1.65 update failed about synapse_ynh HOT 11 CLOSED

Thanks for getting back to me.

1. I executed the commands and after that I was able to restore the backup (1.59).
2. When I tried to upgrade to 1.65 it failed because fail2ban wasn't running.
3. I restarted it manually and I attempted to upgrade synapse. This time it failed because user synapse existed, so I removed it and tried again.
4. The upgrade failed once more because fail2ban was down again. After restarting it I tried to upgrade synapse and this time it worked.

I'm sharing my fail2ban log here just in case it can be of use.
Otherwise this ticket can be closed.

Thank you for your help

from synapse_ynh.

No link to fail2ban. Did you already create a yunohost user synapse on your instance manually ? If yes you must remove it to fix your issue because the app need a user synapse.

I didn't.

There's a matrix-synapse user created by yunohost, but no synapse user.

Ok but in yunohost user (in LDAP) not a system user

from synapse_ynh.

I dared to try to upgrade my 2nd instance, but this time I made sure I removed my_webapp before the attempt, and everything went fine. 1.59 > 1.65 without issues.

This is what I keep getting when I try to restore the backup for the 1st instance:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/yunohost/backup.py", line 1453, in _restore_app
    permission_create(
  File "/usr/lib/python3/dist-packages/yunohost/log.py", line 419, in func_wrapper
    result = func(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/yunohost/permission.py", line 410, in permission_create
    raise YunohostValidationError("permission_already_exist", permission=permission)
yunohost.utils.error.YunohostValidationError: 'synapse.main' permission already exists

from synapse_ynh.

To force the removal of these permissions, type the following commands:

sudo yunohost tools shell -c "from yunohost.permission import permission_delete; permission_delete('synapse.main', force=True)"
sudo yunohost tools shell -c "from yunohost.permission import permission_delete; permission_delete('synapse.server_api', force=True)"
sudo yunohost tools shell -c "from yunohost.permission import permission_delete; permission_delete('synapse.server_client_infos', force=True)"

Then you should be able to restore your synapse backup (if the webapp on same domain is still removed)

from synapse_ynh.

My instance also failed upgrading and restoring, restoring failed with
2022-09-07 17:18:44,951: DEBUG - Sep 07 17:18:44 python[29324]: AttributeError: module '\''lib'\'' has no attribute '\''X509_V_FLAG_CB_ISSUER_CHECK'\''
Has anyone observed that error yet?

from synapse_ynh.

Also happening here. These are my upgrade logs: https://paste.yunohost.org/raw/hoyajehase

Also these are the relevant fail2ban logs:

Oct 26 07:58:42 systemd[1]: Stopping Fail2Ban Service...
Oct 26 07:58:44 fail2ban-client[18885]: Shutdown successful
Oct 26 07:58:44 systemd[1]: fail2ban.service: Succeeded.
Oct 26 07:58:44 systemd[1]: Stopped Fail2Ban Service.
Oct 26 07:58:44 systemd[1]: Starting Fail2Ban Service...
Oct 26 07:58:44 systemd[1]: Started Fail2Ban Service.
Oct 26 07:58:46 fail2ban-server[18888]: 2022-10-26 07:58:46,203 fail2ban                [18888]: ERROR   Failed during configuration: Have not found any log file for synapse jail
Oct 26 07:58:46 fail2ban-server[18888]: 2022-10-26 07:58:46,207 fail2ban                [18888]: ERROR   Async configuration of server failed
Oct 26 07:58:46 systemd[1]: fail2ban.service: Main process exited, code=exited, status=255/EXCEPTION
Oct 26 07:58:46 systemd[1]: fail2ban.service: Failed with result 'exit-code'.
Oct 26 08:03:55 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.
Oct 26 08:03:56 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.
Oct 26 08:03:57 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.

The process was:

1. fail2ban working
2. upgrading synapse, fail2ban fails
3. after synapse upgrade finishes its rollback, fail2ban can be started again

That makes me think synapse is doing something that breaks fail2ban, which in turn breaks synapse upgrade

I already repeated the process twice, and always happens the same.

Luckily, in my case the rollback worked fine. Unluckily, mautrix_telegram is dead now.

from synapse_ynh.

Also happening here. These are my upgrade logs: https://paste.yunohost.org/raw/hoyajehase

Also these are the relevant fail2ban logs:

Oct 26 07:58:42 systemd[1]: Stopping Fail2Ban Service...
Oct 26 07:58:44 fail2ban-client[18885]: Shutdown successful
Oct 26 07:58:44 systemd[1]: fail2ban.service: Succeeded.
Oct 26 07:58:44 systemd[1]: Stopped Fail2Ban Service.
Oct 26 07:58:44 systemd[1]: Starting Fail2Ban Service...
Oct 26 07:58:44 systemd[1]: Started Fail2Ban Service.
Oct 26 07:58:46 fail2ban-server[18888]: 2022-10-26 07:58:46,203 fail2ban                [18888]: ERROR   Failed during configuration: Have not found any log file for synapse jail
Oct 26 07:58:46 fail2ban-server[18888]: 2022-10-26 07:58:46,207 fail2ban                [18888]: ERROR   Async configuration of server failed
Oct 26 07:58:46 systemd[1]: fail2ban.service: Main process exited, code=exited, status=255/EXCEPTION
Oct 26 07:58:46 systemd[1]: fail2ban.service: Failed with result 'exit-code'.
Oct 26 08:03:55 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.
Oct 26 08:03:56 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.
Oct 26 08:03:57 systemd[1]: fail2ban.service: Unit cannot be reloaded because it is inactive.

The process was:

1. fail2ban working

2. upgrading synapse, fail2ban fails

3. after synapse upgrade finishes its rollback, fail2ban can be started again

That makes me think synapse is doing something that breaks fail2ban, which in turn breaks synapse upgrade

I already repeated the process twice, and always happens the same.

Luckily, in my case the rollback worked fine. Unluckily, mautrix_telegram is dead now.

No link to fail2ban. Did you already create a yunohost user synapse on your instance manually ? If yes you must remove it to fix your issue because the app need a user synapse.

from synapse_ynh.

My instance also failed upgrading and restoring, restoring failed with 2022-09-07 17:18:44,951: DEBUG - Sep 07 17:18:44 python[29324]: AttributeError: module '\''lib'\'' has no attribute '\''X509_V_FLAG_CB_ISSUER_CHECK'\'' Has anyone observed that error yet?

Please create a other issue with the full log because it could be not the same error.

from synapse_ynh.

Look like that the original issue was fixed here so closing this issue.

from synapse_ynh.

No link to fail2ban. Did you already create a yunohost user synapse on your instance manually ? If yes you must remove it to fix your issue because the app need a user synapse.

I didn't.

There's a matrix-synapse user created by yunohost, but no synapse user.

from synapse_ynh.

Thanks, indeed there was a synapse yunohost user. I don't know why it was there. Maybe remainders of an old broken update... Deleting it fixed the update!

from synapse_ynh.