puppet-run.service failing on rude
Nagios is warning about degraded system services on rude. Checking systemctl --failed
, the only failing service is puppet-run. I tried starting it by hand in case it was a transient issue, but it fails with the same error message.
Jan 18 13:51:33 rude systemd[1]: Started puppet-run.service - Run the Puppet agent on this machine.
Jan 18 13:51:50 rude puppet-agent[1571786]: (/Postgresql_psql[ALTER ROLE rtuser ENCRYPTED PASSWORD ****]) Unable to mark 'unless' as sensitive: unless is a parameter and not a property, and cannot be automatically redacted.
Jan 18 13:51:51 rude crontab[1571944]: (root) LIST (root)
Jan 18 13:51:51 rude crontab[1571945]: (root) LIST (rtmailarchive)
Jan 18 13:51:51 rude crontab[1571946]: (root) LIST (colin)
Jan 18 13:52:05 rude puppet-agent[1571786]: (/Stage[main]/Profile::Rt/File[/etc/spamassassin/kam.sa-channels.mcgrail.com.key]) Could not evaluate: Could not retrieve information from environment production source(s) https://mcgrail.com/downloads/kam.sa-channels.mcgrail.com.key
Jan 18 13:52:05 rude puppet-agent[1571786]: (/Stage[main]/Profile::Rt/Exec[import KAM channel key]) Dependency File[/etc/spamassassin/kam.sa-channels.mcgrail.com.key] has failures: true
Jan 18 13:52:05 rude puppet-agent[1571786]: (/Stage[main]/Profile::Rt/Exec[import KAM channel key]) Skipping because of failed dependencies
Jan 18 13:52:05 rude puppet-agent[1571786]: (/Stage[main]/Profile::Rt/Cron[update KAM ruleset]) Skipping because of failed dependencies
Jan 18 13:52:09 rude puppet-agent[1571786]: Applied catalog in 18.97 seconds
Jan 18 13:52:10 rude systemd[1]: puppet-run.service: Main process exited, code=exited, status=4/NOPERMISSION
Jan 18 13:52:10 rude systemd[1]: puppet-run.service: Failed with result 'exit-code'.
Jan 18 13:52:10 rude systemd[1]: puppet-run.service: Consumed 12.406s CPU time.
the specific problem here seems to be that puppet can't fetch a key file from mcgrail.com
.