlas-probe/data/out/simpleping' exists

p.s. I changed /etc/resolv.conf with google dns to see if it will fix ipv6 related issues, no dice but it worked for a while.
This is on UnRaid.

Docker run error "Unknown capability: CAP_CAP_NET_RAW" following README.md instructions

Specifically:
docker: Error response from daemon: linux spec capabilities: Unknown capability to add: "CAP_CAP_NET_RAW".

Command:
sudo docker run --detach --restart=always --log-opt max-size=10m --cpus=1 --memory=64m --memory-reservation=64m --cap-add=SYS_ADMIN --cap-add=CAP_NET_RAW --cap-add=CAP_CHOWN --mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M -v /var/atlas-probe/etc:/var/atlas-probe/etc -v /var/atlas-probe/status:/var/atlas-probe/status -e RXTXRPT=yes --name ripe-atlas --hostname "$(hostname --fqdn)" jamesits/ripe-atlas:latest-armv7l

Fix:
corrected syntax of capabilities, ie:
--cap-add=NET_RAW --cap-add=CHOWN

Sysinfo:

$ uname -a
Linux kecchi 5.4.45-sunxi #20.05.3 SMP Wed Jun 10 12:09:20 CEST 2020 armv7l GNU/Linux

$ lsb_release -a
No LSB modules are available.
Distributor ID:	Debian
Description:	Debian GNU/Linux 10 (buster)
Release:	10
Codename:	buster

Several problems

Hi,

first I would like to thank you for the image. Really convenient to have everything already pulled together.
I installed the container on my Synology NAS. And I ran into some problems.

It starts with the permission problem others have reported too:
chmod: changing permissions of '/var/atlas-probe/data': Operation not permitted | stderr

Unfortunately I couldn't locate the code doing this. I checked on all directories in the container and to me they seemed to have the right permissions.

Second problem:
My probe didn't connect to the Ripe servers. After a lot of testing and actuallty installing additional software in the container I found that ssh was not accepting the private key because of too lose permissions.
When fixed the probe connected immediately to the Ripe servers.
Any idea what could have caused this problem? I am willing to do some tests. Could be good to find out before the deployathon.

Third problem:
My probe keeps repeating logs like this
{ "name": "eth0", ... }found KEEP ssh client running rptaddrs: error writing to '0�xܸ�': Success { "name": "eth0", ... }found KEEP ssh client running Segmentation fault (core dumped)
Why is it logging to some strange filename? Anything I can do about this?
And where could the segmentation fult come from?
Is there any possibility to enable debug logging?

Kind regards

/Ulrich

unknown flag: --log-driver json-file

The commandline flags in Readme.md are no longer compatible with docker 20.10, which is the oldest supported version
unknown flag: --log-driver json-file
unknown flag: --log-opt max-size

Specific network interface

Hey!

This container can use specific network interface to access the world?
I mean i have this:

2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether f0:4d:a2:02:aa:8f brd ff:ff:ff:ff:ff:ff
    inet 185.148.xxx.xxx/26 brd 185.148.aaa.aaa scope global eno1
       valid_lft forever preferred_lft forever
    inet 185.148.xxx.zzz/26 brd 185.148.aaa.aaa scope global secondary eno1:0
       valid_lft forever preferred_lft forever

So, I've got 2 white static ips: 185.148.xxx.xxx and 185.148.xxx.zzz, and I want to probe going to world with ip address 185.148.xxx.zzz

How can i do this?

Errors after getting the latest image

I enabled auto-update in my Docker container and observed that my probe got disconnected. It seems that something is broken because I'm encountering errors related to libcrypto.so.1.1. Here are the relevant logs for reference:

/usr/local/atlas/bb-13.3/bin/rptaddrs: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/bin/atlas: 297: [: -gt: unexpected operator
cat: /var/atlas-probe/run/perd-main.pid.vol: No such file or directory
cat: /var/atlas-probe/run/perd-7.pid.vol: No such file or directory
cat: /var/atlas-probe/run/eooqd.pid.vol: No such file or directory
RESULT 9006 done 1686636436 0242ac110005 no reginit.vol start registration
/var/atlas-probe/status/reginit.vol does not exist try new reg
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/evping: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
Ping failed
�
g
ATLAS registration starting
REREG_TIMER 1686603295 expired now is 1686636436
REREG_TIMER_EXPIRED go re register REREG_TIMER 1 , now is 1686636436
/usr/local/atlas/bb-13.3/bin/rchoose: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@ INIT
255 REGINIT exit with error
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptaddrs: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/bin/atlas: 297: [: -gt: unexpected operator
cat: /var/atlas-probe/run/perd-main.pid.vol: No such file or directory
cat: /var/atlas-probe/run/perd-7.pid.vol: No such file or directory
cat: /var/atlas-probe/run/eooqd.pid.vol: No such file or directory
RESULT 9006 done 1686636616 0242ac110005 no reginit.vol start registration
/var/atlas-probe/status/reginit.vol does not exist try new reg
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/evping: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
Ping failed
�
g
ATLAS registration starting
REREG_TIMER 1686603295 expired now is 1686636616
REREG_TIMER_EXPIRED go re register REREG_TIMER 1 , now is 1686636616
/usr/local/atlas/bb-13.3/bin/rchoose: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@ INIT
255 REGINIT exit with error
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptaddrs: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/bin/atlas: 297: [: -gt: unexpected operator
cat: /var/atlas-probe/run/perd-main.pid.vol: No such file or directory
cat: /var/atlas-probe/run/perd-7.pid.vol: No such file or directory
cat: /var/atlas-probe/run/eooqd.pid.vol: No such file or directory
RESULT 9006 done 1686636796 0242ac110005 no reginit.vol start registration
/var/atlas-probe/status/reginit.vol does not exist try new reg
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/evping: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
Ping failed
�
g
ATLAS registration starting
REREG_TIMER 1686603295 expired now is 1686636796
REREG_TIMER_EXPIRED go re register REREG_TIMER 1 , now is 1686636796
/usr/local/atlas/bb-13.3/bin/rchoose: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@ INIT
255 REGINIT exit with error
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptaddrs: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/bin/atlas: 297: [: -gt: unexpected operator
cat: /var/atlas-probe/run/perd-main.pid.vol: No such file or directory
cat: /var/atlas-probe/run/perd-7.pid.vol: No such file or directory
cat: /var/atlas-probe/run/eooqd.pid.vol: No such file or directory
RESULT 9006 done 1686636976 0242ac110005 no reginit.vol start registration
/var/atlas-probe/status/reginit.vol does not exist try new reg
/usr/local/atlas/bb-13.3/bin/onlyuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/evping: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
Ping failed
�
g
ATLAS registration starting
REREG_TIMER 1686603295 expired now is 1686636976
REREG_TIMER_EXPIRED go re register REREG_TIMER 1 , now is 1686636976
/usr/local/atlas/bb-13.3/bin/rchoose: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@ INIT
255 REGINIT exit with error
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rxtxrpt: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptaddrs: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/rptuptime: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
/usr/local/atlas/bb-13.3/bin/condmv: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory

Add option to override UID:GID of the atlas user

Hi,

I'm trying to get this container running using persistent storage on an NFS share, but I keep getting the below error:

chown: changing ownership of '/var/atlas-probe/status': Operation not permitted

I see in the entrypoint.sh file that it chown's the directories with atlas:atlas, so I need to set the container's atlas:atlas UID/GID to 1000:100 which are the permissions on the NFS share, however I've tried using --user="1000:100" to no avail.

Here is my docker run command:

docker run --rm --name ripe-atlas --user="1000:100" --log-opt max-size=10m  --cap-add=SYS_ADMIN --cap-add=NET_RAW --cap-add=CHOWN --mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M -v /nfs/docker/ripe/etc:/var/atlas-probe/etc -v /nfs/docker/ripe/status:/var/atlas-probe/status -e RXTXRPT=yes --hostname "$(hostname --fqdn)" jamesits/ripe-atlas:latest-armv7l

Thanks!

seccomp issue with Debian 11 on 32-bit ARM machines

After upgrading the base image to Debian 11, I noticed Atlas stopped working on some 32-bit ARM devices.

Symptoms

root@bananapir2:~# docker run --rm -it debian:stable-slim
Unable to find image 'debian:stable-slim' locally
stable-slim: Pulling from library/debian
a384a395da99: Already exists 
Digest: sha256:bd53ab674a48598863d4902d867fab6fa8f1da4f67a2d14b32785398e40c5f18
Status: Downloaded newer image for debian:stable-slim
root@72a4e03037ea:/# sleep 0
sleep: cannot read realtime clock: Operation not permitted

root@bananapir2:~# docker run --rm -it debian:10-slim
Unable to find image 'debian:10-slim' locally
10-slim: Pulling from library/debian
8f4c08df22a9: Pull complete 
Digest: sha256:69f5980eb8901ca6829d36f2aea008f3cdb39a23aec23511054a6801244cbaa5
Status: Downloaded newer image for debian:10-slim
root@b95e87c8b798:/# sleep 0

The Debian 11 image also fails to do some other tasks:

root@bananapir2:/usr/local/mesh# docker run --rm -it debian:stable-slim
root@2b43c215e1d8:/# which sleep
/bin/sleep
root@2b43c215e1d8:/# apt update
Get:1 http://security.debian.org/debian-security stable-security InRelease [44.1 kB]
Err:1 http://security.debian.org/debian-security stable-security InRelease
  At least one invalid signature was encountered.
Get:2 http://deb.debian.org/debian stable InRelease [116 kB]
Get:3 http://deb.debian.org/debian stable-updates InRelease [39.4 kB]
Err:2 http://deb.debian.org/debian stable InRelease
  At least one invalid signature was encountered.
Err:3 http://deb.debian.org/debian stable-updates InRelease
  At least one invalid signature was encountered.
Reading package lists... Done
W: GPG error: http://security.debian.org/debian-security stable-security InRelease: At least one invalid signature was encountered.
E: The repository 'http://security.debian.org/debian-security stable-security InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://deb.debian.org/debian stable InRelease: At least one invalid signature was encountered.
E: The repository 'http://deb.debian.org/debian stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://deb.debian.org/debian stable-updates InRelease: At least one invalid signature was encountered.
E: The repository 'http://deb.debian.org/debian stable-updates InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Workaround

Build Script

Temporary reverted the base image to Debian 10.

Docker side

If you still need Debian 11 images:

Add --security-opt seccomp:unconfined to the docker run commandline.

For Docker Compose, add the following config under the service:

    security_opt:
      - seccomp:unconfined

Host OS

Upgrade libseccomp2 to 2.5.1-1~bpo10+1 or higher.

Environment

Hardware:

Banana Pi 2

Software:

# docker info
Client:
 Context:    default
 Debug Mode: false
 Plugins:
  app: Docker App (Docker Inc., v0.9.1-beta3)
  buildx: Docker Buildx (Docker Inc., v0.8.2-docker)

Server:
 Containers: 2
  Running: 2
  Paused: 0
  Stopped: 0
 Images: 4
 Server Version: 20.10.16
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 212e8b6fa2f44b9c21b2798135fc6fb7c53efc16
 runc version: v1.1.1-0-g52de29d
 init version: de40ad0
 Security Options:
  seccomp
   Profile: default
 Kernel Version: 4.19.204-mt7623
 Operating System: Debian GNU/Linux 10 (buster)
 OSType: linux
 Architecture: armv7l
 CPUs: 4
 Total Memory: 1.963GiB
 Name: bananapir2
 ID: NEVZ:ZDFD:QVHQ:QPUI:TE72:E4JA:TRS7:LKTM:OKV6:HPA2:T74L:V7JX
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 Registry: https://index.docker.io/v1/
 Labels:
 Experimental: true
 Insecure Registries:
  127.0.0.0/8
 Live Restore Enabled: true

.

docker log format

So adding just --log-opt max-size=10m in the docker (20.10.11) command line throws error like
docker: Error response from daemon: unknown log opt 'max-size' for journald log driver.
I have been running these command on my Pi with log type defined like every time for last ...
--log-driver json-file --log-opt max-size=5m

Does this call for an update of the reference command line?

Anyhow keep up the good work...

why need SYS_ADMIN,NET_RAW,CHOWN ?

/var/atlas-probe/data Operation not permitted

After fresh docker container install i have this at docker logs

...
chmod: changing permissions of '/var/atlas-probe/data': Operation not permitted
perd: in my_exit (exit was called!)
Aborted (core dumped)
eperd: in my_exit (exit was called!)
...

# ls -lah /var/atlas-probe/
total 16K
drwxr-xr-x  4 root            root   4,0K апр 28 13:15 .
drwxr-xr-x 15 root            root   4,0K апр 28 13:15 ..
drwxr-xr-x  2 systemd-resolve docker 4,0K апр 28 13:15 etc
drwxr-xr-x  2 systemd-resolve docker 4,0K апр 28 13:15 status

Maybe i need to set some permissions for directories after container start?

Ping Failed, & /var/atlasdata is not mounted

Hi James,

I want to deploy the SW RIPE Probe so
I created a new docker container using the script

docker run --detach --restart=always --log-opt max-size=10m \ --cpus=1 --memory=64m --memory-reservation=64m \ --cap-add=SYS_ADMIN --cap-add=CAP_NET_RAW --cap-add=CAP_CHOWN \ --mount type=tmpfs,destination=/var/atlasdata,tmpfs-size=64M \ -v /var/atlas-probe/etc:/var/atlas-probe/etc \ -v /var/atlas-probe/status:/var/atlas-probe/status \ -e RXTXRPT=yes \ --name ripe-atlas --hostname "$(hostname --fqdn)" \ jamesits/ripe-atlas:latest

then I checked the docker container logs as below:

Option RXTXRPT=yes
Generating public/private rsa key pair.
Your identification has been saved in /var/atlas-probe/etc/probe_key.
Your public key has been saved in /var/atlas-probe/etc/probe_key.pub.
The key fingerprint is:
|        ...+     |
+----[SHA256]-----+
RXTXRPT=yes
RESULT 9000 done 1593340811 0242ac110002 STARTING ATLAS system initialized (reboot count 0)
RESULT 9000 done 1593340811 0242ac110002 STARTING TELNETD LOCALLY
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 172.17.0.2  netmask 255.255.0.0  broadcast 172.17.255.255
        ether 02:42:ac:11:00:02  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

RESULT 9006 done 1593340811 0242ac110002 no reginit.vol start registeration
/var/atlas-probe/status/reginit.vol does not exist try new reg
Ping failed
start reg
ATLAS registeration starting
REASON_FOR_REGISTRATION NEW NO previous state files
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -i /var/atlas-probe/etc/probe_key -p 443 atlas@2001:67c:2e8:11::c100:13f7 INIT
255  REGINIT exit with error
 { "name": "eth0", "bytes_recv": 229, "pkt_recv": 2, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 144, "pkt_sent": 2, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }, { "name": "lo", "bytes_recv": 0, "pkt_recv": 0, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 0, "pkt_sent": 0, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }Moving reboot-count.txt
RESULT 9006 done 1593340991 0242ac110002 no reginit.vol start registeration
/var/atlas-probe/status/reginit.vol does not exist try new reg
Ping failed
start reg
ATLAS registeration starting
REASON_FOR_REGISTRATION NEW NO previous state files
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -i /var/atlas-probe/etc/probe_key -p 443 [email protected] INIT
255  REGINIT exit with error
/usr/local/bin/atlas: 175: /usr/local/atlas/bin/arch/debian-sw-probe/debian-sw-probe-ATLAS.sh: cannot open /var/atlas-probe/etc/probe_key.pub: No such file
chmod: changing permissions of '/var/atlas-probe/data': Operation not permitted
perd: in my_exit (exit was called!)
Aborted
eperd: in my_exit (exit was called!)
Aborted
And we are done
rptaddrs: error writing to '': Success
And we are done
Segmentation fault
condmv: not moving, destination '/var/atlas-probe/data/out/simpleping' exists

my OS is CentOS7.

I can not see where the issue is.

Container keeps trying to register using IPv6 despite being disabled

Hello,

I'm facing an issue while trying to register a new probe. The network attached to the container has IPv6 disabled, and IPv6 is disabled in container using sysctl options.
Am I missing something? The logs seems to show that the container keeps trying to register using IPv6 connectivity:

ATLAS registration starting
REASON_FOR_REGISTRATION NEW NO previous state files
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@2001:67c:2e8:11::c100:13f6 INIT
255  REGINIT exit with error
condmv: not moving, destination '/var/atlas-probe/data/out/v6addr.txt' exists
condmv: not moving, destination '/var/atlas-probe/data/out/simpleping' exists
 { "name": "lo", "bytes_recv": 838, "pkt_recv": 8, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 838, "pkt_sent": 8, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }, { "name": "eth0", "bytes_recv": 1738, "pkt_recv": 20, "errors_recv": 0, "dropped_recv": 0, "fifo_recv": 0, "framing_recv": 0, "compressed_recv": 0, "multicast_recv": 0, "bytes_sent": 699, "pkt_sent": 9, "errors_sent": 0, "dropped_sent": 0, "fifo_sent": 0, "collisions_sent": 0, "carr_lost_sent": 0, "compressed_sent": 0 }RESULT 9006 done 1706622763 0242ac130009 no reginit.vol start registration
/var/atlas-probe/status/reginit.vol does not exist try new reg
Ping failed
�
g
ATLAS registration starting
REASON_FOR_REGISTRATION NEW NO previous state files
REGHOSTS reg03.atlas.ripe.net 193.0.19.246 2001:67c:2e8:11::c100:13f6 reg04.atlas.ripe.net 193.0.19.247 2001:67c:2e8:11::c100:13f7
ssh -p 443 atlas@2001:67c:2e8:11::c100:13f7 INIT
255  REGINIT exit with error
condmv: not moving, destination '/var/atlas-probe/data/out/v6addr.txt' exists
condmv: not moving, destination '/var/atlas-probe/data/out/simpleping' exists

Thanks for your help.