Treat a comment-only CrowdSec online_api_credentials.yaml as not registered; delay Monit's first cycle #61

Open
opened 2026-09-30 17:21:11 -03:00 by marcos-mendez · 0 comments
marcos-mendez commented 2026-09-30 17:21:11 -03:00 (Migrated from github.com)

From the review of keel-core#17 (step 4 of 0041), 2026-09-30. (1) keel-core's image build pre-seeds /etc/crowdsec/online_api_credentials.yaml with a comment so crowdsec's postinst skips online registration in the chroot; conf.d removes it. If it ever leaked into an image, keel's crowdsec.py:101-106 would read it as registered and never run cscli capi register. Treat a file with no credentials (comments or empty) as absent. (2) Monit's first cycle after boot reports webmin and postfix inactive once; add a start delay (set daemon ... with start delay) or an After= drop-in so the first check follows the services it watches.

From the review of keel-core#17 (step 4 of 0041), 2026-09-30. (1) keel-core's image build pre-seeds /etc/crowdsec/online_api_credentials.yaml with a comment so crowdsec's postinst skips online registration in the chroot; conf.d removes it. If it ever leaked into an image, keel's crowdsec.py:101-106 would read it as registered and never run cscli capi register. Treat a file with no credentials (comments or empty) as absent. (2) Monit's first cycle after boot reports webmin and postfix inactive once; add a start delay (set daemon ... with start delay) or an After= drop-in so the first check follows the services it watches.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Keel-Linux/keel#61
No description provided.