woblerr / authlog_exporter Goto Github PK

I encountered a strange behavior this night. At midnight UTC, which is also 2 am local time (at 3 am local time switched back to 2 am due to daylight saving, can not say which of the bove 2 am's it was) all the authlog metrics doubled their counters. At the same time the auth.log file rotated and was emptied.

I double checked theauth.log file and there are no authentications around that time.

Additional

Container logs:

2022/10/30 00:00:18 Re-opening moved/deleted file /var/log/auth.log ...
2022/10/30 00:00:18 Successfully reopened /var/log/auth.log

Prometheus:

Hello,

We noticed that v0.4.0 is no more available on the releases section. Do you plan to build another release for this version?

Many thanks!

Installation method: docker (ghcr.io image)
Version: latest (it actually is already a few days old once I pulled it)

Expected behavior

The geo data resolving is working.

Actual behavior

Unfortunately getting geo data for IPs fails for the url method using freegeoip.live fails with this error in the logs:

level=error ts=2022-10-24T13:00:58.462Z caller=geo.go:89 msg="Error getting GeoIp URL" err="Get \"https://freegeoip.live/json/xxxxxxxxx\": x509: certificate signed by unknown authority"

Possible solution

This probably happens due to the missing ca-certificates package in the image. Adding this to the Dockerfile should add them:

RUN apk add --no-cache ca-certificates && update-ca-certificates

If you want me to open a MR with the fix I will do so once I am having time for it.