Comments (8)
Is this message the only thing you are seeing? It would make sense that edgeAgent would be unable to decrypt the stored configuration since keys rotated, and I can reproduce the message when using persistent host storage, but they occur on startup, and iotedge is in a running and healthy state afterwards
from iotedge.
Hi @bilalsellak, that's the only error message that I see in the logs. I'm persist edgeAgent and edgeHub storage on the host https://learn.microsoft.com/en-us/azure/iot-edge/how-to-access-host-storage-from-module?view=iotedge-1.5
from iotedge.
Thanks for linking that. What I am asking is if your edge device works as intended, even though you see that message on restart?
from iotedge.
No, my edge device did not restart after the command "sudo iotedge config apply". If I delete the storage of the edgeAgent and edgeHub, then my edge device restart and work again.
from iotedge.
Hmm. I am unable to reproduce this following the same steps.
I can reproduce the error message, but from what I can tell, its expected due to using local storage and iotedge trying to access the old keys.
Other than that, iotedge is in a working state. Can you share ss of what modules are running and the iotedge check after doing
sudo iotedge system stop and then
sudo iotedge config apply
from iotedge.
Hi Bilal, thanks for handling this. Here my observations whereby Siegfried (shaeussler) must provide conclusive information tomorrow during normal business hours.
-
Siegfried said he had to delete the (Rocks) DB directory contents on the OS to achieve a successful restart. Did you not have to do this?
-
We are unsure if we can just "trash" the DB files in every case to resolve the startup problem. Is there nothing that can go wrong by deleting those files? ... we don't know everything they are used for and we are using the iot-edge in both online and offline mode for significant periods. When we do the key refresh, we are online, of course.
-
So the error can be "officially ignored", in production, in this case?
Bottom line (from my perspecive) at the moment is: if you can tell us that, in production, the the error is "inert" and so is deleting the Rocks DB directories contents, then I guess we may have a way to achieve our deterministic key update.
Looking forward to clearing this up with you all. Sincere thanks.
from iotedge.
- No, I did not have to delete any local storage to have a successful restart
- Host storage is used when the device is offline. Since when you refresh your keys, you're online, it would not cause any issues
- Yes, from my testing and what the error looks to be from.
from iotedge.
Hmm. I am also unable to reproduce the error again.
I tested my EST server Azure IoT Edge setup with provisioning IoT Edge devices at scale on Linux using X.509 certificates https://learn.microsoft.com/en-us/azure/iot-edge/how-to-provision-devices-at-scale-linux-x509?view=iotedge-1.5&tabs=individual-enrollment%2Cubuntu and provisioning IoT Edge devices at scale with a TPM on Linux https://learn.microsoft.com/en-us/azure/iot-edge/how-to-provision-devices-at-scale-linux-x509?view=iotedge-1.5&tabs=individual-enrollment%2Cubuntu and cannot reproduce the error. After testing the certificate renewal https://learn.microsoft.com/en-us/azure/iot-edge/tutorial-configure-est-server?view=iotedge-1.5#test-certificate-renewal I saw AZIOT_KEYS_RC_ERR_EXTERNAL errors in the logs but the iotedge system starts successful without deleting the local storage.
from iotedge.
Related Issues (20)
- "Did not receive ack for message / System.TimeoutException: Message completion response not received" errors after environment upgrade HOT 3
- Iot edge not starting on debian bullseye HOT 2
- IoT Edge child node unable to connect to IoT Edge transparent gateway HOT 3
- User module unable to connect to Hub with 'Communication_error' HOT 1
- EdgeHub fails to parse valid D2C creation time UTC string
- Disable Edge CA renewal did not work
- Is it possible to manually renew the Edge CA certificates? HOT 3
- Runtime: Metrics collector cannot be added to garbage collection list HOT 5
- After a reboot, the edgeAgent won't start any module while using an unreliable connection HOT 4
- How to run aziot-edge in a docker container?
- While offline, edgeHub fails after automatic renewal of certificates HOT 5
- IoT Edge installation and configuration issues HOT 1
- TLS Authentication issue with ModuleClient HOT 4
- Change the default protocol to other options on SimulatedTemperatureSensor HOT 2
- IoT Edge Agent randomly stops and fails to restart on Ubuntu Core
- Missing Ubuntu 24.04 aziot-edge and aziot-identity-service packages HOT 2
- Device Provisioning with Azure IoTHub for Ubuntu 22.04 using Trusted Platform Module(TPM) HOT 2
- SimulatedTemperatureSensor tutorial -> Module stop from Azure portal get exception into the module itself HOT 1
- Bring back kubernetes operator support. HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from iotedge.